Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363038393a3a2f34382d3438203d3e203136393039.roa
File: 326131343a373538343a363038393a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier: BZauxXVwzgF57UbKRL90ILqy0Ftamm/Nx3dbdvJiX1c=
Subject key identifier: 5B:B3:90:DC:CD:B0:72:07:69:B1:D9:EF:56:3E:35:A6:28:28:14:55
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 6603FE24B2611C1E46F64B4BB064F4662763B2F3
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363038393a3a2f34382d3438203d3e203136393039.roa
Signing time: Mon 10 Mar 2025 11:55:02 +0000
ROA not before: Mon 10 Mar 2025 11:50:02 +0000
ROA not after: Mon 09 Mar 2026 11:55:02 +0000
asID: 16909
IP address blocks: 2a14:7584:6089::/48 maxlen: 48
Validation: Failed, certificate revoked on Sun 16 Mar 2025 16:16:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
66:03:fe:24:b2:61:1c:1e:46:f6:4b:4b:b0:64:f4:66:27:63:b2:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: Mar 10 11:50:02 2025 GMT
Not After : Mar 9 11:55:02 2026 GMT
Subject: CN=5BB390DCCDB0720769B1D9EF563E35A628281455
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:21:92:7c:67:42:1e:6f:36:ca:a3:44:23:23:
f6:b5:ba:ab:67:bd:10:55:7d:49:e2:d4:5b:e4:a9:
51:65:ab:5d:dc:e5:8c:cd:d0:bd:ab:ef:fb:d2:d6:
e9:59:07:63:c1:a6:07:ee:f0:5f:41:b0:53:58:df:
a1:48:9e:f2:9d:23:80:2a:32:35:e1:04:a3:dc:21:
f9:7d:99:15:dc:81:48:f4:2f:2d:27:ae:cb:88:e1:
7b:6c:d5:a2:e0:12:20:af:2b:08:57:ee:26:6f:65:
38:58:e9:e3:5f:00:51:2f:cf:54:c0:65:65:e9:f5:
ae:0b:63:61:5e:95:5a:1f:97:14:9b:cc:fc:7a:44:
16:ae:65:40:24:c2:81:5d:dc:8a:90:90:53:27:9e:
48:65:88:2f:06:35:71:ed:6d:5a:d2:0e:e9:00:d2:
07:eb:4e:06:7d:c9:09:78:d7:ab:88:21:71:47:81:
5a:7c:5c:db:47:23:97:dc:e8:b5:b2:e9:e1:26:bf:
c8:fb:c4:53:b5:f8:70:f7:ab:9a:0e:f2:c9:3f:98:
0a:29:b3:7a:9f:1e:a5:22:44:db:3f:c5:46:75:d4:
c7:96:8d:21:76:12:53:b2:2f:ed:b3:73:ef:e0:b9:
3b:8c:e2:3a:49:ba:cd:ec:e6:6e:5d:be:f3:30:ca:
93:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:B3:90:DC:CD:B0:72:07:69:B1:D9:EF:56:3E:35:A6:28:28:14:55
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363038393a3a2f34382d3438203d3e203136393039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:6089::/48
Signature Algorithm: sha256WithRSAEncryption
2f:fa:1b:d8:21:bf:48:a4:c1:16:f8:32:42:79:d9:9d:e6:9e:
fa:92:fc:3a:79:05:b1:49:7e:5f:89:1c:09:8b:47:98:2e:3e:
2a:cb:44:30:84:cd:c9:26:43:c9:ee:6d:42:22:46:de:22:7c:
d0:dc:4b:cb:dc:58:e2:22:6c:29:ff:e7:be:95:7c:6e:f5:06:
0d:16:bc:03:59:0c:e5:2c:aa:a6:c7:bc:f7:c9:f0:f7:f9:84:
8b:f2:69:43:f1:50:70:16:a9:bd:c5:cb:ab:c5:0b:87:49:d2:
29:75:49:f6:9a:2f:dc:ee:85:15:70:c6:bf:30:dc:e8:0e:32:
cb:97:34:c2:98:a4:76:d8:36:95:d5:c5:c5:25:46:05:a2:55:
a9:bd:fc:49:3d:03:fe:27:7e:e2:34:2f:6c:bf:1e:f9:e2:c9:
50:17:df:2b:6e:bd:3f:59:2f:f0:f2:35:d3:8d:e4:ea:6c:f6:
a9:68:bb:f3:f5:19:77:b7:7c:1a:80:5f:13:ce:a8:4a:12:17:
cc:c8:2d:50:f1:f0:f1:26:ff:d0:38:8b:21:e9:81:b0:38:df:
ef:b3:f0:e9:3e:97:31:83:05:1d:9f:f4:3f:eb:d1:1e:18:5f:
03:d3:42:20:b4:4e:cf:f8:1f:f3:f5:84:09:75:40:a4:9e:23:
ba:1d:81:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 00:49:36 2025 by rpki-client