Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363036303a3a2f34382d3438203d3e203136393039.roa
File: 326131343a373538343a363036303a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier: Nn+aIYfxFt8Y311SGVeXBXjP7dPNr4HtLca6PGxqC8M=
Subject key identifier: E1:7A:11:ED:8B:6F:8F:C0:37:97:C5:52:E6:C3:B8:36:33:C0:5B:4F
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 28BAFF4470DCE195551C867C5304F4D1D0763AB8
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363036303a3a2f34382d3438203d3e203136393039.roa
Signing time: Sun 29 Dec 2024 15:23:18 +0000
ROA not before: Sun 29 Dec 2024 15:18:18 +0000
ROA not after: Sun 28 Dec 2025 15:23:18 +0000
asID: 16909
IP address blocks: 2a14:7584:6060::/48 maxlen: 48
Validation: Failed, certificate revoked on Fri 03 Jan 2025 18:43:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
28:ba:ff:44:70:dc:e1:95:55:1c:86:7c:53:04:f4:d1:d0:76:3a:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: Dec 29 15:18:18 2024 GMT
Not After : Dec 28 15:23:18 2025 GMT
Subject: CN=E17A11ED8B6F8FC03797C552E6C3B83633C05B4F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:31:3b:9b:65:03:fb:2c:98:ae:85:1b:f1:b8:
ca:92:83:22:b1:43:7e:b6:80:9f:b6:7a:14:36:77:
08:33:42:15:66:22:25:4e:5d:76:2c:76:1d:96:93:
be:9a:0b:db:0c:91:8e:10:36:b7:f3:06:9a:e2:f4:
c9:e3:57:40:c2:e7:3a:5f:89:d3:7e:2b:a4:75:49:
66:f9:be:c4:5d:95:35:ce:8b:88:a0:0b:07:b8:c9:
d5:c2:fc:7b:d2:17:b0:d8:44:df:4a:1f:6a:70:df:
a0:6e:a6:d8:ff:93:cc:e9:d6:e8:54:95:df:1c:df:
20:bb:94:03:d3:d9:9f:4d:09:e9:85:3f:1c:2b:62:
2d:3c:1d:89:29:a6:cc:92:94:0a:48:72:10:77:a5:
49:33:1d:f4:28:d0:4e:e4:3f:63:56:fa:61:77:28:
30:fb:aa:b3:ff:c4:9a:ce:51:25:be:92:35:81:c1:
a2:12:dc:23:ae:ed:a1:f6:8a:56:58:d6:51:bf:bf:
64:36:8b:f4:6d:b4:a7:19:79:1c:bc:cb:81:c8:6c:
05:a9:17:7b:37:4d:8c:0d:05:ea:9e:5e:bb:eb:1d:
21:8c:ec:db:a4:c2:ce:4e:99:e0:01:ca:13:2a:77:
42:fb:a8:c9:d8:c0:a9:34:b0:48:3a:58:22:5b:ee:
5e:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:7A:11:ED:8B:6F:8F:C0:37:97:C5:52:E6:C3:B8:36:33:C0:5B:4F
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363036303a3a2f34382d3438203d3e203136393039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:6060::/48
Signature Algorithm: sha256WithRSAEncryption
46:74:06:f9:de:d5:e5:00:5e:74:19:82:1e:9c:95:6c:99:fc:
de:e9:31:24:54:51:67:f3:a4:60:24:f3:12:d6:8e:5c:db:9c:
0c:de:da:d2:30:d0:7d:3f:7f:0c:ed:45:11:0b:72:b6:3d:52:
fb:da:ff:3c:e4:00:e8:da:66:ca:69:8d:a8:1a:f9:0e:05:82:
54:41:4d:74:4d:d0:17:51:ac:4a:21:19:08:29:e4:d7:33:c0:
8c:c5:88:30:04:8a:2c:76:93:56:3e:11:bc:bf:00:5f:5c:cb:
2b:97:88:e9:47:06:b2:9f:e7:61:ed:d6:0a:ee:f1:cc:82:2f:
90:34:5c:99:7a:bf:52:54:5e:07:df:ff:cb:36:5a:78:dc:d6:
a0:e4:ce:2e:77:2e:1c:ab:03:1d:1f:76:c0:d1:9b:3d:79:32:
6e:a7:d2:6e:a2:ff:d6:c1:dc:45:41:0f:1e:2f:c7:37:d4:fd:
a1:f4:76:c6:40:7f:1f:4c:4f:03:82:49:0e:5d:e3:6d:8f:d1:
c2:03:96:47:1d:af:49:0d:26:3a:27:d0:18:2f:ee:e8:12:8e:
f2:be:79:1c:ff:e0:eb:dd:a1:63:15:90:60:a7:11:d7:55:d4:
ae:44:0c:24:31:50:74:0f:89:b1:da:6e:bb:08:32:ad:45:4b:
f4:53:e3:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 09:25:36 2025 by rpki-client