Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363035633a3a2f34382d3438203d3e203136393039.roa
File: 326131343a373538343a363035633a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier: GBJKZor/WivkjuZH6XA6FAD0l8vcKICCVyjzOLUbnIo=
Subject key identifier: 1B:2E:E1:D4:17:31:7A:F8:8B:C8:F4:6C:E7:00:8F:B6:04:E4:24:6A
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 1287CE5D5B19544A9C0F87EB7F4D4C0019F8C37A
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363035633a3a2f34382d3438203d3e203136393039.roa
Signing time: Sun 02 Mar 2025 15:27:05 +0000
ROA not before: Sun 02 Mar 2025 15:22:05 +0000
ROA not after: Sun 01 Mar 2026 15:27:05 +0000
asID: 16909
IP address blocks: 2a14:7584:605c::/48 maxlen: 48
Validation: Failed, certificate revoked on Mon 10 Mar 2025 12:11:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
12:87:ce:5d:5b:19:54:4a:9c:0f:87:eb:7f:4d:4c:00:19:f8:c3:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: Mar 2 15:22:05 2025 GMT
Not After : Mar 1 15:27:05 2026 GMT
Subject: CN=1B2EE1D417317AF88BC8F46CE7008FB604E4246A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:a7:57:5b:9c:a4:2f:0d:93:80:5a:93:87:b2:
ac:ee:7f:fb:d7:f5:15:c5:81:fd:46:10:b7:f0:fd:
18:a8:de:61:30:4a:1f:12:35:df:35:20:2e:15:0c:
c1:f6:d6:70:2f:1b:84:17:73:f4:3a:65:22:bf:98:
a5:2a:b7:31:4b:75:c7:9f:3d:9b:f7:91:61:a4:5e:
45:96:7b:51:e9:b8:3f:d6:8f:a1:75:85:f4:a9:86:
36:ef:34:a8:7e:49:eb:f5:39:13:46:ae:7a:99:1a:
3a:6b:a8:50:95:c8:4a:ec:7f:2f:50:0c:60:0c:2e:
20:0b:06:c6:0a:ca:63:d1:e2:5f:88:af:3b:a8:30:
91:27:9b:5e:c1:9b:5f:c6:0e:32:4f:07:15:17:5b:
2f:3c:d5:6a:bb:4a:2e:9b:a7:71:0a:20:30:05:d2:
07:93:a2:42:35:27:e7:57:a0:f9:60:a4:4d:4d:29:
04:d3:07:2f:08:9d:a4:9b:b3:d3:aa:83:98:a4:4d:
e3:1d:0c:06:2a:39:29:7e:c2:c9:10:12:c7:f8:4a:
55:f4:45:17:29:96:db:61:06:f2:d0:7a:4e:f5:6c:
01:43:cc:cb:15:e1:07:0f:1e:2f:b4:5c:8b:ef:8e:
bd:2b:d1:b0:90:8b:55:5b:c9:e0:ce:5e:60:97:3b:
44:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:2E:E1:D4:17:31:7A:F8:8B:C8:F4:6C:E7:00:8F:B6:04:E4:24:6A
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363035633a3a2f34382d3438203d3e203136393039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:605c::/48
Signature Algorithm: sha256WithRSAEncryption
06:e9:13:db:92:a0:08:cf:07:9a:97:f6:0e:34:5a:f4:3d:0c:
99:1d:a2:c1:f0:2a:de:52:72:5b:71:8e:3a:10:ad:dc:a8:df:
00:7c:71:36:33:85:85:71:f5:2b:b7:b1:31:bf:c1:cd:c9:fc:
91:05:b7:a6:47:c4:9b:fc:8a:04:51:f3:84:5a:db:d7:45:03:
4d:7d:21:7c:64:d4:a0:18:44:fe:29:81:48:ea:e3:5a:a6:1e:
c3:ae:1f:0f:1b:e9:be:7f:03:7c:35:d2:84:cf:1f:03:41:bd:
bf:6b:f9:0a:22:10:a5:58:8f:88:ed:2e:74:ed:cd:9d:4c:90:
5f:19:03:46:7a:de:c9:9e:18:9e:f6:9c:84:ef:b6:de:90:33:
a1:ed:e8:92:3c:05:2e:11:1c:c4:0f:11:38:45:f3:53:a8:6f:
96:6b:70:9d:e1:8b:93:93:d3:a5:4c:c7:ae:6b:ed:50:e3:60:
38:8d:2e:3d:2d:be:f7:a9:53:63:e7:f0:00:3e:32:ee:04:58:
7e:b5:9e:36:13:99:39:65:8c:85:a3:95:e9:bb:6b:bc:b1:98:
6d:ff:9d:e7:c0:54:6c:81:74:c6:34:67:ea:33:ec:cb:bf:1f:
f4:cf:d0:ce:e8:50:e2:78:78:df:c4:9d:f9:83:68:36:80:5d:
27:38:1f:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 00:41:25 2025 by rpki-client