Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363037333a3a2f34382d3438203d3e203136393039.roa
File: 326131343a373538343a363037333a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier: XceKqXv/81baiWKGMtxDV3XgUNZnhpclDZr4KfMrweg=
Subject key identifier: A4:5E:A8:53:22:38:BB:2B:A3:51:03:24:5E:AD:94:65:4B:64:81:45
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 726A1B1A281E9C8BD473D1988F33D3C11802317B
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363037333a3a2f34382d3438203d3e203136393039.roa
Signing time: Mon 10 Mar 2025 11:53:58 +0000
ROA not before: Mon 10 Mar 2025 11:48:58 +0000
ROA not after: Mon 09 Mar 2026 11:53:58 +0000
asID: 16909
IP address blocks: 2a14:7584:6073::/48 maxlen: 48
Validation: Failed, certificate revoked on Sun 16 Mar 2025 16:16:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
72:6a:1b:1a:28:1e:9c:8b:d4:73:d1:98:8f:33:d3:c1:18:02:31:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: Mar 10 11:48:58 2025 GMT
Not After : Mar 9 11:53:58 2026 GMT
Subject: CN=A45EA8532238BB2BA35103245EAD94654B648145
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:8b:3c:d7:3b:36:b2:1e:5d:48:2e:15:c7:24:
48:08:cf:35:53:11:cf:77:6d:05:19:e2:80:5c:0f:
20:1d:84:7e:b0:fe:90:65:49:7e:34:f9:a8:11:a6:
40:32:fb:43:ff:cc:18:5d:b3:d1:5a:f0:97:d5:2d:
ea:d5:f1:aa:9f:53:74:b1:c4:a8:b2:1c:6b:2d:d9:
35:98:af:79:48:95:1e:c6:91:08:a5:37:2c:35:ac:
5a:0c:0e:ec:b7:a6:05:b3:77:ab:b2:94:71:83:61:
64:53:be:1f:ba:8b:ff:3c:aa:03:e7:cf:f3:b4:00:
b7:d8:4c:d4:21:f4:a3:5f:0d:22:74:23:52:c8:dd:
55:c7:46:a1:64:96:1d:fc:22:ad:37:a5:a0:2c:5c:
b0:ba:9e:66:dd:0a:98:e9:7e:ed:70:3d:d4:b0:33:
81:1a:a5:05:3b:72:4e:e6:32:4f:f1:33:03:50:91:
ab:0a:6b:6e:87:f1:6a:f2:ec:2e:ec:57:9b:85:0d:
22:68:ee:28:c5:bb:d2:e2:f3:bb:de:b5:da:67:c5:
e8:0f:b2:f5:50:28:eb:4e:d8:5d:cb:8c:fe:3f:02:
3d:98:9a:8f:2a:2e:14:3f:74:2a:ce:06:b7:01:23:
e0:f3:56:b8:85:82:fb:45:91:da:de:33:5f:fe:bb:
13:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:5E:A8:53:22:38:BB:2B:A3:51:03:24:5E:AD:94:65:4B:64:81:45
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363037333a3a2f34382d3438203d3e203136393039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:6073::/48
Signature Algorithm: sha256WithRSAEncryption
41:7d:a8:df:65:55:67:4f:79:d2:8f:77:7b:fb:34:46:73:33:
54:02:62:61:8d:54:77:04:9a:b8:eb:c9:ef:88:aa:18:7e:f1:
de:4f:18:e8:8d:0b:4b:48:1c:01:06:7c:2d:2d:58:42:d7:c3:
eb:2a:f4:55:55:92:2b:0c:2c:a3:98:f8:e4:b0:ef:3f:c1:93:
01:11:30:68:ae:82:44:d0:28:25:ac:02:ee:2b:3f:86:a0:71:
19:2b:a3:40:31:27:d8:48:51:a6:99:c8:bc:5f:05:bf:c1:5f:
4a:c2:44:38:be:06:98:22:49:05:73:4f:f0:87:f7:44:0c:b9:
8a:4c:38:b1:8a:bf:6d:a7:ac:2f:d5:c6:57:4b:d4:05:7e:01:
b1:31:e7:6a:82:99:82:17:69:a6:50:a8:e5:37:4b:bc:41:67:
f1:96:bf:95:d8:97:cd:e5:12:35:36:10:05:15:ad:cc:c5:34:
a1:9e:59:8b:e3:e1:8f:b2:a7:43:7d:69:bb:e5:fb:be:d9:a1:
d3:2a:98:c2:19:58:48:ed:45:5d:f7:5f:e1:2c:7e:5c:30:2a:
96:66:d8:cc:eb:3b:39:5d:ce:08:eb:1a:1e:8a:7b:77:3a:97:
9a:dd:0d:7e:34:ed:be:ad:80:64:c6:73:2a:21:38:4d:37:11:
65:e0:09:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 00:42:09 2025 by rpki-client