Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363037613a3a2f34382d3438203d3e203136393039.roa
File: 326131343a373538343a363037613a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier: vjRctqRl65AA5aRq5OreVpWIkSlP0iJB5S8o5vUr05Y=
Subject key identifier: A9:CA:ED:DB:91:A8:F5:E5:EF:43:36:B6:9E:94:91:55:C1:F1:6D:A7
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 6F29AA84186FDC519AB0E2480FFAB855DC3031C6
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363037613a3a2f34382d3438203d3e203136393039.roa
Signing time: Mon 10 Mar 2025 11:54:34 +0000
ROA not before: Mon 10 Mar 2025 11:49:34 +0000
ROA not after: Mon 09 Mar 2026 11:54:34 +0000
asID: 16909
IP address blocks: 2a14:7584:607a::/48 maxlen: 48
Validation: Failed, certificate revoked on Sun 16 Mar 2025 16:16:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6f:29:aa:84:18:6f:dc:51:9a:b0:e2:48:0f:fa:b8:55:dc:30:31:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: Mar 10 11:49:34 2025 GMT
Not After : Mar 9 11:54:34 2026 GMT
Subject: CN=A9CAEDDB91A8F5E5EF4336B69E949155C1F16DA7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:02:88:a6:2c:3e:2a:d5:91:24:64:7f:20:2a:
e7:a7:90:4e:e3:bb:0c:86:0f:85:08:bc:49:a5:33:
51:69:38:91:02:b2:a3:d7:87:c0:9d:3e:d2:4a:03:
f8:de:a9:25:7f:f2:54:0c:43:d8:8d:9e:3b:2d:d6:
0e:4c:e3:63:a5:31:b7:5f:11:f6:83:85:b3:52:b0:
a5:6c:99:2f:da:92:64:a1:69:13:42:b8:ca:35:bf:
d9:da:3a:75:59:17:3a:08:e9:d3:0f:d4:7b:33:47:
af:75:41:27:9a:ad:df:2e:a5:9e:4e:8a:52:44:42:
e7:1d:5b:80:32:24:eb:c1:bd:35:d8:db:52:d4:b8:
ae:74:5b:14:d4:b5:85:fa:ff:7f:b0:15:92:4c:ce:
7d:99:9c:d8:48:f9:1b:03:1c:c3:fc:af:e8:6a:86:
bb:40:64:fe:d5:34:3b:ad:b3:8d:6e:ea:27:4d:cb:
16:11:3a:68:26:ef:9d:7d:79:7a:f1:57:be:e6:56:
e8:72:a7:de:a5:fb:48:ac:1c:74:5b:df:97:7a:50:
43:08:5c:9f:56:30:56:b6:af:9c:8b:af:35:e2:80:
3c:62:a4:d6:a8:7a:42:32:c1:5f:be:e3:6d:cb:0f:
59:da:e8:44:f5:b1:e5:68:dc:eb:83:28:54:27:62:
d8:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:CA:ED:DB:91:A8:F5:E5:EF:43:36:B6:9E:94:91:55:C1:F1:6D:A7
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363037613a3a2f34382d3438203d3e203136393039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:607a::/48
Signature Algorithm: sha256WithRSAEncryption
6b:67:62:72:95:5a:92:3a:f0:96:52:c8:f0:40:48:2c:92:c0:
ee:e2:13:55:da:4b:0e:3a:cc:82:bd:6f:fa:36:12:87:50:22:
c3:b8:ba:24:12:83:03:61:98:69:db:f2:a0:48:b6:ad:f2:a5:
63:86:75:f4:11:f2:30:dd:1a:83:bb:84:0d:06:18:0a:0b:31:
5e:83:a9:a6:98:55:98:45:e2:89:c1:ef:26:b7:41:44:f3:76:
3c:d0:55:6a:39:fc:4e:9e:79:b9:99:77:7c:7a:d8:ca:a1:90:
47:cd:4d:4a:61:b7:d5:4c:69:91:95:50:2b:dd:1b:70:2c:98:
77:6b:59:fa:cb:9e:db:a0:47:a3:b2:52:d8:e2:01:38:a5:9a:
42:f7:55:96:0d:d8:9b:40:e3:98:39:45:3f:34:23:3e:6f:c5:
6e:71:65:a5:ab:04:a2:e0:cf:05:2a:38:35:86:e3:d2:7b:23:
22:99:66:d8:3a:4e:a6:6c:c9:c8:b7:53:94:92:3e:9c:43:78:
a6:9e:cb:e5:4e:8a:a7:17:69:dc:a2:17:1d:61:e2:c8:49:39:
02:af:3b:e4:5e:d0:8a:88:0a:a7:07:75:62:a2:eb:25:df:f7:
9c:6a:24:86:bc:92:ba:4e:af:7e:ba:ac:23:56:44:d8:90:1d:
18:b7:e5:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 00:39:03 2025 by rpki-client