Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363034653a3a2f34382d3438203d3e203136393039.roa
File: 326131343a373538343a363034653a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier: zfnkYTw6M5KETl5F8gut0QLqSpOapvqKqbHYVuHL0ec=
Subject key identifier: 52:C8:EF:0F:EA:28:B1:43:D0:B8:E1:5A:DC:26:3C:AA:13:F5:CE:ED
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 65DC4B8858D0BA16520F780CF105A8B46DD8F961
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363034653a3a2f34382d3438203d3e203136393039.roa
Signing time: Sun 02 Mar 2025 15:26:11 +0000
ROA not before: Sun 02 Mar 2025 15:21:11 +0000
ROA not after: Sun 01 Mar 2026 15:26:11 +0000
asID: 16909
IP address blocks: 2a14:7584:604e::/48 maxlen: 48
Validation: Failed, certificate revoked on Mon 10 Mar 2025 12:11:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
65:dc:4b:88:58:d0:ba:16:52:0f:78:0c:f1:05:a8:b4:6d:d8:f9:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: Mar 2 15:21:11 2025 GMT
Not After : Mar 1 15:26:11 2026 GMT
Subject: CN=52C8EF0FEA28B143D0B8E15ADC263CAA13F5CEED
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:26:0d:96:f5:65:d5:ea:aa:87:79:6c:b9:16:
f3:78:0b:5a:eb:e2:22:e6:5b:15:cb:69:72:bd:2d:
9d:96:70:73:bc:be:1e:f2:e8:72:4d:51:8f:5f:43:
a5:d7:fe:42:3a:21:32:30:1c:27:b8:0b:d9:6d:0b:
8d:37:49:ab:ce:e2:95:b6:22:9a:6e:0e:71:f1:1b:
77:df:7f:1e:55:50:b4:81:e8:1e:94:51:01:20:6a:
54:a1:84:de:ab:0a:63:ac:86:bf:45:c4:b3:ad:d0:
c9:0a:23:05:71:be:76:5e:7c:59:7b:39:e1:b3:22:
f5:e2:a6:95:af:cd:71:a2:9f:dc:7e:52:02:81:43:
92:70:54:db:99:5c:f1:c5:ce:37:e2:97:12:7c:4d:
79:1f:9b:fe:ee:28:19:88:a7:0e:32:33:0c:37:af:
03:99:91:97:01:92:05:2b:81:03:48:ba:e9:48:cd:
8e:fe:35:9a:c1:c2:ca:5e:d5:53:22:fd:c8:0c:5a:
74:e5:59:4b:84:43:bf:a6:2a:ba:dd:04:79:4c:d5:
ec:63:61:dc:b6:b0:3d:00:57:98:53:a0:2c:b0:e2:
91:9f:ce:8d:36:53:12:98:d6:97:09:9f:37:35:b5:
69:e7:cf:47:a5:12:a8:43:0a:12:ea:d0:10:f4:3f:
fa:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:C8:EF:0F:EA:28:B1:43:D0:B8:E1:5A:DC:26:3C:AA:13:F5:CE:ED
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363034653a3a2f34382d3438203d3e203136393039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:604e::/48
Signature Algorithm: sha256WithRSAEncryption
08:c4:cb:d4:ab:58:bf:37:af:5e:b9:79:d6:4a:cd:23:8e:43:
ee:a3:05:6b:51:c7:1f:10:5d:97:23:98:3e:10:d2:6f:0c:55:
23:64:c4:1d:4d:de:b7:0d:71:84:ed:ab:e5:1c:16:83:18:0a:
29:58:2f:08:8a:d4:10:92:ea:dc:dd:97:9b:c7:3e:50:43:6c:
72:5a:fc:fd:54:55:2b:b5:8f:dd:8a:db:de:71:50:84:a8:fa:
f8:7c:63:d2:03:49:f3:9a:39:a9:6c:89:08:7d:5c:e4:40:ec:
f7:42:6c:dd:42:64:70:1a:e4:59:17:05:9f:27:96:dd:d4:2b:
eb:1b:66:34:e4:da:28:f6:e8:d1:13:fe:a9:5d:65:2d:53:a8:
94:8e:be:51:d5:25:18:b1:93:40:5a:7d:fc:bd:0e:50:08:ee:
80:03:69:00:9d:85:6a:86:5b:91:95:e8:41:8c:af:fe:86:63:
89:e6:00:65:02:34:a5:d2:72:4b:5e:9d:62:fb:58:34:38:02:
a8:3a:32:9e:33:79:d4:11:e6:8c:60:ac:97:f0:0c:0d:88:ba:
1c:cc:99:21:d7:73:ae:8b:f5:b0:2c:03:c0:d4:69:6f:12:fa:
9c:be:98:f0:41:44:c8:c5:b0:c2:68:fd:6b:54:9a:1b:de:07:
f4:64:a0:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 00:40:22 2025 by rpki-client