Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363034643a3a2f34382d3438203d3e203136393039.roa
File: 326131343a373538343a363034643a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier: DVqlSPEwYhoolyS6MT4YUPMq18kA1FyE39voHJ7eeFQ=
Subject key identifier: 9A:15:8B:F5:DF:F7:D9:5A:45:6E:73:D4:24:C4:DE:93:B6:76:A8:24
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 067F5F3265C620A4503A39BE66C4AED85D618635
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363034643a3a2f34382d3438203d3e203136393039.roa
Signing time: Sun 02 Mar 2025 15:26:10 +0000
ROA not before: Sun 02 Mar 2025 15:21:10 +0000
ROA not after: Sun 01 Mar 2026 15:26:10 +0000
asID: 16909
IP address blocks: 2a14:7584:604d::/48 maxlen: 48
Validation: Failed, certificate revoked on Mon 10 Mar 2025 12:11:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
06:7f:5f:32:65:c6:20:a4:50:3a:39:be:66:c4:ae:d8:5d:61:86:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: Mar 2 15:21:10 2025 GMT
Not After : Mar 1 15:26:10 2026 GMT
Subject: CN=9A158BF5DFF7D95A456E73D424C4DE93B676A824
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:7b:f9:82:8f:67:de:2a:a4:20:1b:8e:44:34:
40:f2:50:46:1e:c4:d6:e9:7b:45:75:d4:4d:53:41:
b3:f6:dd:09:c6:ac:86:b2:f4:46:be:25:4e:04:b3:
c8:52:26:08:27:17:b8:3d:8c:21:b7:c2:fa:f6:69:
ae:88:80:33:92:a9:a6:22:65:e5:95:78:a1:2a:01:
8e:87:3e:a5:60:54:9c:6a:29:aa:3b:b0:74:3a:b5:
3d:79:1c:a0:b2:dd:96:61:63:a9:2c:ee:d2:cc:f1:
70:f8:e7:d2:46:ae:26:0d:37:03:b4:1b:0c:a2:8d:
ed:a2:63:d6:10:89:33:6c:85:c6:e4:79:df:4a:0a:
06:8b:c3:9d:12:de:da:d8:7f:f6:f5:19:88:1b:37:
76:8b:58:20:a4:ac:9e:51:33:ef:3d:89:73:fc:af:
f8:f4:41:a9:f3:d4:0d:6a:37:48:8d:9c:f8:1c:b4:
0c:b5:6a:e3:3b:34:86:c6:2f:a3:3b:95:72:c6:b7:
b5:f8:63:0e:c7:29:79:3d:05:d9:17:9a:b1:d7:f3:
07:09:37:6f:a9:71:5c:f0:ee:3c:a9:0a:cf:29:85:
03:2f:b7:f9:89:ad:f1:31:c1:4d:d7:2a:6a:91:38:
bf:17:82:e5:cf:8b:ee:8d:22:08:e1:be:4a:9a:80:
24:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:15:8B:F5:DF:F7:D9:5A:45:6E:73:D4:24:C4:DE:93:B6:76:A8:24
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363034643a3a2f34382d3438203d3e203136393039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:604d::/48
Signature Algorithm: sha256WithRSAEncryption
b9:fe:83:6e:99:6c:c5:e7:32:52:48:4d:b3:51:4b:2d:a9:02:
ba:9a:d4:6d:72:ee:58:d0:97:f8:63:55:5d:c0:49:7d:75:03:
da:4e:c9:40:2c:e2:f9:c5:eb:c6:15:f2:b8:49:fb:63:54:ba:
af:52:a4:01:3e:23:76:3f:9e:f2:29:fc:73:5a:3a:83:97:fd:
f4:1c:2b:40:a0:52:f4:68:51:21:f0:52:ff:d9:14:1d:dd:0a:
f6:8b:8f:6c:99:cb:61:7f:27:16:a4:53:be:55:3f:cb:cd:62:
c3:f5:60:1f:00:e8:b1:50:9c:08:96:f1:85:c3:c6:00:61:7d:
50:67:72:34:e5:60:92:b5:1d:5e:d6:ff:df:de:1a:91:9e:1d:
7f:37:51:94:ff:be:92:2f:8b:8c:ae:19:e6:a5:e9:96:44:21:
10:fd:d0:7e:89:fb:71:e7:1c:f6:5d:3c:9b:59:fa:96:54:da:
70:b4:03:2d:0b:4e:05:29:f0:98:e2:38:43:ff:84:4c:ae:41:
32:80:db:7c:d1:e0:12:49:4c:d4:e6:ca:ef:26:6c:6b:8d:a7:
b0:dc:7e:a7:0b:31:62:73:45:bf:0d:66:98:89:a9:bc:0c:be:
14:ac:cc:ec:a0:09:ee:6e:2e:7d:b7:a3:e1:51:e3:4c:16:c6:
63:6a:41:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 00:40:12 2025 by rpki-client