Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363032663a3a2f34382d3438203d3e203136393039.roa
File: 326131343a373538343a363032663a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier: 96TWuShUrmG1KF9cd85t9CKBcFFt++tuE2ojU/viN/4=
Subject key identifier: 14:B1:53:7D:55:0E:0F:35:C2:9B:F7:54:44:42:AE:37:8F:AE:0E:AB
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 6C8AB7DB7ECD00382816DF60B668B1B24A553B63
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363032663a3a2f34382d3438203d3e203136393039.roa
Signing time: Sun 23 Feb 2025 07:58:57 +0000
ROA not before: Sun 23 Feb 2025 07:53:57 +0000
ROA not after: Sun 22 Feb 2026 07:58:57 +0000
asID: 16909
IP address blocks: 2a14:7584:602f::/48 maxlen: 48
Validation: Failed, certificate revoked on Mon 10 Mar 2025 12:11:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6c:8a:b7:db:7e:cd:00:38:28:16:df:60:b6:68:b1:b2:4a:55:3b:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: Feb 23 07:53:57 2025 GMT
Not After : Feb 22 07:58:57 2026 GMT
Subject: CN=14B1537D550E0F35C29BF7544442AE378FAE0EAB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:88:d2:d6:3c:63:fa:a1:b4:cb:f0:4d:5e:8d:
80:71:8a:7e:3c:6b:f4:09:98:85:0a:2c:eb:97:5f:
72:53:47:ea:25:5e:81:e1:e4:16:71:6b:cc:72:db:
18:fc:63:2c:67:0e:8b:a8:db:50:50:e9:30:df:82:
07:fd:10:24:a7:fd:8e:e8:59:b1:5c:85:af:b3:3d:
4d:e8:18:ec:1a:86:5d:e2:22:fe:b7:38:6f:0c:48:
e3:bd:da:98:f7:c4:84:32:e5:7f:c3:ad:a8:2b:c7:
9a:28:72:a2:d0:16:85:58:04:76:8a:8f:2c:da:98:
b1:5c:80:eb:6d:f5:7c:0f:60:78:d3:19:d0:bc:a3:
26:ce:dd:63:2a:d8:3a:f1:21:ca:5c:eb:0f:d6:85:
bd:2f:76:c2:63:d4:17:c8:cb:54:6b:24:82:b3:58:
e4:2b:5d:51:7e:70:fd:04:ec:71:db:1a:f8:ee:db:
5a:b2:d1:1c:66:9a:b3:4d:5e:b9:f4:85:0a:bb:5f:
7e:3d:ba:c6:ea:9e:f4:31:63:5c:c6:9b:23:84:b1:
63:23:2e:3e:14:1c:40:9a:60:03:d2:28:1a:31:fa:
1d:47:81:b0:d1:f1:7b:f7:ad:cc:31:6a:e2:6c:7f:
62:71:0c:9b:30:4d:00:80:f6:a6:cd:d3:e7:d3:a7:
97:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:B1:53:7D:55:0E:0F:35:C2:9B:F7:54:44:42:AE:37:8F:AE:0E:AB
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363032663a3a2f34382d3438203d3e203136393039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:602f::/48
Signature Algorithm: sha256WithRSAEncryption
51:e9:bb:f5:5b:bd:e7:80:68:71:af:25:99:e5:94:5d:f6:99:
fe:25:16:05:ee:b8:9e:f8:60:ed:c7:08:a3:ac:52:9f:dc:62:
cd:85:d2:62:a1:cc:62:cf:89:21:25:40:41:8c:e9:07:55:21:
e4:dd:d1:30:d4:1f:a7:c7:ac:f0:8f:9f:aa:0d:c9:fd:9c:1d:
1e:cf:14:98:42:12:57:a9:a0:c4:f5:62:40:80:34:0d:d9:32:
14:4e:eb:fc:f3:54:9e:20:b6:36:d3:5d:be:84:f2:96:2f:3c:
6a:72:5e:da:8d:18:f1:f2:19:53:49:b4:db:27:56:94:98:60:
c6:7b:7c:1b:e1:fb:a5:96:ff:96:40:c3:30:ea:01:bd:7e:f3:
c8:e8:fd:21:10:15:bb:95:12:5e:98:7c:68:b0:97:31:76:6d:
49:24:26:09:83:ea:c5:5d:6e:96:d2:ce:97:f6:c4:7e:9c:96:
c5:da:17:de:24:62:29:fe:91:db:91:f1:2d:62:73:cd:f3:9d:
4f:0b:a7:e9:f5:3f:88:21:0d:94:43:32:fc:71:6e:bb:d7:1c:
5c:47:f7:ee:fa:16:8e:82:23:7f:64:5a:b5:1b:e9:86:b5:d1:
c4:bd:8d:cb:0b:12:a1:78:ce:26:67:b9:d1:62:77:88:20:c8:
78:b3:ef:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 00:47:07 2025 by rpki-client