Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363037393a3a2f34382d3438203d3e203136393039.roa
File: 326131343a373538343a363037393a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier: 6a9VFh1NaVR43RhbzXNCCDz3FR2XHTYJpb036zjCy0I=
Subject key identifier: C2:D8:54:F0:52:DE:D3:CB:23:7D:34:3D:58:63:A5:D4:A1:6F:13:40
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 599C173BDF7FCCCE704C192BCA3CE03EA4ABF4D7
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363037393a3a2f34382d3438203d3e203136393039.roa
Signing time: Mon 10 Mar 2025 11:54:34 +0000
ROA not before: Mon 10 Mar 2025 11:49:34 +0000
ROA not after: Mon 09 Mar 2026 11:54:34 +0000
asID: 16909
IP address blocks: 2a14:7584:6079::/48 maxlen: 48
Validation: Failed, certificate revoked on Sun 16 Mar 2025 16:16:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
59:9c:17:3b:df:7f:cc:ce:70:4c:19:2b:ca:3c:e0:3e:a4:ab:f4:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: Mar 10 11:49:34 2025 GMT
Not After : Mar 9 11:54:34 2026 GMT
Subject: CN=C2D854F052DED3CB237D343D5863A5D4A16F1340
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:9a:03:01:4a:24:89:fb:25:03:b5:68:81:08:
53:61:5a:5b:88:2e:35:61:5c:a1:c5:e6:99:82:b4:
37:16:db:dc:27:9f:9b:59:b6:c3:bd:75:55:a8:a1:
5f:e8:b0:24:57:c1:96:ab:1b:a0:3c:88:d9:14:a7:
49:fe:34:e0:6c:11:dc:d6:bc:5b:1d:f1:6d:35:d2:
1c:20:44:f2:ee:11:7f:ed:09:a8:b9:55:51:65:3d:
e9:6a:8a:56:f3:76:97:bf:80:3c:e8:c5:d5:a4:74:
24:8c:55:8e:72:07:3d:03:cd:0f:0f:33:15:8b:cf:
49:ce:28:fe:2d:22:3d:c6:2e:ab:87:d6:94:34:82:
14:88:a7:df:bd:dc:8a:35:ba:51:ad:db:0e:6c:95:
f8:09:88:4c:31:95:ae:b8:e4:59:3f:91:79:6b:a8:
23:91:7e:f1:62:57:52:2f:a0:b6:d5:c2:af:ab:8a:
de:68:fb:36:86:93:5a:1c:6c:06:e2:98:8d:cf:5d:
87:72:ca:c1:b9:c1:31:7e:5f:8d:b6:6e:3c:c2:cd:
cc:f7:7c:95:53:2f:2c:51:0f:f2:f9:78:15:fb:d1:
dc:0b:3d:18:50:9a:2e:92:3d:b2:e8:fb:9e:cd:73:
9a:29:93:de:09:d2:53:cf:3d:ef:8e:d4:d0:48:95:
81:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:D8:54:F0:52:DE:D3:CB:23:7D:34:3D:58:63:A5:D4:A1:6F:13:40
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363037393a3a2f34382d3438203d3e203136393039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:6079::/48
Signature Algorithm: sha256WithRSAEncryption
65:5c:ee:21:33:de:a0:2b:37:ff:94:96:0a:cc:65:9b:01:f3:
f5:4b:a2:37:16:8c:c7:26:6f:7d:9e:40:d1:69:d6:c4:b1:b5:
99:7c:ce:25:0f:f9:73:32:c1:2a:a4:86:98:84:1e:72:3a:f0:
2a:ee:51:dc:f7:dc:e6:65:c9:65:c8:4b:85:6a:7c:4e:f0:d8:
8b:8b:bd:08:57:9e:12:34:ae:8d:04:1b:65:41:5a:dd:93:50:
c7:59:73:90:2e:96:3f:9e:40:b4:64:a2:fa:a4:d2:e7:ca:8c:
9d:9c:33:44:77:9f:5c:58:ab:7c:40:c1:62:bc:3c:da:fb:82:
fd:a4:61:1e:a1:95:e1:bd:c5:18:cc:3b:b1:44:55:a4:e9:4a:
2d:5c:bb:0b:eb:58:2c:be:f7:c3:27:36:dc:ff:97:8b:7b:a9:
f3:83:13:ac:52:d4:03:74:06:20:48:f7:67:21:62:83:22:4a:
b6:25:df:45:44:45:55:fc:a5:26:c5:89:3d:f9:09:91:9a:32:
c8:99:ef:21:a1:dd:08:02:72:61:d5:2e:25:cd:7d:22:a6:6d:
29:68:fc:0b:dd:7b:83:28:bd:1c:1b:28:e9:1d:4d:fa:26:e1:
57:5b:00:a9:95:81:ad:22:df:fd:f8:2b:e7:11:35:ff:03:a4:
54:ec:b7:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 00:46:11 2025 by rpki-client