Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363038313a3a2f34382d3438203d3e203136393039.roa
File: 326131343a373538343a363038313a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier: dyBGmqfy1S1gJrBWIog12J9Wa3q5+yOhSGnAmkuCsp8=
Subject key identifier: A6:A4:E2:24:08:41:FC:C5:73:4A:3D:37:7B:2D:4A:F3:F8:A8:B3:31
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 44D80D9D4013BBBEC9D4FE6F0D0D7E562540A842
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363038313a3a2f34382d3438203d3e203136393039.roa
Signing time: Mon 10 Mar 2025 11:54:39 +0000
ROA not before: Mon 10 Mar 2025 11:49:39 +0000
ROA not after: Mon 09 Mar 2026 11:54:39 +0000
asID: 16909
IP address blocks: 2a14:7584:6081::/48 maxlen: 48
Validation: Failed, certificate revoked on Sun 16 Mar 2025 16:16:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
44:d8:0d:9d:40:13:bb:be:c9:d4:fe:6f:0d:0d:7e:56:25:40:a8:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: Mar 10 11:49:39 2025 GMT
Not After : Mar 9 11:54:39 2026 GMT
Subject: CN=A6A4E2240841FCC5734A3D377B2D4AF3F8A8B331
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:f5:ba:a2:e1:42:1a:1e:61:d5:e4:ad:2b:69:
da:0e:a8:4f:3d:ad:b7:6c:be:7a:39:39:4b:dd:b4:
8b:d1:9b:18:0e:51:a2:b2:c1:a5:94:8d:cc:89:cb:
26:3a:7c:2a:68:96:56:09:53:59:da:46:06:f4:22:
bb:a0:e8:58:84:23:9b:6c:47:06:77:e1:8d:5e:b5:
0f:de:fe:23:cf:ae:bf:b3:dd:70:57:f1:fc:77:9e:
2c:88:f7:41:c2:7e:84:65:e5:12:98:c2:ac:c7:6e:
05:0c:ef:60:77:bb:25:b6:ea:1b:5d:ba:bd:ad:11:
8d:4e:91:f1:48:a4:fc:a6:36:16:37:cb:75:ff:7f:
e4:95:51:b1:43:f0:ba:96:f7:ec:d8:a4:1c:22:7b:
e7:27:09:ee:52:03:0b:c3:f3:39:76:80:d7:2a:61:
44:26:ae:51:1b:06:c1:63:24:dd:31:26:b8:24:41:
0c:37:38:62:29:17:cd:a8:18:5d:12:ed:53:f3:27:
8f:3c:2c:87:e0:10:32:2b:f7:e2:ca:78:a2:34:16:
cc:38:b9:11:0a:3e:d9:d3:9c:c1:be:86:fc:85:48:
4c:17:41:c2:96:c6:31:a1:4e:ee:e6:a8:11:c1:63:
22:be:ca:6e:46:12:51:7d:a2:0f:22:c1:11:e9:f2:
3e:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:A4:E2:24:08:41:FC:C5:73:4A:3D:37:7B:2D:4A:F3:F8:A8:B3:31
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363038313a3a2f34382d3438203d3e203136393039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:6081::/48
Signature Algorithm: sha256WithRSAEncryption
36:14:e4:20:6c:af:ab:63:5f:d5:a0:1b:cb:d2:e5:4b:65:b5:
7a:69:c8:64:45:6c:9b:b4:d0:cf:c4:e0:15:cb:0d:2a:ed:7c:
b6:d1:9d:fe:7b:62:d1:3a:9b:c8:74:b7:34:f8:96:3d:47:15:
66:2c:50:65:d3:d9:1f:ac:eb:2b:3a:3a:bd:a0:30:31:5c:d2:
da:19:45:df:14:86:e6:a4:82:96:7d:1d:e4:5d:87:56:96:9c:
d8:48:d3:b8:88:4d:6d:08:35:12:92:5a:d7:fa:1f:c8:23:a4:
59:9b:bc:be:8f:34:85:ac:9b:ae:71:a8:8d:4b:b3:6c:3d:64:
b7:bc:31:49:2c:9c:e2:8a:27:ef:f0:6a:c6:e7:3b:5c:2a:52:
a2:a7:04:d3:f9:75:0e:d9:42:06:9f:2c:11:8f:9c:02:51:35:
f3:d7:91:42:fe:a9:be:f5:da:f4:38:c4:d0:b2:b9:db:c6:b1:
4c:f0:d4:cc:ce:13:2c:ef:cb:6e:ca:d3:13:97:af:e5:78:5a:
08:45:05:00:f7:2a:e6:25:93:58:2c:05:3a:da:83:12:20:e3:
27:c6:49:63:34:7f:82:df:89:99:e1:c6:0f:68:5b:ec:7c:81:
0e:ae:61:02:19:39:02:30:81:ac:39:3c:04:9b:ab:43:27:46:
55:2b:8b:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 00:45:57 2025 by rpki-client