Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363032623a3a2f34382d3438203d3e203136393039.roa
File: 326131343a373538343a363032623a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier: GLD6rQpHeiCQKUQ1plbezuvsw7WvHs3nZcA3mgCg0lU=
Subject key identifier: 78:9D:6D:BB:D4:BA:56:CB:B2:56:E3:1D:4A:D3:FB:FF:F1:9A:4A:18
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 45C7336518595FDC15A27B4FB7F7C70D464EEB53
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363032623a3a2f34382d3438203d3e203136393039.roa
Signing time: Sun 23 Feb 2025 07:58:54 +0000
ROA not before: Sun 23 Feb 2025 07:53:54 +0000
ROA not after: Sun 22 Feb 2026 07:58:54 +0000
asID: 16909
IP address blocks: 2a14:7584:602b::/48 maxlen: 48
Validation: Failed, certificate revoked on Sun 02 Mar 2025 15:21:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
45:c7:33:65:18:59:5f:dc:15:a2:7b:4f:b7:f7:c7:0d:46:4e:eb:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: Feb 23 07:53:54 2025 GMT
Not After : Feb 22 07:58:54 2026 GMT
Subject: CN=789D6DBBD4BA56CBB256E31D4AD3FBFFF19A4A18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:46:d5:b4:f0:e8:6d:60:11:72:e1:75:11:dd:
7e:cb:a9:5b:98:58:50:cd:bb:b4:7b:fa:a8:c9:52:
d1:8a:20:57:ad:3e:cd:62:39:bc:9a:91:e6:9c:57:
99:8b:f6:37:98:13:8b:93:ad:e4:20:dd:94:c1:bc:
94:3f:23:8b:6c:19:ea:f8:2b:40:8d:f1:4e:82:13:
fc:e3:f8:35:2d:b2:a0:08:9f:60:e2:e6:d0:28:9a:
f6:49:c3:d6:6b:7e:ed:d9:c4:ca:7c:28:7d:d8:95:
ea:40:1b:49:60:ce:bd:a3:91:49:6e:f7:de:95:02:
80:e8:e3:37:38:c5:20:ca:55:96:3c:6a:8c:11:cd:
81:44:3f:0d:45:89:c1:b8:d7:8d:ea:0a:b2:9b:4e:
6a:a5:bd:78:b7:ee:7a:cb:0f:99:39:00:1a:48:7d:
c1:85:fd:ec:6d:f5:60:c4:fb:d4:70:73:7e:4d:19:
24:a4:60:5b:52:44:ff:1f:16:60:d8:08:eb:36:81:
88:4a:d7:02:da:0b:f4:e9:27:47:88:f7:70:1d:61:
49:15:da:20:25:24:16:d9:df:72:88:8f:1f:df:bd:
30:fb:d1:91:cb:7c:18:f2:ba:5c:94:8e:3d:40:a3:
eb:75:28:1e:93:3a:5c:8b:c0:05:7b:23:a2:3e:85:
06:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:9D:6D:BB:D4:BA:56:CB:B2:56:E3:1D:4A:D3:FB:FF:F1:9A:4A:18
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363032623a3a2f34382d3438203d3e203136393039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:602b::/48
Signature Algorithm: sha256WithRSAEncryption
84:f7:ec:e0:78:63:0d:d0:40:26:23:9c:65:c9:5c:b8:34:d4:
8c:2c:d6:91:5f:bb:4a:96:90:05:6e:3e:d2:38:f2:1d:fd:3b:
b6:52:0d:ca:98:75:54:66:7c:00:2b:46:b1:aa:57:a5:d3:18:
1d:d3:b0:36:9e:9e:17:dc:b4:33:a9:e0:87:a8:ac:0d:ab:1c:
c1:30:70:6d:fc:db:86:d8:99:28:69:0d:f2:66:22:f4:ff:ed:
17:31:64:60:f7:b1:37:16:41:86:43:64:2e:0c:65:21:f1:4d:
5a:31:df:3b:67:32:f6:28:29:df:c5:07:0c:c8:f5:3f:9c:a2:
5d:43:73:7b:71:5a:f0:15:e9:e0:ce:f3:4f:8e:5b:7e:b1:00:
05:8c:24:1b:0b:10:6f:69:c0:d0:ca:d0:43:94:eb:de:50:ab:
53:fb:41:e9:85:c1:9e:55:f3:a2:2a:d8:27:2a:7f:15:dd:a0:
6a:2d:c2:a4:70:d8:65:7e:49:1e:e2:f3:c1:07:a7:57:7f:ac:
e1:71:ab:6b:33:ca:9f:65:6e:0c:51:19:7f:0f:e9:c5:45:91:
47:53:e3:a0:0b:71:d4:3b:0c:e4:b8:33:4a:9f:40:fc:75:6b:
38:b4:36:a5:ac:13:82:db:ff:13:e9:1e:a5:6b:99:ec:28:26:
6d:42:9b:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 00:47:16 2025 by rpki-client