Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363066383a3a2f34382d3438203d3e203136393039.roa
File: 326131343a373538343a363066383a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier: IjG6RApbUBa/G+ZTKN62WyZo09hNeKx7UYZLi/vg3+M=
Subject key identifier: 92:87:27:E0:4D:A2:70:8F:37:12:93:31:F5:05:D9:6A:F2:5B:9F:79
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 1182067841655FC7CE7CD41F11E890E72DFB914F
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363066383a3a2f34382d3438203d3e203136393039.roa
Signing time: Wed 02 Apr 2025 18:45:43 +0000
ROA not before: Wed 02 Apr 2025 18:40:43 +0000
ROA not after: Wed 01 Apr 2026 18:45:43 +0000
asID: 16909
IP address blocks: 2a14:7584:60f8::/48 maxlen: 48
Validation: Failed, certificate revoked on Fri 11 Apr 2025 18:31:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
11:82:06:78:41:65:5f:c7:ce:7c:d4:1f:11:e8:90:e7:2d:fb:91:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: Apr 2 18:40:43 2025 GMT
Not After : Apr 1 18:45:43 2026 GMT
Subject: CN=928727E04DA2708F37129331F505D96AF25B9F79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:6d:c8:00:d4:19:05:44:27:5c:db:4a:6a:92:
06:d9:1b:9a:61:ee:dc:2a:56:33:b9:87:74:41:85:
24:ba:e6:f3:7d:64:6a:b6:25:5a:2b:dc:b6:61:63:
36:86:bb:19:67:ca:79:e9:3c:38:dc:6c:6b:75:31:
6d:05:ae:23:60:d1:2b:63:b8:cf:8c:9a:45:02:9d:
18:b1:6f:04:43:d5:30:90:ec:ca:5e:6c:0f:b0:8e:
03:02:b3:b9:98:fc:e0:04:44:0a:3f:bc:0d:42:c5:
4a:e4:3d:f6:15:51:0a:4e:45:9a:af:b8:8c:25:fa:
fa:3b:dd:96:07:d6:6e:0e:77:62:59:1d:e9:40:35:
93:2d:1c:5c:5f:28:51:c4:32:ca:8a:7f:7c:97:45:
2e:ff:20:e0:bb:c6:53:72:d0:cd:d2:16:46:f0:4a:
00:e5:ca:f9:75:57:2c:f0:8b:fa:c1:fa:ef:c2:e6:
11:83:68:84:77:0f:62:5f:c6:cf:b3:a1:56:91:db:
e4:1e:4d:9d:fb:34:89:eb:13:01:e6:4d:c9:89:90:
98:e7:da:5b:8e:01:a3:41:f7:0b:0d:ab:ef:3b:4a:
19:92:fb:da:0b:72:bf:f2:42:57:f3:21:fc:5a:fd:
68:fa:d2:4b:8f:b7:2c:97:78:86:72:2b:42:c0:aa:
08:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:87:27:E0:4D:A2:70:8F:37:12:93:31:F5:05:D9:6A:F2:5B:9F:79
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363066383a3a2f34382d3438203d3e203136393039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:60f8::/48
Signature Algorithm: sha256WithRSAEncryption
82:3c:b2:c0:80:09:f7:b3:18:45:73:46:5a:ac:33:f3:b5:6b:
9b:61:8c:24:df:94:8f:de:74:8b:08:85:9f:e4:fb:57:fa:a6:
f6:a9:27:29:8a:48:4f:00:7a:9b:2c:3b:0f:28:0a:be:0d:f3:
51:18:a0:57:5f:56:bf:f7:1e:3b:f8:ac:38:24:c1:d1:b2:ba:
7f:96:79:9a:c5:f8:31:d6:36:df:41:2e:73:d8:8d:8f:41:67:
1f:70:9e:72:92:d9:81:fc:55:54:42:c2:64:7d:0d:77:fb:55:
ea:e4:62:1c:09:8a:c9:77:ae:3b:0a:4a:76:0b:3a:22:83:d6:
f5:68:f8:6e:fa:97:de:53:75:e2:ff:89:a0:9d:ad:1a:78:e9:
2c:fe:46:7c:a6:eb:51:fc:e5:2b:6e:b6:89:aa:e6:1b:b8:32:
93:19:80:d0:48:5f:76:ae:9a:d7:40:1a:81:df:76:c7:c4:7d:
d2:e0:c3:8c:ac:cb:53:74:74:c9:73:ac:df:ac:4d:5e:1e:61:
d2:fa:15:3f:b7:a1:4c:73:c3:6d:8c:2b:49:2e:b1:35:84:8a:
d7:b7:54:43:04:03:db:97:f9:23:20:ce:b4:b7:c6:f2:cb:f0:
13:4d:3f:12:b9:62:5c:6d:b0:c3:a3:02:3a:17:42:f1:aa:6d:
72:77:0f:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 25 01:01:48 2025 by rpki-client