Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363034663a3a2f34382d3438203d3e203136393039.roa
File: 326131343a373538343a363034663a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier: B6x1AuV1pTwYYXoBzMAwGL5jMn7QkgRTpZZ7l5Rs5v8=
Subject key identifier: 42:E5:C8:D3:92:D2:09:47:C3:A1:54:45:3B:CA:82:6A:01:9B:DF:E7
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 4534903D2F908F35D5C048F9DBA01D1351257D2C
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363034663a3a2f34382d3438203d3e203136393039.roa
Signing time: Sun 02 Mar 2025 15:26:12 +0000
ROA not before: Sun 02 Mar 2025 15:21:12 +0000
ROA not after: Sun 01 Mar 2026 15:26:12 +0000
asID: 16909
IP address blocks: 2a14:7584:604f::/48 maxlen: 48
Validation: Failed, certificate revoked on Mon 10 Mar 2025 12:11:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
45:34:90:3d:2f:90:8f:35:d5:c0:48:f9:db:a0:1d:13:51:25:7d:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: Mar 2 15:21:12 2025 GMT
Not After : Mar 1 15:26:12 2026 GMT
Subject: CN=42E5C8D392D20947C3A154453BCA826A019BDFE7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:c4:b9:13:80:fe:63:a8:1a:4f:99:0d:a6:1b:
1a:13:31:d1:0f:d0:77:9a:af:fc:38:75:47:e5:b0:
e3:d3:90:be:3f:b0:e3:8e:7d:fd:13:f6:20:0a:ee:
f2:0c:70:c3:af:85:ff:82:32:8e:06:6f:7b:90:47:
c1:61:d5:89:28:80:ae:5f:d1:b4:96:d0:c1:98:21:
cd:e2:a3:9f:10:68:da:1a:74:33:2b:51:60:40:17:
45:e4:4a:5b:3d:e0:86:55:c2:68:c1:37:8f:e2:da:
72:8c:6a:68:ce:94:57:c1:02:ee:5a:47:99:bd:d9:
87:27:0b:19:47:67:c8:a5:b0:71:d2:ee:1d:81:f5:
4a:22:ae:07:a2:a8:f2:eb:69:9a:cd:fa:8c:95:b1:
ee:fb:8c:1e:9e:25:ff:5d:0c:5d:b7:46:f6:bb:4f:
5c:a2:1f:44:4b:d5:b3:0e:5a:44:63:e8:1e:a0:5b:
1f:46:d4:e0:2c:7f:57:91:68:28:56:24:b8:95:e8:
1f:fc:6b:99:bb:70:f3:08:45:f1:50:ad:f7:28:5a:
a2:79:fb:ca:04:4d:d7:ba:4d:ff:a7:0e:3a:95:98:
69:39:db:14:59:cb:29:75:f7:da:da:64:25:b0:66:
bc:46:1d:1f:e1:1a:60:32:03:97:2b:60:e9:a7:0f:
e1:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:E5:C8:D3:92:D2:09:47:C3:A1:54:45:3B:CA:82:6A:01:9B:DF:E7
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363034663a3a2f34382d3438203d3e203136393039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:604f::/48
Signature Algorithm: sha256WithRSAEncryption
5c:38:87:19:1d:6d:42:1e:0c:c9:e3:6c:00:47:2c:be:f6:c0:
5f:ce:c5:a5:5f:a5:96:36:b9:3e:54:fb:30:7e:1a:79:ed:31:
18:ec:e4:d9:b8:ad:65:00:a4:32:16:3b:f2:37:11:9d:08:0e:
63:85:43:aa:54:f0:31:7d:de:d7:9a:75:6b:da:75:e5:bd:77:
6d:82:a2:b5:12:be:0a:2d:95:36:fa:75:c8:6c:33:7d:fc:af:
81:c4:51:a1:06:1c:37:4c:1c:51:87:36:bd:48:b8:a5:bd:37:
2f:9e:24:c6:5a:d7:94:34:44:f9:b8:82:96:d8:c5:7e:f7:94:
47:01:08:ae:2a:64:c8:cc:40:10:24:be:27:df:f2:e8:64:e4:
4d:71:3a:a8:50:76:54:9c:85:f3:4b:09:f8:ab:9d:5f:69:0c:
47:0f:eb:c1:bc:2d:f2:ad:a0:5b:ad:0b:97:41:5f:7a:0e:9f:
17:ac:4b:f8:71:4e:46:81:f7:04:ac:5b:f9:6c:c6:e1:ae:15:
ab:eb:b3:ed:64:5b:70:0e:48:bd:87:80:77:44:5c:72:86:ed:
88:65:26:37:0e:24:be:bd:11:40:b3:96:4a:5e:20:f3:12:b7:
82:9d:ff:72:79:4c:be:08:de:2c:53:f8:6a:b5:3f:a6:7a:58:
87:e0:95:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 00:41:19 2025 by rpki-client