Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363035323a3a2f34382d3438203d3e203136393039.roa
File: 326131343a373538343a363035323a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier: 4AIjj0IHY0vwHjKhWlZJ7SmNn3h7jncSeDR6B/PPLQk=
Subject key identifier: A1:0E:E5:1A:76:4F:E8:EB:24:5E:20:89:BD:F2:C0:1C:81:10:89:C3
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 6F3F960FE92ECD9A25B6BA243A78586A0509D9A6
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363035323a3a2f34382d3438203d3e203136393039.roa
Signing time: Sun 02 Mar 2025 15:26:14 +0000
ROA not before: Sun 02 Mar 2025 15:21:14 +0000
ROA not after: Sun 01 Mar 2026 15:26:14 +0000
asID: 16909
IP address blocks: 2a14:7584:6052::/48 maxlen: 48
Validation: Failed, certificate revoked on Mon 10 Mar 2025 12:11:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6f:3f:96:0f:e9:2e:cd:9a:25:b6:ba:24:3a:78:58:6a:05:09:d9:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: Mar 2 15:21:14 2025 GMT
Not After : Mar 1 15:26:14 2026 GMT
Subject: CN=A10EE51A764FE8EB245E2089BDF2C01C811089C3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:9a:ed:c1:63:32:b2:8d:a2:ed:21:39:46:e3:
6a:4d:44:cb:fe:26:3e:f3:b6:8a:24:77:22:bc:97:
5d:5e:bd:1c:0e:57:80:31:ae:d6:0c:b7:8c:3d:dc:
0f:52:49:25:6f:3f:50:b9:39:8e:ee:62:3b:4a:19:
44:98:75:52:52:a2:67:9e:a2:ea:9c:49:21:e4:d1:
fa:b8:2a:f4:23:22:e7:91:5b:02:d0:58:2d:ab:a5:
0d:e1:e9:1b:f7:9a:3f:91:4f:24:d9:54:21:01:98:
68:cb:f7:8c:0e:a9:27:f8:f3:03:ea:05:6d:d3:4a:
24:55:9f:de:0f:ef:3b:b6:af:77:91:8b:52:fa:b7:
af:c3:6b:cf:b2:dc:f7:e4:3f:ba:23:93:86:f7:34:
01:c0:da:96:77:8e:e7:b6:63:37:d5:d0:cd:aa:38:
54:61:0d:35:cc:77:a6:31:a6:3d:e9:fe:70:7d:48:
2a:b0:b5:69:55:4f:b3:63:23:67:23:2f:93:f2:26:
08:f5:26:19:2d:d3:03:61:fa:83:ee:d2:48:a6:ba:
32:6c:c2:b0:3c:1f:f8:0f:b9:b7:b6:35:9f:d5:28:
d9:32:c2:ff:4a:00:7d:e3:20:8c:4a:e3:7d:42:f2:
ba:53:fe:c7:02:6e:9e:79:a7:63:45:48:15:dd:7d:
27:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:0E:E5:1A:76:4F:E8:EB:24:5E:20:89:BD:F2:C0:1C:81:10:89:C3
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363035323a3a2f34382d3438203d3e203136393039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:6052::/48
Signature Algorithm: sha256WithRSAEncryption
b1:22:9f:7a:1c:be:af:8b:d3:06:18:1b:2f:89:25:06:44:c3:
ed:59:14:56:7e:8c:54:9d:ed:cf:98:f4:52:3f:6f:32:50:03:
e5:ec:c4:61:7a:79:65:ab:86:48:d0:46:3e:4c:52:0c:b0:a5:
36:9f:f4:bc:50:2c:9d:54:95:8d:d5:d8:32:26:10:31:5c:04:
24:f2:8c:e3:eb:1e:a5:83:3e:cf:ff:5f:11:54:ff:1b:ec:62:
dd:51:b1:0d:1e:59:7c:54:2e:56:bd:31:d8:4e:a8:f9:34:2b:
ca:64:ca:2c:e1:c4:1f:22:a1:19:87:7c:ae:81:98:1b:b7:e7:
91:11:66:3d:bb:07:c3:e8:fa:e9:ba:21:bf:f9:ec:7f:76:6e:
86:76:ad:93:b8:6f:f3:54:44:c9:47:f0:2b:f5:a8:5f:94:19:
c5:39:df:27:89:6b:25:7d:ed:87:38:12:c3:6b:91:ba:fd:fb:
a5:28:5c:75:f5:99:da:fd:44:fe:a7:77:da:0d:7a:bf:a7:fe:
b6:0e:be:4f:3b:a0:3b:5d:18:db:b6:97:51:6f:f1:5e:94:b5:
2f:7b:41:1e:c1:86:9b:b8:14:f9:07:aa:86:cd:9d:15:4f:65:
19:62:03:7b:f1:e5:9d:b1:02:99:9d:72:3f:c9:74:8f:c3:91:
9e:48:aa:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 00:45:09 2025 by rpki-client