Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a366631303a3a2f34382d3438203d3e203136393039.roa
File: 326131343a373538343a366631303a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier: /12oG7ZYkhunq3lbQP7QaXUkFPycHOVaC0xG2u4P0V8=
Subject key identifier: 93:B2:A9:98:5B:6F:0C:7D:D1:DD:26:DF:EB:50:0A:D4:C8:DF:42:F1
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 2A622C9F6851321B7A1B3EA1BD3EC8938FED8FBC
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a366631303a3a2f34382d3438203d3e203136393039.roa
Signing time: Sat 08 Feb 2025 20:11:38 +0000
ROA not before: Sat 08 Feb 2025 20:06:38 +0000
ROA not after: Sat 07 Feb 2026 20:11:38 +0000
asID: 16909
IP address blocks: 2a14:7584:6f10::/48 maxlen: 48
Validation: Failed, certificate revoked on Sat 15 Feb 2025 20:42:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2a:62:2c:9f:68:51:32:1b:7a:1b:3e:a1:bd:3e:c8:93:8f:ed:8f:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: Feb 8 20:06:38 2025 GMT
Not After : Feb 7 20:11:38 2026 GMT
Subject: CN=93B2A9985B6F0C7DD1DD26DFEB500AD4C8DF42F1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:1a:b7:16:de:1e:77:c4:c8:0a:e6:f3:10:0e:
a7:da:7c:a1:df:fc:3e:37:c6:40:46:a5:93:34:88:
fb:6c:12:9e:06:3e:1f:45:39:ad:f8:8c:bc:98:7b:
61:94:16:3e:74:43:dd:78:39:08:ac:3d:78:cc:f8:
37:2d:25:ba:f6:6e:1a:dc:78:90:1d:fb:e6:85:6c:
98:2e:f7:57:59:51:d3:22:8f:c2:cf:8b:7d:47:e3:
a4:fb:d5:8d:e6:65:86:3d:d9:3b:4f:b1:46:14:ac:
a0:aa:f4:28:3b:96:d4:34:ca:af:88:71:d7:06:61:
8a:30:41:29:fd:c7:a1:e3:ed:34:ae:3b:db:f6:68:
3e:46:01:19:03:bc:12:8e:b6:5c:4d:e3:ee:0d:eb:
cb:81:da:3f:4a:5d:ac:1c:1f:76:34:18:e0:5b:3a:
1c:45:38:b8:85:e2:bf:55:fb:b9:e7:34:1e:97:57:
06:26:37:ba:73:cc:57:a4:36:5a:b6:53:06:3a:27:
c3:54:db:92:08:8d:71:41:af:6b:8c:07:09:2b:1e:
de:d4:71:b4:76:26:1f:f5:3f:e6:b4:a8:a2:82:de:
08:ea:57:7d:26:ac:3f:40:b7:27:5a:61:9a:b4:0e:
82:de:dc:2a:b5:29:06:d1:94:7c:c1:18:f4:27:87:
06:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:B2:A9:98:5B:6F:0C:7D:D1:DD:26:DF:EB:50:0A:D4:C8:DF:42:F1
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a366631303a3a2f34382d3438203d3e203136393039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:6f10::/48
Signature Algorithm: sha256WithRSAEncryption
76:4f:e4:c0:00:1e:56:45:57:dc:6e:b0:60:f0:35:f3:60:ab:
71:8b:85:2a:6f:03:13:b9:56:f8:7d:b9:71:c1:3a:8a:35:fa:
a2:1c:be:a5:fc:bb:c1:42:81:cb:1d:e0:a9:f2:f8:47:bf:e2:
7d:24:8d:7e:d3:2a:52:78:c5:be:88:8e:a5:7d:3f:f7:29:ed:
ef:45:03:47:1e:ec:2d:5c:59:6f:75:31:59:b3:33:ab:2e:e9:
82:88:d6:df:73:18:b6:1f:9f:c1:51:ec:8f:26:69:c8:69:c0:
2b:d8:e1:52:61:b9:bd:c9:79:9f:5c:6a:06:19:f8:a0:59:40:
4c:2d:db:fa:75:37:29:4e:e5:6a:18:3b:42:88:7d:ad:58:c6:
a0:a1:a2:ea:8b:6e:f0:a6:3f:69:8b:bc:43:51:9f:c4:fc:c3:
c5:8a:39:af:20:61:34:61:ab:13:31:35:e6:33:c7:fe:28:51:
00:79:b7:8f:09:c9:87:45:d8:cc:30:b6:48:7e:15:e1:80:fb:
a3:c4:fb:5f:70:a0:eb:de:7b:3a:d8:24:ac:2a:8e:08:e9:e9:
83:0f:d9:e7:b2:91:18:9d:12:f1:70:74:93:f3:a7:20:95:bc:
f3:66:a6:f8:64:c3:5a:de:ea:a2:2c:32:38:33:5f:04:62:b3:
a3:71:19:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 00:51:44 2025 by rpki-client