Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363034363a3a2f34382d3438203d3e20343031353037.roa
File: 326131343a373538343a363034363a3a2f34382d3438203d3e20343031353037.roa (raw, json)
Hash identifier: kJzcraQ+QI2yVFUiOsJWW56XMSjWzY4FwuC0JtK19sE=
Subject key identifier: 85:76:C0:47:C8:72:64:68:D2:60:C9:58:7D:32:E0:9E:AE:F0:69:90
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 6A351BA0931FEA3150FD4C30C787B177DCE394C3
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363034363a3a2f34382d3438203d3e20343031353037.roa
Signing time: Sun 02 Mar 2025 15:24:47 +0000
ROA not before: Sun 02 Mar 2025 15:19:47 +0000
ROA not after: Sun 01 Mar 2026 15:24:47 +0000
asID: 401507
IP address blocks: 2a14:7584:6046::/48 maxlen: 48
Validation: Failed, certificate revoked on Mon 10 Mar 2025 12:12:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6a:35:1b:a0:93:1f:ea:31:50:fd:4c:30:c7:87:b1:77:dc:e3:94:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: Mar 2 15:19:47 2025 GMT
Not After : Mar 1 15:24:47 2026 GMT
Subject: CN=8576C047C8726468D260C9587D32E09EAEF06990
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:16:f4:93:a5:e3:b5:2a:5d:4b:5c:26:d0:c4:
39:bf:f9:e4:09:e3:50:af:9e:b5:be:01:29:b6:2e:
79:f9:9c:ea:90:16:c9:05:7a:60:b3:af:f2:4a:2f:
a3:d7:48:b8:9b:7b:7e:6d:22:83:cb:e6:49:26:c6:
43:59:14:c8:56:fc:99:c0:2c:f7:49:4c:b2:83:9e:
4a:6a:c5:a5:db:b8:26:4d:f1:05:2f:cf:d0:cf:90:
3d:47:54:bb:27:5c:7f:0a:1c:2e:25:c8:26:94:d2:
66:88:0f:21:82:6f:7d:6d:bf:df:db:aa:44:56:e8:
82:a5:f9:5e:3c:9b:fa:11:bf:09:00:f1:63:8d:ea:
ee:fa:ab:f6:22:48:fb:6d:fc:aa:4a:fa:a6:23:21:
f9:7b:89:a1:6d:37:38:f3:dc:f0:7e:21:5b:0a:a3:
62:76:b3:80:28:a2:49:08:38:fd:56:ba:fe:fd:55:
e9:44:e7:ef:52:5b:10:58:f8:a7:52:43:08:19:19:
52:80:1a:f7:17:0d:fc:b8:c2:14:4f:ee:6e:6f:19:
7b:20:80:db:6e:1c:46:f7:36:c0:59:e1:14:08:4e:
b5:6c:e5:70:05:9b:01:29:64:5e:62:b3:52:9e:1a:
0c:4c:ad:58:4b:83:e7:95:08:47:32:0d:6c:fa:46:
ba:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:76:C0:47:C8:72:64:68:D2:60:C9:58:7D:32:E0:9E:AE:F0:69:90
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363034363a3a2f34382d3438203d3e20343031353037.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:6046::/48
Signature Algorithm: sha256WithRSAEncryption
38:46:a3:ac:4a:aa:19:c0:92:c8:77:5d:7a:ee:13:a0:9a:b8:
99:62:81:c8:ea:fd:e4:2c:dd:af:08:fc:e8:27:15:8b:e2:8e:
8a:07:f7:9a:0c:a3:41:37:b7:86:df:c0:c2:99:49:06:e0:14:
63:6d:8a:dc:33:cd:ab:8c:e3:18:a8:a9:9b:74:92:9c:1a:e9:
cf:80:37:dd:c9:b3:9c:0a:75:e3:14:81:b5:e0:9e:f4:5f:37:
88:40:b6:24:7f:f1:1a:9a:e5:ec:87:04:ac:ea:1b:36:45:14:
37:13:f7:ef:a7:f5:5e:89:ca:0f:77:5d:19:71:23:1f:69:b0:
7d:d4:aa:19:68:07:1a:94:8d:f7:46:05:33:49:9f:22:8f:80:
d2:07:2e:c8:9f:e7:36:b8:b9:5e:3b:02:92:f0:c9:21:1e:fd:
96:58:61:db:0a:8f:44:6c:93:cb:63:be:b9:78:23:32:24:aa:
e7:a6:81:6d:20:23:e0:d3:1e:84:3a:e8:75:5c:e8:b9:ca:4f:
2d:18:1a:fd:e1:98:59:28:2b:4a:6e:c8:34:07:09:c0:e6:a9:
8f:91:b6:85:43:1b:8d:2d:07:9f:bb:ed:a9:21:c9:5e:a7:6f:
f7:df:75:44:e4:9d:42:c3:21:d9:05:e6:b9:aa:bb:6d:f7:1b:
cb:f7:87:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 00:49:49 2025 by rpki-client