Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363035383a3a2f34382d3438203d3e203136393039.roa
File: 326131343a373538343a363035383a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier: s66ygWgS4OcaiX6SAlA5Q1f6NKkaFjmxVcpFykAfMEE=
Subject key identifier: 11:12:B5:1D:32:B9:FA:DE:30:0D:AC:0A:BE:0C:69:09:1A:4E:43:3E
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 15896F932D94CCE9EFCD1B29B46C206F7ACAA81A
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363035383a3a2f34382d3438203d3e203136393039.roa
Signing time: Sun 02 Mar 2025 15:26:48 +0000
ROA not before: Sun 02 Mar 2025 15:21:48 +0000
ROA not after: Sun 01 Mar 2026 15:26:48 +0000
asID: 16909
IP address blocks: 2a14:7584:6058::/48 maxlen: 48
Validation: Failed, certificate revoked on Sun 16 Mar 2025 16:16:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
15:89:6f:93:2d:94:cc:e9:ef:cd:1b:29:b4:6c:20:6f:7a:ca:a8:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: Mar 2 15:21:48 2025 GMT
Not After : Mar 1 15:26:48 2026 GMT
Subject: CN=1112B51D32B9FADE300DAC0ABE0C69091A4E433E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:c8:f4:31:1b:63:d8:b1:c4:ec:20:fb:92:98:
6b:82:24:e7:aa:dc:53:eb:5b:32:47:a2:12:be:04:
fb:a8:f3:3d:32:17:c2:fe:40:9a:5b:96:24:16:81:
b6:19:07:2a:54:3b:e3:08:7d:de:75:d3:f8:19:dd:
da:fe:b4:1c:f5:93:6c:a6:c4:e7:4e:71:e1:ab:66:
72:2d:79:0f:a1:60:d5:f5:ed:46:9c:df:26:5d:bf:
c7:05:de:68:55:98:fe:db:2a:f4:3c:1f:75:9e:e0:
61:7f:c0:77:24:4f:ef:b1:2c:47:b6:dd:c4:dd:9d:
60:09:88:94:f1:a9:8e:13:40:e3:6a:b8:bd:81:a3:
9c:96:05:da:2e:5f:ab:4e:4c:14:f2:a2:28:8d:14:
01:da:5d:26:6d:d0:4a:e0:e5:c8:05:1e:b1:9b:76:
4c:90:dd:fb:78:cb:5e:e9:b2:1d:65:db:c2:78:11:
62:2c:b3:8a:bd:f7:4a:fb:a5:7c:b1:d9:05:d1:ef:
aa:91:08:95:c6:e2:f8:88:5c:53:9b:94:1b:6e:ed:
e4:e3:04:17:9d:f8:52:33:fa:e4:6d:1c:78:87:87:
f0:3c:46:e5:30:d0:ff:ef:2e:32:76:6a:33:8e:ba:
e8:f9:ea:23:7a:5b:60:5a:8b:fa:a0:35:7a:7a:0c:
78:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:12:B5:1D:32:B9:FA:DE:30:0D:AC:0A:BE:0C:69:09:1A:4E:43:3E
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363035383a3a2f34382d3438203d3e203136393039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:6058::/48
Signature Algorithm: sha256WithRSAEncryption
50:00:26:f9:8c:c1:13:28:f9:a2:fd:d1:0a:7f:5f:f9:85:26:
54:d9:b3:5b:ea:e5:80:6b:7c:d1:e6:00:ee:1f:84:37:d4:75:
7b:f5:12:c5:e3:9e:bf:b6:73:a7:8d:0a:0f:fe:42:d6:0b:7d:
11:8e:5a:b3:5d:9e:13:c1:fa:10:cc:eb:0c:a8:c9:db:e1:87:
86:61:ad:a6:3b:59:a1:eb:71:80:9a:20:45:d0:0f:8a:47:3f:
44:24:ad:d0:68:32:8d:7b:b3:3d:3b:65:ee:b4:03:a6:17:86:
9c:9f:c7:40:f9:b0:0f:cd:3b:a3:b9:8a:6d:52:8c:9c:07:6b:
1e:ce:0c:cf:e2:20:6e:7f:38:24:5b:c5:d6:01:3a:f6:44:6f:
62:44:48:bd:96:0b:59:af:69:46:3d:aa:0a:63:76:ce:cb:51:
1c:36:94:ed:0c:7e:a9:6e:c3:1b:e8:42:a8:2d:33:f6:6e:2b:
4d:08:14:22:36:59:ce:79:63:42:0d:7e:03:3f:60:07:6d:93:
fd:d9:7e:44:5b:fa:3e:f3:a2:30:27:15:e3:fa:c2:d2:ef:95:
d1:dc:53:25:56:eb:50:d4:a3:50:7d:1c:9c:6b:d9:79:91:2c:
8f:f7:73:d2:06:d3:c3:a9:17:52:e4:1e:c1:8b:cd:6f:2f:de:
2e:da:2b:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 00:42:12 2025 by rpki-client