Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363434303a3a2f34382d3438203d3e203136393039.roa
File: 326131343a373538343a363434303a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier: k1DkyGIoqnsGiRVRiIUC+HpzpwHHL03/cUue8ygkaf8=
Subject key identifier: 9A:8F:35:1D:E6:29:D7:F7:97:A9:BD:A3:31:EF:90:F8:EA:B0:E5:D3
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 362DDF45942B4659298F1CDA356CFC32CD8A360B
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363434303a3a2f34382d3438203d3e203136393039.roa
Signing time: Mon 06 Jan 2025 20:19:49 +0000
ROA not before: Mon 06 Jan 2025 20:14:49 +0000
ROA not after: Mon 05 Jan 2026 20:19:49 +0000
asID: 16909
IP address blocks: 2a14:7584:6440::/48 maxlen: 48
Validation: Failed, certificate revoked on Tue 14 Jan 2025 14:23:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
36:2d:df:45:94:2b:46:59:29:8f:1c:da:35:6c:fc:32:cd:8a:36:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: Jan 6 20:14:49 2025 GMT
Not After : Jan 5 20:19:49 2026 GMT
Subject: CN=9A8F351DE629D7F797A9BDA331EF90F8EAB0E5D3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:13:3c:7e:0b:09:08:e6:7d:cb:57:52:7f:0c:
e8:58:46:72:88:d8:c1:22:43:91:29:4f:d5:d3:e3:
e4:c2:ac:66:26:c4:c6:74:82:e9:cb:c8:09:b2:b6:
3c:f2:11:4f:5f:13:c1:d1:d7:46:e0:d7:4b:96:df:
46:86:66:fe:eb:7d:7a:90:7a:ee:e4:5e:b0:42:9e:
1c:c7:4e:c9:b5:df:ab:a7:f0:30:97:38:0f:ef:38:
da:65:a6:ca:c8:3e:3a:61:38:03:43:56:19:9f:aa:
d3:db:bf:ce:19:18:49:a2:c8:4a:26:6d:2d:f1:2f:
a1:28:6b:1d:cb:29:69:9b:52:0c:07:ac:ac:02:ee:
09:1a:5d:0b:9e:a6:95:c8:8d:cb:5c:05:b5:ac:39:
40:eb:e7:ab:a9:74:28:c8:37:7c:89:48:b2:da:33:
a0:9b:4b:c0:55:c8:30:a3:a0:0b:3e:c1:d6:dd:3d:
2b:08:37:21:35:3c:c7:4c:14:09:15:3a:a7:2b:d9:
5d:1a:45:ce:e3:c8:74:ad:d7:b6:a8:d5:e0:d1:b1:
ee:fd:c1:ce:50:90:59:e6:ec:b8:2a:25:43:25:a1:
14:ab:c6:2f:22:62:75:a8:f5:7b:42:a2:18:d1:86:
8a:cb:17:4b:d8:ec:ee:08:b9:31:4e:4f:a2:33:85:
2e:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:8F:35:1D:E6:29:D7:F7:97:A9:BD:A3:31:EF:90:F8:EA:B0:E5:D3
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363434303a3a2f34382d3438203d3e203136393039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:6440::/48
Signature Algorithm: sha256WithRSAEncryption
43:fb:d1:3d:28:d0:84:56:ac:a2:d0:39:df:8b:88:29:7f:d1:
f3:9c:a6:8a:0c:ba:f9:ed:36:5e:ac:78:b6:a4:46:1d:18:a8:
e7:f5:b0:fd:6b:bf:aa:e8:dc:bf:14:97:55:cc:ae:fd:24:2f:
b3:a7:99:85:7b:f1:2e:4d:dc:7e:64:36:40:c7:30:ce:d9:f0:
d9:d9:de:02:b3:35:8a:c3:b9:58:c0:d5:7f:8c:63:a0:4a:12:
52:71:a1:0f:01:23:92:00:cc:81:f8:27:b8:e8:a4:62:d0:92:
7c:19:fb:c4:0d:37:b7:3e:f5:05:c9:ed:c2:26:7c:9f:80:25:
27:09:a5:48:ae:11:0c:63:e0:6e:db:a4:88:7f:10:e7:db:f6:
bd:4c:d3:04:ec:6a:6c:1b:6e:ae:ad:ed:b0:1a:ce:22:69:22:
63:ef:83:c6:8a:df:8e:ac:12:f9:08:5a:a5:df:a2:25:46:58:
92:d9:0e:ed:69:8a:d6:83:51:ba:21:d3:77:d9:b5:3a:90:63:
75:e7:d2:9e:ec:8c:e7:5a:b0:02:b0:a5:8f:ba:f7:58:e9:9e:
81:bd:b6:39:37:c1:97:12:be:4d:41:94:1c:8b:5e:fe:5d:90:
44:ee:87:e0:48:19:b1:4c:2b:21:7f:60:09:cb:0b:72:02:b2:
eb:c0:3c:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 09:39:27 2025 by rpki-client