Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363130613a3a2f34382d3438203d3e203136393039.roa
File: 326131343a373538343a363130613a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier: nqE+uWEN0RoC5uoUIa1ohKj9kY/oYabTtfa8mRJ5iG4=
Subject key identifier: E9:F4:DE:A7:7B:D8:92:F2:2A:6F:FE:61:FA:1A:FB:00:82:D2:24:BF
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 78F9460A5E23D57AD72573CC6D8B08813CEE9AF0
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363130613a3a2f34382d3438203d3e203136393039.roa
Signing time: Wed 02 Apr 2025 18:46:38 +0000
ROA not before: Wed 02 Apr 2025 18:41:38 +0000
ROA not after: Wed 01 Apr 2026 18:46:38 +0000
asID: 16909
IP address blocks: 2a14:7584:610a::/48 maxlen: 48
Validation: Failed, certificate revoked on Fri 11 Apr 2025 18:31:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
78:f9:46:0a:5e:23:d5:7a:d7:25:73:cc:6d:8b:08:81:3c:ee:9a:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: Apr 2 18:41:38 2025 GMT
Not After : Apr 1 18:46:38 2026 GMT
Subject: CN=E9F4DEA77BD892F22A6FFE61FA1AFB0082D224BF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:fa:c8:11:cd:3c:64:96:fb:5e:1b:6c:b6:85:
03:1a:54:d0:30:92:f7:26:52:d5:00:6c:b0:e2:48:
9e:63:18:3d:2a:16:92:0f:cb:0c:44:80:e0:6b:95:
35:63:9d:e5:41:41:39:b9:04:21:64:95:26:99:54:
77:72:08:f2:00:96:62:39:71:a4:52:88:0c:0e:82:
1c:26:8c:c1:5e:b0:d5:2f:19:ff:8a:9a:cb:19:cc:
f1:59:b7:97:7f:b9:22:da:23:47:07:c3:9f:43:aa:
08:b2:ca:a8:80:dc:2f:25:2b:f1:5a:a6:c2:e9:d5:
39:3e:74:95:1d:56:90:9e:31:2f:21:44:a4:3a:20:
34:25:06:52:a0:fe:b2:63:f1:2d:71:0a:de:9d:a1:
a0:7f:3a:7b:0e:1f:75:9e:49:dc:25:38:0a:24:0a:
54:8f:44:b4:18:01:ec:52:ab:a0:33:de:53:c4:38:
a1:ee:28:f7:75:b3:85:7e:ef:72:76:0f:2d:63:cd:
82:8e:f7:4f:8b:f1:85:c1:18:43:7e:2b:6b:dd:ac:
7a:65:10:d5:5e:b3:c9:6b:8b:da:f4:46:ad:ac:bd:
16:70:86:e9:25:01:d8:c5:19:2c:96:3e:72:fe:f3:
c2:93:64:83:ed:26:73:60:99:17:ec:3e:21:8e:b3:
f4:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:F4:DE:A7:7B:D8:92:F2:2A:6F:FE:61:FA:1A:FB:00:82:D2:24:BF
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363130613a3a2f34382d3438203d3e203136393039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:610a::/48
Signature Algorithm: sha256WithRSAEncryption
0f:25:59:4a:8c:76:19:9f:a5:f9:f9:c6:18:34:52:06:1d:5a:
85:b5:f6:d9:a4:41:58:32:51:0a:c9:d8:dc:ca:b7:bb:d7:87:
65:b1:11:d4:5c:8d:80:60:4f:ea:cb:e4:e7:3d:86:e9:92:a6:
a0:0b:57:27:94:4c:9f:e6:80:1f:44:d5:39:4d:75:ea:8a:89:
77:3f:d4:eb:f0:c0:d2:f5:ce:9b:23:1f:f6:2d:b6:4e:39:00:
04:0c:03:f1:13:ea:98:d7:cf:ec:f3:48:1f:c4:cc:7f:76:ad:
92:ff:3d:83:d1:97:75:6b:45:75:09:ad:50:66:2a:0b:cd:83:
2a:20:db:42:e2:41:6e:e5:ff:a3:e0:d5:91:3f:f1:46:ef:b9:
02:1d:f8:46:7d:4e:1c:74:df:55:f5:71:f6:d4:45:81:24:69:
9a:42:d8:06:a6:b7:cc:7a:91:d9:4e:c7:72:bb:f1:fc:ef:cf:
5a:6e:20:34:61:b3:58:9f:49:67:3d:4f:fe:0f:74:df:7b:b1:
65:93:30:3b:b5:93:e0:84:be:f2:00:07:67:60:3e:da:c9:0c:
a7:ef:54:64:6e:b5:61:71:61:68:43:09:97:61:06:96:9d:9c:
1c:cf:ba:58:54:25:25:0f:96:23:cd:61:f4:8e:98:cc:9e:43:
27:a4:ee:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 23 23:53:46 2025 by rpki-client