Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a366635303a3a2f34382d3438203d3e203136393039.roa
File: 326131343a373538343a366635303a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier: sFj5sKooJ+pj+8tgLahDoIMK2URoL6yyyR79WWj+kUY=
Subject key identifier: DA:14:C2:8F:66:4D:DF:45:6D:49:74:FF:D7:79:77:D6:AD:BC:6B:28
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 5E7D5FFF92BF33CBA27BE7EB6671F77317DCE327
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a366635303a3a2f34382d3438203d3e203136393039.roa
Signing time: Mon 10 Feb 2025 15:02:31 +0000
ROA not before: Mon 10 Feb 2025 14:57:31 +0000
ROA not after: Mon 09 Feb 2026 15:02:31 +0000
asID: 16909
IP address blocks: 2a14:7584:6f50::/48 maxlen: 48
Validation: Failed, certificate revoked on Sat 15 Feb 2025 20:42:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5e:7d:5f:ff:92:bf:33:cb:a2:7b:e7:eb:66:71:f7:73:17:dc:e3:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: Feb 10 14:57:31 2025 GMT
Not After : Feb 9 15:02:31 2026 GMT
Subject: CN=DA14C28F664DDF456D4974FFD77977D6ADBC6B28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:a5:cf:c3:ba:b8:15:34:d7:b4:63:27:4e:46:
a9:9b:21:ea:ec:09:61:f4:bf:06:f4:0a:8e:f9:e2:
47:1c:4b:d3:ef:b6:73:5e:1b:5f:d3:6e:8c:97:3c:
3d:f0:6b:c1:69:8e:59:07:2e:ae:7e:50:e1:fa:f0:
7d:db:a1:d3:7d:b5:c1:bc:09:b4:3a:28:83:77:f1:
6f:3d:55:84:06:6d:a1:d3:dd:9f:15:52:78:64:d3:
af:ea:54:ff:99:f3:66:4c:0c:a7:ef:30:2c:6e:20:
07:39:49:cb:06:c0:8a:7b:90:b2:23:89:eb:9a:9c:
aa:5e:04:f0:1e:a7:44:e3:09:c2:f1:8b:ae:98:82:
21:82:db:ce:33:e6:24:99:9c:6b:94:b0:b5:ed:f7:
fd:07:22:e6:92:b4:73:af:ae:2b:f3:05:38:f6:18:
0a:d9:bf:f9:bf:73:c8:3d:e6:6f:e8:b6:7a:aa:35:
cf:36:64:e2:66:1c:37:0a:be:ec:5d:88:25:02:9a:
c5:00:52:99:4f:e7:c7:2e:fd:1a:de:11:40:c3:75:
40:8d:57:6f:8a:5d:ae:09:ea:8f:a2:05:ac:41:c9:
a3:91:ff:1a:ee:63:bb:88:e0:ee:35:3b:a7:9a:43:
81:83:75:75:87:78:56:aa:79:1b:e7:10:e3:9a:ea:
08:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:14:C2:8F:66:4D:DF:45:6D:49:74:FF:D7:79:77:D6:AD:BC:6B:28
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a366635303a3a2f34382d3438203d3e203136393039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:6f50::/48
Signature Algorithm: sha256WithRSAEncryption
5c:0a:6c:5b:7e:c7:9b:f3:e5:76:35:7f:ed:31:d1:b5:cb:d0:
03:b9:d6:91:32:66:08:65:6a:6b:25:99:d4:80:a0:ed:2f:38:
78:1e:31:c9:2c:2f:4b:34:7a:37:fe:d8:52:4d:c1:57:22:a5:
9a:41:34:5a:fc:49:56:5e:cd:b2:13:7f:99:1c:ea:72:f6:7c:
a5:b2:2d:58:df:f4:d9:40:87:b9:68:7b:cd:07:76:25:8e:f9:
e3:b0:a2:8a:8f:3a:0d:2e:5e:50:45:35:35:6a:b2:2a:3b:2a:
1b:5a:c7:59:f8:40:da:d7:88:19:9a:20:4f:16:fd:54:a8:9d:
1a:5c:5b:a1:76:af:15:86:5c:d7:9f:2d:13:70:41:f5:a4:70:
ef:72:c3:68:ac:b9:43:1c:1a:19:0a:52:a8:6f:44:dc:ad:67:
86:01:9a:bd:02:10:ab:a2:25:71:fc:e0:a8:37:29:8a:5e:82:
89:b2:8a:60:c8:2c:ae:05:fc:f2:41:6c:c9:22:8b:58:be:a8:
97:f0:a1:27:53:29:fd:8f:5f:73:29:25:25:54:c8:c1:ec:91:
07:81:05:ee:4d:19:30:37:27:b6:8d:6c:56:26:f5:4b:64:2e:
1a:47:c1:c7:26:6a:dd:ac:c5:3c:63:41:7f:c7:35:f4:77:3a:
3c:b2:80:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 00:50:27 2025 by rpki-client