Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363066663a3a2f34382d3438203d3e203136393039.roa
File: 326131343a373538343a363066663a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier: yCi7y6ZwIydhiU9SIdnRBN1PvF1yxNqd2B0hOuDYPNE=
Subject key identifier: F2:72:56:2C:C9:C5:A6:40:45:71:9D:0B:63:F8:46:F4:49:96:F7:58
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 6691E1A242B6CDE007FCFB3EFFF60F49461D5C73
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363066663a3a2f34382d3438203d3e203136393039.roa
Signing time: Wed 02 Apr 2025 18:46:12 +0000
ROA not before: Wed 02 Apr 2025 18:41:12 +0000
ROA not after: Wed 01 Apr 2026 18:46:12 +0000
asID: 16909
IP address blocks: 2a14:7584:60ff::/48 maxlen: 48
Validation: Failed, certificate revoked on Fri 11 Apr 2025 18:31:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
66:91:e1:a2:42:b6:cd:e0:07:fc:fb:3e:ff:f6:0f:49:46:1d:5c:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: Apr 2 18:41:12 2025 GMT
Not After : Apr 1 18:46:12 2026 GMT
Subject: CN=F272562CC9C5A64045719D0B63F846F44996F758
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:37:fc:96:d5:44:90:3a:c7:96:2f:1b:5d:58:
bc:5a:7d:72:c0:b8:33:01:a0:52:e1:77:cd:ec:83:
d3:f0:a6:a4:58:ae:fa:ef:44:3e:02:e9:58:06:5f:
bb:cc:45:3d:4f:6c:85:04:32:c9:c0:75:60:1a:32:
6b:71:b9:83:76:85:ce:3a:1a:9d:54:4e:f3:8f:77:
50:af:28:40:10:8d:6f:49:70:e6:ce:c1:87:c1:cb:
b4:77:a5:6d:42:c8:80:09:15:0a:11:70:7e:86:52:
75:58:79:ca:29:32:7b:96:6c:24:b0:f5:be:65:2b:
07:55:e6:64:b8:d4:d4:76:bb:42:bd:ad:89:67:c4:
bb:63:20:4a:f8:3f:7f:26:d0:e6:fa:ee:28:2d:27:
1d:05:9d:aa:f6:77:25:e8:f6:90:e4:bf:f7:76:aa:
94:02:46:90:8e:42:6b:20:a3:d9:df:2d:15:80:f9:
9e:76:41:f6:5c:a4:ef:39:3a:cd:ba:95:7d:7b:b9:
6c:cc:9e:ff:aa:87:15:53:fe:01:c6:c0:6d:33:50:
32:7a:4c:86:3b:b8:4f:bb:05:6a:f6:6c:91:8f:08:
82:e9:79:9b:86:48:99:18:b7:36:7e:a2:41:14:96:
e3:58:63:64:5b:2d:8a:bb:5c:0f:00:a4:da:95:9c:
be:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:72:56:2C:C9:C5:A6:40:45:71:9D:0B:63:F8:46:F4:49:96:F7:58
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363066663a3a2f34382d3438203d3e203136393039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:60ff::/48
Signature Algorithm: sha256WithRSAEncryption
16:cd:45:39:b5:f6:46:ce:9a:fe:d5:90:38:06:e7:ed:4b:f8:
0e:c4:f0:60:05:c7:a3:b9:b5:a7:de:6e:ff:32:bc:06:00:f4:
d8:a9:bb:3b:dc:35:b0:2d:60:d0:35:1e:aa:e3:d5:d4:f7:c1:
1f:61:71:8c:f3:16:1c:28:57:be:43:b1:8a:af:f5:ac:4e:89:
eb:97:84:f7:42:05:16:75:53:23:1c:b6:46:93:bb:31:42:f3:
c8:58:f0:ee:64:98:58:9e:9b:d7:ce:78:e5:2f:7d:fe:64:ab:
b3:69:35:30:59:7c:61:74:ce:62:49:f9:4b:97:a0:6c:3a:3f:
f3:0a:4c:ec:ce:76:fb:92:16:0c:2f:ba:a8:ee:ea:d4:ea:c6:
ad:6e:0f:42:3d:71:1f:1f:81:04:ce:3e:37:ef:89:09:65:90:
d8:6c:89:0a:57:cf:38:a3:35:01:34:c8:17:f1:07:f0:04:03:
bd:85:86:46:f6:ae:ea:26:ae:bc:80:0a:fc:2f:5d:3e:63:a5:
13:87:78:cd:ec:01:0a:4f:40:26:40:25:f1:ae:fd:ba:a8:a3:
d0:28:44:07:ef:51:91:cf:92:24:89:2d:99:a4:b7:00:f3:62:
34:ab:62:a2:90:ff:5b:b4:66:39:53:dd:0a:3d:75:67:99:7b:
4f:b5:4b:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 25 01:03:24 2025 by rpki-client