Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363036363a3a2f34382d3438203d3e203136393039.roa
File: 326131343a373538343a363036363a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier: vA0apJyMxq2Mg7y352YlUYxODVbOwPFC38Nt4SipPLU=
Subject key identifier: B8:9C:F6:21:64:C3:98:88:AB:89:55:DC:0A:61:F5:6F:01:74:6E:D1
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 0D7F271CEADC97F3ADF950C7232446CF90F8B153
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363036363a3a2f34382d3438203d3e203136393039.roa
Signing time: Sun 02 Mar 2025 15:27:31 +0000
ROA not before: Sun 02 Mar 2025 15:22:31 +0000
ROA not after: Sun 01 Mar 2026 15:27:31 +0000
asID: 16909
IP address blocks: 2a14:7584:6066::/48 maxlen: 48
Validation: Failed, certificate revoked on Sun 16 Mar 2025 16:16:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0d:7f:27:1c:ea:dc:97:f3:ad:f9:50:c7:23:24:46:cf:90:f8:b1:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: Mar 2 15:22:31 2025 GMT
Not After : Mar 1 15:27:31 2026 GMT
Subject: CN=B89CF62164C39888AB8955DC0A61F56F01746ED1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:1c:44:0f:ea:2a:0c:ba:59:d2:01:68:d1:1c:
da:50:f9:45:98:a7:1a:7a:74:81:db:b6:8d:84:1d:
53:91:00:95:3d:fe:3d:d1:3c:9d:c1:b3:f1:00:48:
99:2e:57:3a:f1:9e:b2:57:83:49:10:e0:2e:c5:b9:
f3:14:97:c8:7d:ed:61:9d:c6:db:e9:7f:87:9c:39:
57:ab:bd:bc:25:d6:ea:0d:f9:11:34:98:7b:96:08:
b9:d4:fa:32:5d:b2:cd:cc:0c:74:c1:33:48:c1:25:
39:77:88:ce:18:40:2a:1e:74:fa:0e:7d:b6:88:65:
8a:2d:02:11:ad:df:65:6f:0e:3a:46:83:11:41:ec:
1c:10:61:e7:19:06:b9:d1:40:ef:d6:8f:41:52:f6:
c4:bc:e9:8e:a9:f4:5f:81:b0:bd:9e:7f:72:51:cf:
41:f1:22:5a:85:7f:2f:01:24:a1:b5:0d:bb:ca:01:
cc:69:b2:6e:c9:f4:bd:9b:56:c1:57:82:60:5e:b4:
34:c0:1e:f3:46:f8:31:17:85:a7:28:ee:77:72:d6:
f9:e3:38:df:ac:39:61:d6:3c:91:d8:b3:0e:fe:f4:
81:2f:25:04:49:9b:7f:d2:16:c8:88:0b:39:5e:38:
88:e8:6c:25:00:2c:b5:92:7f:89:68:a2:a8:d4:73:
32:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:9C:F6:21:64:C3:98:88:AB:89:55:DC:0A:61:F5:6F:01:74:6E:D1
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363036363a3a2f34382d3438203d3e203136393039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:6066::/48
Signature Algorithm: sha256WithRSAEncryption
37:9a:11:56:ee:16:dd:75:91:66:fa:6e:f2:18:f0:86:67:0d:
79:03:97:23:cd:8c:59:ac:f6:94:f0:c3:63:bd:c0:16:a5:08:
c4:73:77:7c:c4:b8:c2:41:88:da:70:02:ab:ba:ce:07:2d:65:
2f:a9:f3:ee:db:db:36:38:4d:ef:d9:d0:8a:d0:96:50:87:b0:
8e:30:ec:02:15:c0:00:08:c0:ba:30:22:79:ca:eb:1b:3d:d2:
5a:ed:da:3f:a3:13:bf:67:f2:98:4d:e8:47:27:0d:0e:20:91:
23:51:6c:8d:0c:a9:e8:ed:ad:a8:12:5a:fd:5d:3f:41:08:2a:
21:f2:8e:06:6a:1f:f8:1c:a8:25:90:67:fb:73:de:f7:73:59:
4c:c4:7a:c6:ce:46:5b:b0:a1:14:26:8f:c5:eb:39:e3:a0:fe:
40:83:83:64:bc:0d:4f:65:7a:41:0a:7a:7d:da:95:3d:fa:4a:
2a:54:07:1f:cb:b7:b6:f6:56:c7:4d:86:41:f6:83:67:9b:78:
74:0a:06:34:2f:4d:de:3f:db:c6:ae:0b:dd:bd:9e:8e:65:41:
74:68:d3:7f:cd:a0:e9:61:f8:80:d3:88:cb:9e:24:a6:ed:da:
99:9d:4d:22:37:55:3a:36:05:55:fd:0b:70:1e:07:ae:b8:24:
e8:11:56:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 00:44:55 2025 by rpki-client