Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363035643a3a2f34382d3438203d3e203136393039.roa
File: 326131343a373538343a363035643a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier: n1WLaNaabj2cNdCIwHQLi/hJwnyUE/qUOjuNs+DvjJ8=
Subject key identifier: D0:80:83:D7:3A:5A:D9:B5:BA:F7:65:55:73:17:51:5D:EF:8E:9C:F0
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 62B2013389FB264B724F9B743B1503C20932370E
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363035643a3a2f34382d3438203d3e203136393039.roa
Signing time: Sun 02 Mar 2025 15:27:05 +0000
ROA not before: Sun 02 Mar 2025 15:22:05 +0000
ROA not after: Sun 01 Mar 2026 15:27:05 +0000
asID: 16909
IP address blocks: 2a14:7584:605d::/48 maxlen: 48
Validation: Failed, certificate revoked on Mon 10 Mar 2025 12:11:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
62:b2:01:33:89:fb:26:4b:72:4f:9b:74:3b:15:03:c2:09:32:37:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: Mar 2 15:22:05 2025 GMT
Not After : Mar 1 15:27:05 2026 GMT
Subject: CN=D08083D73A5AD9B5BAF765557317515DEF8E9CF0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:b7:17:e1:b6:b2:65:b1:b4:55:65:be:cd:a1:
f7:91:10:f0:84:a7:7b:c3:22:ca:38:47:52:19:c9:
bd:e8:0c:61:0f:34:2d:8f:63:67:ca:db:0b:95:bc:
35:f1:e9:6f:30:2d:8a:f3:53:f0:bb:c0:a8:e1:8b:
c7:e7:2d:3d:5c:64:11:9e:c1:c7:3b:22:65:60:43:
28:b9:1c:3e:70:fc:6c:a7:56:da:a0:22:75:4d:54:
3f:a1:bc:e7:25:0c:7e:25:ab:a1:78:94:27:23:d3:
51:4a:f7:37:a3:b2:8e:6e:97:69:39:57:91:1c:f6:
85:96:d9:49:b4:41:1a:da:5b:23:72:58:24:ea:4b:
9f:1a:ef:16:c1:80:02:36:08:d4:67:7d:c7:68:b5:
67:a4:11:dc:47:9d:b0:44:96:b1:f3:06:99:4b:d6:
00:17:ef:80:4a:81:2b:ee:f5:85:ac:61:44:e4:61:
d1:c3:f7:59:89:0a:7d:85:6a:c3:5b:ca:18:5b:ec:
28:15:b0:69:5d:14:76:23:73:98:37:5c:cd:41:ba:
a2:4a:e6:cc:96:cb:6f:12:9c:b0:ac:13:1c:dc:5c:
63:b5:ed:05:f1:0f:87:f8:c4:2f:18:f2:17:fc:e2:
ab:f3:f9:45:27:83:a7:41:4d:de:d3:6d:e2:ee:56:
52:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:80:83:D7:3A:5A:D9:B5:BA:F7:65:55:73:17:51:5D:EF:8E:9C:F0
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363035643a3a2f34382d3438203d3e203136393039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:605d::/48
Signature Algorithm: sha256WithRSAEncryption
ad:c9:3f:4f:22:85:08:60:12:c0:b9:c2:87:1b:5f:71:a2:e6:
33:07:f6:06:95:d9:02:e8:5f:dd:f7:0b:3c:81:6c:ae:93:ee:
21:c7:6f:35:e8:d4:28:fc:e6:76:9a:2e:11:da:17:06:59:a4:
09:71:fb:12:e0:10:d8:77:fc:46:87:0f:66:42:50:17:d6:b6:
4b:8d:e9:29:1a:77:01:0c:9c:63:58:1f:49:fa:33:2a:7e:5f:
c2:e7:36:bc:be:d0:62:94:ef:de:5a:33:20:d2:cd:59:f7:f0:
98:4d:cd:71:34:b7:b2:3e:86:c1:1e:f4:2f:4b:88:94:c8:52:
7a:f9:22:a5:cf:d2:cd:b4:8b:31:b3:76:f7:b7:3f:c5:ba:1a:
95:7b:3d:e4:a7:25:0d:06:ad:21:80:d9:8f:4e:f9:b7:b2:88:
ce:4b:6b:6d:40:b6:af:8b:de:5a:88:a4:29:85:57:0e:09:b7:
08:ba:27:b8:b0:ab:64:7d:71:25:b7:75:eb:ce:05:8a:4a:9c:
cd:d4:e2:90:07:80:58:38:85:7e:4b:be:c0:6f:98:9d:e0:f6:
a4:66:dd:cc:3f:c0:fa:5b:af:77:2d:9e:de:93:7a:db:1f:07:
75:75:7f:d9:42:33:88:cb:d8:bb:38:97:24:4b:93:cb:04:c3:
fd:15:2a:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 00:39:09 2025 by rpki-client