Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363034613a3a2f34382d3438203d3e20343031353037.roa
File: 326131343a373538343a363034613a3a2f34382d3438203d3e20343031353037.roa (raw, json)
Hash identifier: 1KliOtoNSFLQvtzeAQiU1vOYsCny1i2OmN1mA1idPHc=
Subject key identifier: 90:B4:F7:FB:A5:46:BD:6C:17:1E:CE:16:BD:D0:70:F7:37:FD:DB:92
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 48F5EE109F76D7C695833D00FEC04DE8C8115E59
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363034613a3a2f34382d3438203d3e20343031353037.roa
Signing time: Sun 02 Mar 2025 15:24:51 +0000
ROA not before: Sun 02 Mar 2025 15:19:51 +0000
ROA not after: Sun 01 Mar 2026 15:24:51 +0000
asID: 401507
IP address blocks: 2a14:7584:604a::/48 maxlen: 48
Validation: Failed, certificate revoked on Mon 10 Mar 2025 12:12:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
48:f5:ee:10:9f:76:d7:c6:95:83:3d:00:fe:c0:4d:e8:c8:11:5e:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: Mar 2 15:19:51 2025 GMT
Not After : Mar 1 15:24:51 2026 GMT
Subject: CN=90B4F7FBA546BD6C171ECE16BDD070F737FDDB92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:10:d2:4d:34:e2:b7:ac:46:f7:db:ce:9b:64:
f9:ce:29:7f:ba:d6:48:ed:02:12:7e:29:cb:c8:14:
99:ca:46:03:19:42:bf:09:6d:5d:09:f4:13:8f:92:
e2:9c:15:2b:61:11:ca:12:47:5e:ac:6e:56:d8:c3:
a9:2d:ab:64:ad:f0:20:c6:e9:80:cf:55:26:4a:18:
26:4a:0e:20:b4:de:50:8c:cd:00:56:05:0d:ad:f0:
5e:b3:99:88:c2:d8:b8:94:a5:d6:9b:c1:e0:9c:b5:
96:d1:80:75:d8:8b:44:b8:f1:e3:52:8b:a2:4d:39:
52:21:88:31:46:c6:e0:e0:78:3e:b7:a6:02:52:4f:
d5:a9:36:bf:9b:2f:16:87:79:b4:a5:39:d0:39:c3:
bf:0f:93:29:ce:8e:ff:bd:bb:d4:ba:65:43:17:f5:
65:06:3b:de:9d:03:61:fb:6a:f0:56:31:d2:4a:57:
03:6c:2f:26:2c:b5:8d:64:eb:95:88:c1:7c:12:6b:
e9:aa:c9:25:06:bc:dd:28:e2:c8:49:75:45:30:a5:
dd:39:6f:65:18:73:15:91:0c:3c:1c:a7:0a:97:49:
9c:78:3e:2c:9b:59:9b:fe:58:07:5f:e3:a7:64:22:
f2:c0:94:7d:b5:56:c3:5a:8b:07:58:14:ff:d0:51:
e8:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:B4:F7:FB:A5:46:BD:6C:17:1E:CE:16:BD:D0:70:F7:37:FD:DB:92
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363034613a3a2f34382d3438203d3e20343031353037.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:604a::/48
Signature Algorithm: sha256WithRSAEncryption
48:a8:84:e1:f5:4c:0d:f5:0e:56:8d:c9:c8:ac:f1:dd:97:34:
21:51:5e:1b:b4:aa:5e:76:b3:35:e2:3c:c5:8f:bd:0b:b0:7f:
8e:85:c1:f0:4b:59:ea:45:c2:c1:1f:7f:d7:8c:9b:dd:3b:b6:
fe:62:45:fe:01:cb:d5:5b:30:f7:6d:ff:b7:89:d4:08:65:f0:
7b:59:29:9c:8c:87:4a:ac:9e:de:0e:aa:8c:e2:84:87:19:70:
68:c8:d8:26:f6:02:b4:9a:66:39:70:0e:58:f1:fc:9a:56:cb:
c3:df:5e:30:4a:ac:8f:9b:62:14:68:cb:68:bb:4f:41:5b:e3:
7e:1e:1f:b9:48:66:05:f2:50:07:72:7e:71:be:ae:bb:49:7a:
d7:4d:ad:c0:95:c7:23:6d:f2:90:dc:b4:4a:4a:3c:e7:b0:ee:
6b:fc:2d:a7:d7:85:53:ba:dd:e8:b3:be:2f:45:f2:b6:d7:df:
84:6e:e0:e2:53:5a:34:d7:fe:f7:22:88:d2:11:5d:62:ec:33:
85:b3:f0:4c:d1:6b:0d:1c:94:14:ce:d5:42:39:c3:76:9f:b4:
7d:54:00:62:65:9e:db:f7:53:16:c6:9f:0b:11:69:dd:b3:5f:
a2:8e:85:59:40:14:0b:8d:f9:b2:36:8c:fe:bf:45:b6:1d:2e:
93:3b:d4:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 00:41:16 2025 by rpki-client