Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363038623a3a2f34382d3438203d3e203136393039.roa
File: 326131343a373538343a363038623a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier: fJB+++FQPSLO/c1HJEjWMwBEZAWLUaUU0POi7Sch+n4=
Subject key identifier: 8A:86:E1:7D:17:DE:6D:7A:DE:6D:E6:B9:BE:63:E6:82:53:90:32:DD
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 29EBFF3BA14FD2234437A73037976427A68F76AC
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363038623a3a2f34382d3438203d3e203136393039.roa
Signing time: Mon 10 Mar 2025 11:55:19 +0000
ROA not before: Mon 10 Mar 2025 11:50:19 +0000
ROA not after: Mon 09 Mar 2026 11:55:19 +0000
asID: 16909
IP address blocks: 2a14:7584:608b::/48 maxlen: 48
Validation: Failed, certificate revoked on Sun 16 Mar 2025 16:16:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
29:eb:ff:3b:a1:4f:d2:23:44:37:a7:30:37:97:64:27:a6:8f:76:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: Mar 10 11:50:19 2025 GMT
Not After : Mar 9 11:55:19 2026 GMT
Subject: CN=8A86E17D17DE6D7ADE6DE6B9BE63E682539032DD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:22:40:ae:6e:03:e4:18:bb:2f:f7:ff:94:f1:
7c:d2:0a:20:dd:96:48:cc:76:45:9f:1c:a9:7b:10:
d2:09:36:d9:57:60:81:36:92:b5:32:8e:5d:1a:34:
f6:62:9b:51:cf:c8:df:af:d0:36:bd:45:e1:1f:35:
a3:ed:88:3e:f4:76:04:66:14:8a:9a:72:f2:b6:39:
75:a7:1e:4f:06:e8:2b:9d:13:07:37:34:7e:f9:ee:
bd:42:b9:58:70:3d:79:82:ce:6d:e8:fb:76:13:22:
bf:d7:85:46:50:fd:6c:73:7d:4a:96:b9:30:7b:ed:
b6:83:4e:47:9d:be:a9:c6:0d:e8:ca:f4:4e:13:b1:
49:6f:e1:1b:93:1e:62:d3:26:f6:17:8d:ca:89:59:
bb:00:e5:5b:ec:a7:90:2a:25:98:01:2d:42:cb:c2:
00:0f:1b:29:5a:ca:10:e4:0a:f4:f8:02:e0:3c:c8:
5d:15:92:c8:6c:54:5b:4e:b7:bb:67:6e:e3:0d:7a:
d8:47:8e:8f:40:0b:18:e4:d3:fe:2f:ae:2d:b2:77:
a5:7b:24:8d:89:6c:78:71:b3:fb:3b:ca:c7:4f:51:
af:ce:52:75:a5:1e:50:7e:9e:87:38:0f:c7:a8:ce:
b3:af:27:35:af:bc:4e:88:00:2d:48:a9:cd:89:6d:
a1:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:86:E1:7D:17:DE:6D:7A:DE:6D:E6:B9:BE:63:E6:82:53:90:32:DD
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363038623a3a2f34382d3438203d3e203136393039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:608b::/48
Signature Algorithm: sha256WithRSAEncryption
19:57:f2:70:19:57:7b:f0:45:47:fd:35:2d:e7:eb:f5:3a:3b:
b4:9a:4a:e1:a6:57:27:a9:f7:2e:8a:e1:40:91:02:11:bf:f8:
34:8f:5c:ff:bd:92:be:f8:04:a6:55:a0:1f:fd:4f:4e:30:90:
ec:66:08:48:1d:9a:d1:f3:56:43:b6:6e:89:16:d2:40:1f:57:
29:b9:2d:84:9d:96:50:1a:57:40:7a:30:d6:1c:08:da:ba:f8:
e4:92:73:e3:85:8f:8b:52:27:10:23:90:77:26:7e:0e:9e:6e:
0f:c7:d0:99:be:f4:82:36:1e:b3:dc:cb:c1:f3:58:88:6d:b3:
f5:63:ad:01:33:34:f1:14:50:35:fe:7c:24:89:89:3f:ef:6e:
53:c4:3d:c1:75:e7:a1:3c:83:4a:17:d8:b3:ab:c5:ee:f5:d1:
a4:1d:ad:cf:3f:7a:c3:81:c0:47:ba:80:68:93:8b:09:c4:17:
3a:84:21:6a:d1:8a:fa:cf:56:ef:0a:d9:04:21:c8:1d:db:ba:
a2:c2:e2:a6:a6:5b:e4:20:f9:31:40:0b:64:63:82:ee:fa:47:
58:12:73:d1:e2:54:0e:b6:f9:ea:81:e2:5c:c6:b8:13:df:ab:
4c:cf:3a:2f:51:03:09:dd:75:89:b8:13:5f:21:39:86:b6:e4:
3a:c3:93:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 00:41:19 2025 by rpki-client