Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a366562303a3a2f34382d3438203d3e203136393039.roa
File: 326131343a373538343a366562303a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier: H5uGZdIuj6PjXCRpG2TRz4WFwRc2fcSp+03gU6sYyYM=
Subject key identifier: FD:BA:50:44:CC:DE:74:5D:40:36:F3:6D:F8:F1:F2:E7:D2:C8:DE:74
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 50637DD589FD1F4796D2796F691CE35DD9794C64
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a366562303a3a2f34382d3438203d3e203136393039.roa
Signing time: Sat 08 Feb 2025 20:11:34 +0000
ROA not before: Sat 08 Feb 2025 20:06:34 +0000
ROA not after: Sat 07 Feb 2026 20:11:34 +0000
asID: 16909
IP address blocks: 2a14:7584:6eb0::/48 maxlen: 48
Validation: Failed, certificate revoked on Sat 15 Feb 2025 20:42:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
50:63:7d:d5:89:fd:1f:47:96:d2:79:6f:69:1c:e3:5d:d9:79:4c:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: Feb 8 20:06:34 2025 GMT
Not After : Feb 7 20:11:34 2026 GMT
Subject: CN=FDBA5044CCDE745D4036F36DF8F1F2E7D2C8DE74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:74:08:79:a0:6b:78:75:08:60:5b:1c:59:4b:
40:68:03:d1:89:9b:9b:03:fa:bf:97:22:a7:2e:7e:
97:fb:c1:8d:0a:96:7b:33:02:cb:ab:6e:a2:2f:c8:
c4:87:1a:94:be:b1:33:ee:83:1c:e7:a2:fa:9d:01:
96:65:06:c6:94:f5:d1:b5:b7:57:6b:3a:c7:96:8e:
37:ff:0a:1a:06:ce:d2:30:47:8d:db:c1:29:66:a4:
f0:78:f5:49:d6:8d:c2:97:bb:68:d2:2a:2f:15:25:
1b:88:9e:82:4a:73:14:45:fc:a3:ac:d3:be:51:26:
d9:25:02:12:0b:f2:95:cd:0f:aa:14:52:bc:a5:90:
cf:84:cc:ce:a3:dd:f3:92:78:38:71:f4:3b:e7:8d:
d1:78:c6:46:26:6f:58:08:0f:ae:eb:a1:5a:7a:94:
bc:c6:2d:1b:cd:bf:11:a6:38:d6:40:fd:a9:77:47:
1c:d3:90:02:1d:d6:e5:c4:8d:da:0f:5a:b3:e5:4a:
2f:1e:14:6e:c4:2a:e9:9f:40:22:ee:f1:1c:d9:f3:
54:e4:59:10:d2:b8:81:8b:22:4b:b4:56:cd:1a:bc:
04:c1:01:26:a5:69:c0:49:a2:6d:2f:1c:01:6c:5c:
70:73:08:aa:d8:30:25:9f:47:96:7d:a8:0b:4e:72:
00:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:BA:50:44:CC:DE:74:5D:40:36:F3:6D:F8:F1:F2:E7:D2:C8:DE:74
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a366562303a3a2f34382d3438203d3e203136393039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:6eb0::/48
Signature Algorithm: sha256WithRSAEncryption
2b:55:1d:0d:44:68:39:60:4f:8b:05:68:00:69:d8:35:1c:df:
c5:5a:d3:4c:c1:2b:1a:d1:0b:88:94:e3:dc:0c:ad:76:4c:38:
c7:b4:59:19:f2:fd:24:9f:d9:39:0e:d9:d0:95:6d:00:61:84:
d9:c7:92:9c:c9:11:6c:6b:e5:4b:92:15:d0:b5:54:72:13:36:
11:a1:d8:c0:aa:fa:a4:df:82:94:5c:40:b6:22:75:0d:58:ec:
ce:78:98:67:4c:5c:05:91:e6:8f:88:32:80:f9:9c:31:36:71:
e2:b5:19:73:0e:d4:f9:23:a6:19:e6:29:55:11:6b:f7:14:10:
e6:7e:72:e0:d0:fe:4d:10:9f:a9:db:8e:22:51:79:70:ab:cc:
95:de:37:fb:ba:73:91:e9:42:0f:ae:9d:88:af:09:dd:db:ff:
ea:d6:cd:e2:cc:c6:ef:0f:6c:ce:10:6b:be:86:61:85:1b:bd:
8b:c8:9d:d1:b1:d9:49:a7:5e:85:ab:b2:a9:67:86:e4:e7:6d:
27:2d:52:1b:b0:06:e6:bf:dd:55:10:1a:f7:36:89:7c:79:13:
f9:a4:a4:9e:b9:ce:7d:dd:b7:dc:5c:9c:a4:4e:92:fa:69:b1:
04:bd:6b:87:08:53:c9:b7:5d:ee:a0:eb:ab:67:d6:10:11:5a:
dd:7b:8d:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 00:50:37 2025 by rpki-client