Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a366630303a3a2f34382d3438203d3e203136393039.roa
File: 326131343a373538343a366630303a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier: cK7Q3bQ0GSIlqOY7v0SNfS6KEuzTCXo3RYYtKFXnCUw=
Subject key identifier: A2:92:4D:C1:12:64:8D:6F:5C:4E:CB:96:9D:06:37:B4:96:A6:B8:35
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 201776039BA3AF75C71D8221BE277548049B9654
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a366630303a3a2f34382d3438203d3e203136393039.roa
Signing time: Sat 08 Feb 2025 20:11:37 +0000
ROA not before: Sat 08 Feb 2025 20:06:37 +0000
ROA not after: Sat 07 Feb 2026 20:11:37 +0000
asID: 16909
IP address blocks: 2a14:7584:6f00::/48 maxlen: 48
Validation: Failed, certificate revoked on Sat 15 Feb 2025 20:42:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
20:17:76:03:9b:a3:af:75:c7:1d:82:21:be:27:75:48:04:9b:96:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: Feb 8 20:06:37 2025 GMT
Not After : Feb 7 20:11:37 2026 GMT
Subject: CN=A2924DC112648D6F5C4ECB969D0637B496A6B835
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:16:53:f1:0d:6c:69:95:0d:74:a3:f1:77:b3:
79:bf:1b:27:87:ac:b3:43:19:70:f0:71:b0:61:1e:
14:21:0a:85:80:d5:3e:bb:01:1d:57:aa:b9:52:b4:
50:13:8c:c7:22:35:f5:b2:0e:bb:2f:3c:1b:0e:9b:
a6:d4:c3:c9:cc:0c:86:ea:4b:ef:60:ea:5f:b4:c2:
34:55:a3:25:09:bf:f6:00:a2:41:aa:1d:5a:a0:17:
7a:cd:42:d6:10:49:a0:a6:97:7f:e8:98:8d:af:15:
d1:f8:67:05:be:b5:df:d2:00:8f:6f:69:0f:ff:cb:
62:fa:cd:eb:2c:23:16:0d:ff:c8:fd:5a:37:d3:be:
f5:5e:83:ef:a0:b6:50:d3:74:08:f3:96:a2:2b:d0:
ea:3a:ab:ae:ad:06:34:52:d1:e9:bc:43:15:42:e7:
10:af:32:0e:50:46:01:6b:ea:11:46:90:88:1b:6c:
c6:94:b3:1d:ef:0b:ac:0c:b6:4f:77:49:40:35:36:
a8:1f:33:05:02:11:d1:01:9e:b0:0a:80:5b:65:ec:
58:a9:af:06:36:9a:92:1e:ab:80:1a:b0:46:76:7f:
73:9c:96:be:52:f9:99:c7:25:4e:65:79:60:c2:e6:
36:17:59:56:2e:bd:e5:3d:02:f8:c5:62:d5:fe:ea:
c7:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:92:4D:C1:12:64:8D:6F:5C:4E:CB:96:9D:06:37:B4:96:A6:B8:35
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a366630303a3a2f34382d3438203d3e203136393039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:6f00::/48
Signature Algorithm: sha256WithRSAEncryption
39:fd:93:d5:5f:a9:b1:63:20:65:c7:9b:d1:ed:78:af:e2:de:
09:11:6b:45:b9:de:7e:8a:5c:83:09:19:65:90:0f:7a:4d:c6:
24:09:af:22:df:88:3c:57:1b:a0:de:8f:f4:de:52:84:fe:de:
ea:6f:ab:ce:3a:98:d0:a2:cd:1c:c0:da:cd:71:b6:aa:2d:0f:
e3:a4:a5:b1:57:4c:95:3d:d3:37:3f:24:72:25:32:5b:db:9b:
66:e2:fe:d2:1f:95:00:4d:19:15:a1:6c:c2:28:29:5a:aa:b2:
67:2e:7e:e0:4e:4e:5e:a6:da:62:33:47:75:18:35:51:72:11:
6e:62:18:a2:96:7c:d9:da:8c:7a:57:9b:76:61:34:89:bb:dd:
2c:4f:b8:6e:5e:2d:7b:db:fc:f3:02:4d:fa:a1:57:b3:2e:b1:
46:4f:27:af:8e:df:ea:90:f1:e0:c4:c4:ff:f1:3b:11:62:de:
d3:1a:da:60:71:7f:b8:89:ec:89:62:2e:7c:78:f2:26:6d:61:
ed:e2:19:59:2d:19:01:2a:a8:f7:74:3d:02:03:2c:a9:aa:f5:
03:2c:d8:62:b0:df:9c:b9:e4:48:6d:67:f6:b7:8b:cf:57:8e:
5c:35:27:19:00:44:8e:ff:e2:81:8e:de:f0:5c:7d:b8:6f:6b:
5c:e6:12:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 00:50:30 2025 by rpki-client