Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363035333a3a2f34382d3438203d3e203136393039.roa
File: 326131343a373538343a363035333a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier: YmCvCrViyUHO8Gv3oAbdkjo54fwJDbsEIwuKazhkEOY=
Subject key identifier: FE:AD:53:8D:43:FF:35:8B:4C:9C:07:6A:11:18:90:A5:59:B7:F8:71
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 22FD66B95AF60C0A253555A84236529E0D2DA759
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363035333a3a2f34382d3438203d3e203136393039.roa
Signing time: Sun 02 Mar 2025 15:26:14 +0000
ROA not before: Sun 02 Mar 2025 15:21:14 +0000
ROA not after: Sun 01 Mar 2026 15:26:14 +0000
asID: 16909
IP address blocks: 2a14:7584:6053::/48 maxlen: 48
Validation: Failed, certificate revoked on Sun 16 Mar 2025 16:16:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
22:fd:66:b9:5a:f6:0c:0a:25:35:55:a8:42:36:52:9e:0d:2d:a7:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: Mar 2 15:21:14 2025 GMT
Not After : Mar 1 15:26:14 2026 GMT
Subject: CN=FEAD538D43FF358B4C9C076A111890A559B7F871
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:04:c2:a0:ba:a3:2a:1c:c4:f6:85:5e:2a:c1:
41:78:bc:c5:73:64:59:8a:aa:ff:4c:d8:dc:0b:48:
52:21:f1:2f:77:60:03:58:e7:60:bc:74:a3:59:41:
13:fb:aa:7c:eb:69:27:01:f9:f2:86:6b:15:fa:a6:
ca:e7:29:d3:fb:1c:e2:b5:0e:69:16:2f:65:27:23:
58:31:fb:f9:4a:be:2c:bf:85:60:22:63:e7:cd:b0:
df:8f:72:03:a3:b3:07:d5:58:94:16:78:36:28:54:
5c:1f:35:f2:6e:6c:4a:b9:d2:a1:c2:4e:cf:3c:88:
f7:87:60:c9:0e:f5:bb:ff:80:f0:f8:2c:00:c2:ac:
1d:2f:2d:4e:e3:fa:15:d6:a4:d1:ce:df:37:35:d6:
d4:f0:c3:41:c3:6f:5b:bd:03:d0:06:86:5a:8f:27:
a2:1a:15:ed:37:3d:26:44:69:f8:a2:3c:fa:0c:4f:
ad:19:39:06:b7:da:15:d8:28:b2:83:30:88:a9:b6:
a0:e4:e6:5e:b4:06:68:0b:19:4e:6c:f7:bf:a0:92:
ac:08:d0:f6:a2:64:0c:35:6f:08:6d:2d:0d:25:9e:
a6:3f:77:e2:52:e5:68:aa:96:c6:b0:b8:74:e9:37:
54:51:3c:9e:bd:bc:d5:dd:a8:df:c0:b2:24:08:16:
69:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:AD:53:8D:43:FF:35:8B:4C:9C:07:6A:11:18:90:A5:59:B7:F8:71
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363035333a3a2f34382d3438203d3e203136393039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:6053::/48
Signature Algorithm: sha256WithRSAEncryption
70:ff:1a:a6:04:fc:72:c4:ad:af:bb:35:4f:db:c9:10:b0:76:
6d:0e:a2:ef:dd:a7:ca:49:16:c4:0e:af:24:71:5c:0e:b1:50:
a3:ec:b8:59:51:21:de:15:28:16:38:5f:ea:d4:f4:5a:e6:14:
65:0b:ed:01:5d:f9:73:b2:4d:63:d0:4e:77:b4:a6:5d:29:ea:
94:9a:3e:26:18:98:d5:36:d5:11:9e:70:32:8b:26:ec:e4:b9:
83:6e:14:c2:bd:0a:bd:96:13:ac:15:fa:ff:1c:50:5f:25:78:
fd:e3:6b:5c:a8:15:0e:7b:ea:64:9b:6d:5d:23:55:cb:de:a8:
cd:32:47:66:60:cd:72:27:2f:93:5f:48:c3:d1:9a:e1:d4:e8:
a3:d0:26:cb:e0:3a:6c:8f:c2:08:70:b5:d2:1f:58:0b:cd:d1:
7e:3f:e7:f6:a6:df:7c:c8:e0:a7:06:81:69:b5:e0:47:94:e2:
4f:98:7e:bb:1b:da:01:ce:8e:94:b7:29:9a:5c:cf:bb:df:99:
b1:7d:0e:84:f4:ea:ce:26:ad:16:52:7d:da:e6:85:ff:79:84:
de:bf:f2:e3:30:35:49:6c:92:b8:b6:b0:0e:be:f2:98:92:f0:
05:90:96:52:f6:2f:c9:35:44:bc:e9:d7:94:b6:ef:9e:7f:39:
e5:05:31:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 06:00:22 2025 by rpki-client