Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363038613a3a2f34382d3438203d3e203136393039.roa
File: 326131343a373538343a363038613a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier: kauIAHAWRoOlPQigzdVUDiC5cfCmOVd+y7bMmf3WIYs=
Subject key identifier: BE:71:24:B1:5F:07:F9:D3:08:67:62:56:F0:2F:C9:FF:92:2B:E0:96
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 2B00001A771BD543EE2DFD53E69E9B856B45B73B
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363038613a3a2f34382d3438203d3e203136393039.roa
Signing time: Mon 10 Mar 2025 11:55:18 +0000
ROA not before: Mon 10 Mar 2025 11:50:18 +0000
ROA not after: Mon 09 Mar 2026 11:55:18 +0000
asID: 16909
IP address blocks: 2a14:7584:608a::/48 maxlen: 48
Validation: Failed, certificate revoked on Sun 16 Mar 2025 16:16:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2b:00:00:1a:77:1b:d5:43:ee:2d:fd:53:e6:9e:9b:85:6b:45:b7:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: Mar 10 11:50:18 2025 GMT
Not After : Mar 9 11:55:18 2026 GMT
Subject: CN=BE7124B15F07F9D308676256F02FC9FF922BE096
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:45:ee:5b:c3:e1:47:e1:da:03:17:5d:fc:81:
4e:71:00:3b:ba:f3:43:3a:f7:78:6b:53:af:21:33:
d0:cd:7b:66:da:0c:38:89:8a:2b:1e:7a:21:42:d0:
c8:67:10:b9:4c:06:a0:8a:95:d8:52:5c:74:65:e1:
3b:c5:bb:1e:c2:87:d9:85:c3:0c:65:78:ff:6c:34:
0d:3b:db:5b:cd:94:15:fa:18:fc:50:0f:a6:ab:80:
0e:91:38:0a:45:ae:47:ed:e9:61:43:e5:9a:6c:7f:
8e:f9:82:3c:00:f7:6f:73:ce:80:29:b5:a7:83:69:
25:42:a9:db:fe:8f:86:ce:3d:e2:04:e9:e0:d2:d3:
44:1f:da:b2:d6:bf:5b:b9:3d:b3:01:37:d4:f9:02:
5f:03:e3:c1:c2:73:69:f4:4e:57:a2:60:3f:a8:6e:
1f:bc:c2:84:bb:f9:84:f6:64:03:89:27:ac:a7:25:
75:a9:c3:d4:db:5d:00:ca:d0:08:9d:36:b9:5a:c4:
8d:9f:58:14:e7:c1:06:c0:76:d9:ea:90:cb:d3:66:
0e:4d:ec:42:cb:92:ee:63:f9:a4:7f:be:f0:50:f8:
6f:d3:67:69:1e:3b:49:d2:71:1f:5e:b9:47:21:27:
1c:5b:f8:32:63:17:03:5f:95:ce:75:7e:22:27:2d:
9f:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:71:24:B1:5F:07:F9:D3:08:67:62:56:F0:2F:C9:FF:92:2B:E0:96
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363038613a3a2f34382d3438203d3e203136393039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:608a::/48
Signature Algorithm: sha256WithRSAEncryption
99:74:83:4f:e2:0b:c5:74:19:1f:8b:48:9b:d3:f1:29:c5:b0:
9e:f0:7d:76:8a:2f:82:2c:2c:f2:c1:2e:24:fe:19:d8:cd:d2:
64:66:11:86:ba:2c:57:06:e5:83:ca:54:97:ba:7b:e3:c1:cd:
a0:3c:e9:b5:13:57:f6:d8:fb:5c:30:41:9b:45:1c:56:7e:72:
44:de:c4:07:04:e2:03:41:48:c1:d2:49:c1:10:4c:a2:37:9d:
5f:18:e9:50:6b:fb:eb:ca:cf:25:b1:f7:dc:d7:04:d3:7c:82:
62:8c:1d:94:80:bf:31:4c:02:4e:b5:1d:ac:b9:20:19:e5:d2:
0f:49:b3:ac:92:39:85:9a:ee:d1:26:5a:58:1c:b8:c5:9c:31:
a8:22:89:50:44:89:d0:05:e9:76:3d:fa:c5:89:82:9a:45:6a:
e4:e2:b9:02:e0:3f:86:be:29:7c:48:b8:71:ae:d1:41:37:5d:
fa:c2:c6:8c:9e:f6:cf:84:69:7d:41:e0:29:b9:38:21:f7:c7:
8b:9f:46:59:53:ce:14:9e:43:9a:5b:19:06:d0:04:2a:67:47:
35:4b:f4:b1:11:25:c8:e3:05:9d:d0:8f:83:2e:19:c0:10:50:
53:a7:c3:91:c4:2a:7e:24:95:8a:68:b0:53:1e:a0:7c:ab:41:
39:0e:5e:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 00:39:06 2025 by rpki-client