Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363036613a3a2f34382d3438203d3e20343031353037.roa
File: 326131343a373538343a363036613a3a2f34382d3438203d3e20343031353037.roa (raw, json)
Hash identifier: StXoYwIMO6v1hhNgmcBt1bKll6bxy+HWHCfljCbQDqQ=
Subject key identifier: F6:F2:B9:EE:67:90:F8:13:3C:83:72:E9:6B:F9:8C:DF:63:5D:36:2E
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 5F330E719B079F4C73027582BB021AA50E075F8B
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363036613a3a2f34382d3438203d3e20343031353037.roa
Signing time: Mon 10 Mar 2025 11:53:31 +0000
ROA not before: Mon 10 Mar 2025 11:48:31 +0000
ROA not after: Mon 09 Mar 2026 11:53:31 +0000
asID: 401507
IP address blocks: 2a14:7584:606a::/48 maxlen: 48
Validation: Failed, certificate revoked on Sun 16 Mar 2025 16:17:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5f:33:0e:71:9b:07:9f:4c:73:02:75:82:bb:02:1a:a5:0e:07:5f:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: Mar 10 11:48:31 2025 GMT
Not After : Mar 9 11:53:31 2026 GMT
Subject: CN=F6F2B9EE6790F8133C8372E96BF98CDF635D362E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:91:88:e9:b0:63:53:ac:90:1c:1b:1a:72:84:
ac:9d:c9:b7:17:77:6a:ff:a8:75:26:68:57:e1:cf:
84:5d:6e:aa:ee:5c:4c:10:a4:83:01:9d:1a:65:b5:
51:7b:0b:a3:9c:5f:56:09:ec:bb:f7:bf:56:4c:6c:
c6:9f:c5:86:0b:1c:66:83:7a:30:9f:c2:ec:6f:25:
a9:e6:54:39:35:f4:95:03:ff:7c:5c:70:12:53:e5:
d5:43:b3:73:94:51:a3:81:1e:9f:af:67:a5:04:df:
c9:87:21:9d:da:86:56:5b:21:3b:91:a7:bd:2a:eb:
0f:ea:da:94:ac:55:e8:e6:c4:cf:52:f1:8a:51:83:
c0:9f:1d:b3:5c:a1:52:e1:6c:51:9d:fd:a5:81:45:
01:ea:43:6b:7a:a1:7f:c5:84:d5:c5:8d:eb:e4:09:
70:2b:d4:10:72:84:54:07:a0:ef:11:a5:7f:39:5c:
b3:c0:63:89:c9:dc:de:24:f7:80:42:9a:8f:42:9d:
cd:a5:09:c9:4a:87:c6:78:21:ab:fa:e3:7c:93:2a:
c9:84:f8:ed:c6:d8:af:d3:23:fc:ca:10:46:20:64:
33:38:4b:c4:bc:5c:5a:5e:25:8c:90:aa:2e:f7:dd:
ca:e7:07:b4:eb:8d:b9:bb:c3:97:8c:9f:47:91:47:
64:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:F2:B9:EE:67:90:F8:13:3C:83:72:E9:6B:F9:8C:DF:63:5D:36:2E
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363036613a3a2f34382d3438203d3e20343031353037.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:606a::/48
Signature Algorithm: sha256WithRSAEncryption
15:a0:63:bb:1d:46:01:8c:9a:56:30:78:9a:4f:33:0f:35:4b:
58:45:bb:4b:a9:48:ee:74:b3:9f:40:3f:33:31:27:89:1e:6c:
7a:09:64:d2:bc:8a:7d:97:9e:0d:ee:f7:86:dc:10:61:0c:48:
62:c1:ec:26:09:b6:51:7d:5d:22:b5:0e:89:0b:7e:03:02:55:
d8:ba:45:95:cb:54:6d:47:50:06:75:d8:87:76:97:60:ba:d0:
ec:d4:29:66:00:f6:00:62:d3:14:cc:81:9b:01:33:85:1d:f7:
8b:d4:98:7a:33:fb:a9:b4:13:ed:54:a9:05:4d:60:f7:35:3d:
d6:98:6d:26:74:94:de:45:97:de:58:9f:ec:11:e6:83:ee:19:
b7:49:7d:ce:b4:da:c7:62:30:a8:02:94:bf:c3:a0:14:07:8a:
b8:97:be:06:46:76:3d:77:a0:fc:af:ed:b9:10:eb:0d:27:0d:
2c:02:3d:0f:0b:c2:b8:ad:57:6e:16:77:a6:0f:f2:11:43:ad:
6c:0e:97:85:63:7d:e5:e8:76:b7:36:93:ea:bd:b6:e2:2a:d6:
ea:14:c7:39:c2:2f:32:2e:81:29:12:0d:34:58:06:dc:09:08:
a8:ef:cd:26:e2:56:89:81:83:8b:d9:5c:7a:b7:eb:22:e0:72:
40:86:08:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 00:40:19 2025 by rpki-client