Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a366538303a3a2f34382d3438203d3e203136393039.roa
File: 326131343a373538343a366538303a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier: CKJrPC6XImI3D8ZwRkuINghWfftQwCIfWXRh1Yacsg8=
Subject key identifier: F3:12:8C:E9:61:BE:C7:AD:13:F7:9F:4C:47:B0:DD:4A:4E:ED:08:A0
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 4369DD9454FF5D4F4C16FC3C6471FFCF3E31C692
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a366538303a3a2f34382d3438203d3e203136393039.roa
Signing time: Sat 08 Feb 2025 20:11:00 +0000
ROA not before: Sat 08 Feb 2025 20:06:00 +0000
ROA not after: Sat 07 Feb 2026 20:11:00 +0000
asID: 16909
IP address blocks: 2a14:7584:6e80::/48 maxlen: 48
Validation: Failed, certificate revoked on Sat 15 Feb 2025 20:42:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
43:69:dd:94:54:ff:5d:4f:4c:16:fc:3c:64:71:ff:cf:3e:31:c6:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: Feb 8 20:06:00 2025 GMT
Not After : Feb 7 20:11:00 2026 GMT
Subject: CN=F3128CE961BEC7AD13F79F4C47B0DD4A4EED08A0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:3e:aa:bd:08:63:ce:1b:f9:d0:78:f0:f3:79:
a2:d7:90:36:65:a6:e7:5a:64:ee:5d:18:d4:00:b8:
1d:e5:f1:e0:61:72:1e:89:33:59:f1:60:24:d5:f9:
f7:d5:c1:40:1b:1e:11:83:ca:a3:6c:1d:f2:b2:75:
28:91:3a:3b:17:2e:43:0b:b9:55:0e:5b:01:0e:85:
e0:3f:c0:0f:cc:4c:06:f1:83:ef:b5:13:62:34:80:
da:c6:36:e2:b1:7c:c7:41:04:cb:f0:8f:08:17:32:
0f:e2:38:31:1c:a1:e5:c6:5c:a5:97:d0:03:2b:4c:
02:cf:f7:e9:b3:dc:d3:23:fc:b8:70:4b:8c:45:71:
85:b4:fc:41:92:19:ee:1c:81:22:f1:96:61:1e:42:
55:5b:4a:17:56:b0:ef:31:5c:03:7e:23:0b:39:ed:
37:cb:02:a0:b1:04:98:d1:84:ca:db:d3:af:6a:8a:
74:34:49:fb:9a:51:68:92:a2:a3:0d:9c:0f:be:13:
81:ec:18:65:2b:a4:72:51:e4:30:6d:fc:32:ce:35:
1b:6f:68:de:6f:f6:52:94:30:ba:64:79:72:31:aa:
10:93:f9:ec:37:53:32:83:76:1e:d1:1b:77:f9:56:
ce:61:d4:20:fd:23:5e:f1:83:5e:29:7c:37:b7:1a:
ea:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:12:8C:E9:61:BE:C7:AD:13:F7:9F:4C:47:B0:DD:4A:4E:ED:08:A0
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a366538303a3a2f34382d3438203d3e203136393039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:6e80::/48
Signature Algorithm: sha256WithRSAEncryption
36:15:b8:2f:ef:04:46:bd:85:a4:66:d4:15:19:c8:ee:91:2f:
83:d0:33:eb:1c:e9:f0:69:c5:0c:0e:94:a8:fe:44:3d:93:d6:
89:7d:c3:2c:dc:4e:cc:93:8b:72:7b:e7:9c:b2:76:0f:f9:57:
aa:9a:58:01:15:d9:df:cc:6c:e9:ae:b2:ae:70:60:1f:bb:77:
16:3d:16:2d:96:3d:37:f6:ac:75:c9:71:52:8a:85:f1:e3:49:
f8:f1:71:b0:b5:d1:20:a9:c6:b8:93:14:4f:53:d8:d1:8a:fd:
92:69:d8:52:dd:b2:dd:0f:c5:24:bd:82:26:8b:94:d9:3f:02:
ce:7e:f8:d4:01:8a:fb:53:a4:d6:c4:9d:87:23:0f:b7:53:d6:
2f:c1:c1:16:57:3c:0a:d5:28:84:f6:58:fa:6c:e1:62:fe:b9:
9d:1f:11:88:14:e6:d6:fc:bd:6f:f6:d5:88:36:78:93:86:79:
5c:ff:c3:be:69:33:00:73:f1:17:86:e9:e8:82:74:10:bd:65:
df:3f:40:84:fd:5f:f9:a7:7d:89:27:63:6b:5e:3f:6a:51:55:
56:e6:c4:a3:93:3e:d8:11:69:f1:f4:0c:9f:e2:2c:89:be:ba:
82:f9:81:09:77:a0:fa:dc:bc:fc:f5:d8:0c:03:b4:ab:15:aa:
ef:df:84:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 16:40:13 2025 by rpki-client