Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363034393a3a2f34382d3438203d3e20343031353037.roa
File: 326131343a373538343a363034393a3a2f34382d3438203d3e20343031353037.roa (raw, json)
Hash identifier: C+9lY3xeeK4oVcv1mdozpgsiFj9r5xYnN/ISkFASSMs=
Subject key identifier: BD:36:3E:8F:0F:47:0B:89:9A:C5:F1:49:88:76:2E:C6:6D:9B:A8:08
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 441973383E933EB5E28180F88CC1F9D9ACA6DCF5
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363034393a3a2f34382d3438203d3e20343031353037.roa
Signing time: Sun 02 Mar 2025 15:24:50 +0000
ROA not before: Sun 02 Mar 2025 15:19:50 +0000
ROA not after: Sun 01 Mar 2026 15:24:50 +0000
asID: 401507
IP address blocks: 2a14:7584:6049::/48 maxlen: 48
Validation: Failed, certificate revoked on Mon 10 Mar 2025 12:12:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
44:19:73:38:3e:93:3e:b5:e2:81:80:f8:8c:c1:f9:d9:ac:a6:dc:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: Mar 2 15:19:50 2025 GMT
Not After : Mar 1 15:24:50 2026 GMT
Subject: CN=BD363E8F0F470B899AC5F14988762EC66D9BA808
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:66:3e:5d:78:e1:95:e1:db:85:50:47:ae:06:
8e:88:f5:26:04:f9:87:19:cd:df:2c:6b:27:ff:66:
59:b1:20:17:d8:dd:f3:b4:04:eb:7a:56:cd:ee:20:
4b:c4:43:62:c2:31:f8:27:cf:cf:b6:99:15:3d:37:
5d:ca:cf:ab:85:dc:ce:86:12:84:db:ca:f3:6b:1d:
d2:3b:3a:a7:bf:92:1e:c0:67:29:14:b0:9c:63:83:
22:fa:67:46:91:11:a2:ac:c6:a6:0d:8b:f2:0c:a7:
00:7f:37:74:a9:36:e7:ce:48:66:8b:e9:b7:17:15:
90:2b:21:af:ea:60:8e:20:48:16:0a:fd:b5:c5:83:
0a:29:cf:c4:4e:ad:cc:90:4b:c6:8d:5e:49:ea:42:
c7:20:6a:b3:9d:ae:92:4f:cf:25:67:83:f9:36:4b:
d7:7a:62:50:75:49:49:36:2c:51:01:0f:64:cc:f0:
7a:f4:b9:25:86:34:6a:e4:6a:d6:e8:e8:99:ba:ae:
1d:9b:ad:a5:ae:8f:85:ad:ae:20:6a:09:e0:4e:32:
ee:ee:1d:d9:d2:79:f0:a1:8b:22:b3:74:2e:ad:02:
40:43:97:b9:ba:38:00:6b:9d:c3:f3:55:cb:9c:a4:
d4:fb:ab:c5:72:36:18:bf:7b:25:c6:88:b4:83:51:
66:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:36:3E:8F:0F:47:0B:89:9A:C5:F1:49:88:76:2E:C6:6D:9B:A8:08
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363034393a3a2f34382d3438203d3e20343031353037.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:6049::/48
Signature Algorithm: sha256WithRSAEncryption
67:39:d7:a0:6f:f4:be:ad:c9:3a:b4:16:d2:38:90:55:19:7e:
19:9b:4a:0b:eb:df:55:8a:3a:20:1e:ee:a2:30:fe:93:de:31:
54:7a:47:72:0b:98:bc:cb:77:5a:57:36:84:5a:90:94:6e:d5:
31:d4:87:12:03:df:2d:fa:54:06:28:a9:fd:af:7b:14:7d:f8:
51:c8:32:ab:19:da:52:40:46:9a:45:ba:ad:e3:37:24:b6:6b:
38:00:90:b6:31:e5:9e:14:ec:96:93:3a:28:ab:dd:49:d1:a4:
54:01:3a:d8:1a:f0:6a:c5:8d:b5:06:f1:6d:d2:11:57:67:29:
86:64:18:a2:63:63:a1:3a:90:03:a6:8d:e0:5a:66:14:aa:6a:
54:19:bc:84:c5:b7:0c:9c:5f:fb:b3:fb:30:34:d5:a0:1b:b0:
38:4a:f4:0a:ef:05:5e:7d:75:79:58:3b:7c:15:f3:c8:c3:71:
b9:63:04:7a:0b:44:0d:34:02:7b:0e:8e:0f:da:e7:09:a6:fc:
06:c8:1e:3b:21:d4:f4:36:13:16:b8:ad:c6:20:da:4b:61:b0:
77:bb:f0:aa:90:91:4f:02:07:22:cd:b2:e7:a0:4d:71:8f:e8:
d3:8c:4d:c7:81:01:67:36:73:65:21:9d:35:16:78:ef:41:a8:
ca:8a:51:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 00:47:16 2025 by rpki-client