Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a366566303a3a2f34382d3438203d3e203136393039.roa
File: 326131343a373538343a366566303a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier: YBN/3bdK1by2fNubC+nMqaGn5mjA5ne5hG+wK82FQ0Q=
Subject key identifier: DD:82:D3:52:B3:7B:12:48:3D:BB:F1:7D:09:94:D7:DB:2E:40:CE:01
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 684AA7392FDECB7198FE351A21E228200AF1E1EF
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a366566303a3a2f34382d3438203d3e203136393039.roa
Signing time: Thu 19 Dec 2024 20:47:52 +0000
ROA not before: Thu 19 Dec 2024 20:42:52 +0000
ROA not after: Thu 18 Dec 2025 20:47:52 +0000
asID: 16909
IP address blocks: 2a14:7584:6ef0::/48 maxlen: 48
Validation: Failed, certificate revoked on Tue 24 Dec 2024 20:48:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
68:4a:a7:39:2f:de:cb:71:98:fe:35:1a:21:e2:28:20:0a:f1:e1:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: Dec 19 20:42:52 2024 GMT
Not After : Dec 18 20:47:52 2025 GMT
Subject: CN=DD82D352B37B12483DBBF17D0994D7DB2E40CE01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:25:1a:c6:dd:98:9b:0e:b6:30:65:7a:27:eb:
70:a4:f1:01:3b:bd:66:36:02:5f:46:88:ab:bd:0e:
37:c6:3d:f8:a8:44:21:af:7a:ba:65:81:7b:2b:04:
ed:20:24:d2:8b:99:21:70:e5:b2:6a:e8:6d:11:65:
6d:7a:e3:44:a6:9b:32:15:d7:84:47:7f:dc:fd:21:
3f:60:ca:03:94:62:7e:da:29:4b:17:ef:dd:43:16:
93:8b:c3:22:75:2c:56:7e:ab:11:ea:70:fb:ac:b8:
83:5f:d4:c8:6d:4a:51:f4:54:95:45:39:43:ed:7a:
cd:ad:5d:93:af:70:76:5f:0f:a3:c1:7c:2c:b1:07:
89:ac:49:82:11:ab:38:43:fb:10:37:19:00:d7:59:
63:b2:23:fe:a0:27:60:b6:c1:0b:8f:9a:19:e5:ae:
dc:7b:3b:91:44:02:a2:76:3a:06:cf:3d:f9:76:e1:
f3:97:71:eb:4b:89:2e:4e:33:bc:96:c0:84:dd:85:
f0:95:b1:dd:12:e8:37:b6:e9:44:45:13:a2:39:c0:
8a:11:81:f9:31:b0:b4:8e:20:a0:1c:50:9e:2f:02:
4d:61:39:f9:30:9e:11:f3:16:c9:d2:79:28:19:aa:
f8:0d:0a:0d:19:d8:10:2e:48:e4:d3:23:74:4b:f9:
6e:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:82:D3:52:B3:7B:12:48:3D:BB:F1:7D:09:94:D7:DB:2E:40:CE:01
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a366566303a3a2f34382d3438203d3e203136393039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:6ef0::/48
Signature Algorithm: sha256WithRSAEncryption
34:ee:0f:ea:77:c3:12:da:9c:2f:94:8c:19:d8:22:f9:c9:9f:
cb:e8:dd:d2:bf:8f:dd:27:58:49:72:a3:f0:80:29:4b:71:2e:
3b:7d:f0:a8:9a:59:3e:21:49:dd:1a:bd:45:db:3a:69:8a:32:
4e:ac:5b:a7:e6:4d:50:09:8c:e0:8a:32:5b:9d:56:cb:0d:1b:
93:8a:d5:e1:76:7e:9a:27:54:9d:63:e8:ac:33:fb:22:2d:de:
d6:8b:87:84:45:11:03:05:6a:60:61:a4:1c:ed:b7:c7:1b:6e:
10:fe:87:dc:83:cc:41:59:f3:1d:12:d9:ae:74:c9:66:69:56:
9f:ae:c4:ff:2d:b6:9a:63:24:3b:ea:4b:75:e1:e7:c4:7e:dd:
95:0f:b9:6b:08:75:61:8d:6c:97:c9:f0:5e:aa:1f:65:3f:5d:
8a:b4:7d:3f:a0:b1:aa:37:22:96:7b:05:01:46:54:d3:a2:38:
9d:7b:14:b7:f0:8a:02:27:c4:6a:5d:ce:4f:69:c4:0c:d0:20:
38:2d:e4:41:01:82:f4:41:2b:21:fa:78:d9:76:7c:70:35:2c:
d1:37:4a:22:3f:d5:90:04:12:02:bc:96:7c:f3:eb:b3:ed:5c:
32:86:46:7a:5a:9d:7e:0c:a9:fd:a2:f3:54:6f:ff:52:e7:ff:
21:07:bc:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 00:50:23 2025 by rpki-client