Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363039313a3a2f34382d3438203d3e203136393039.roa
File: 326131343a373538343a363039313a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier: f9ApAHa1uehCMHHb1SuLIiCJS/bgzEpdk3bo9Afkdog=
Subject key identifier: 1B:1E:23:7F:BB:04:AE:CF:BE:D7:B4:68:3F:02:7C:4E:B1:0C:A8:88
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 343EF4C5ADB020E89C259CA71535D3468E17C042
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363039313a3a2f34382d3438203d3e203136393039.roa
Signing time: Mon 10 Mar 2025 11:55:22 +0000
ROA not before: Mon 10 Mar 2025 11:50:22 +0000
ROA not after: Mon 09 Mar 2026 11:55:22 +0000
asID: 16909
IP address blocks: 2a14:7584:6091::/48 maxlen: 48
Validation: Failed, certificate revoked on Sun 16 Mar 2025 16:16:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
34:3e:f4:c5:ad:b0:20:e8:9c:25:9c:a7:15:35:d3:46:8e:17:c0:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: Mar 10 11:50:22 2025 GMT
Not After : Mar 9 11:55:22 2026 GMT
Subject: CN=1B1E237FBB04AECFBED7B4683F027C4EB10CA888
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:10:39:0b:be:7d:e4:e9:ac:4a:fc:88:8b:4e:
cb:1b:33:12:89:64:bb:b6:3f:cf:b4:5b:8e:95:9a:
69:1a:b7:17:89:db:8b:87:b7:c4:b0:89:b4:47:49:
37:b9:c0:e1:0e:18:9a:d2:a1:b0:3f:a7:22:e1:6a:
c4:1d:b1:03:90:0f:12:54:08:52:ff:12:3e:11:b8:
09:e5:03:16:c8:63:1d:b5:1f:7d:ef:0c:38:cb:a6:
86:ca:17:0f:7b:3c:35:7c:20:39:d0:74:40:d7:6e:
50:99:c0:a0:c0:07:b7:6f:ba:1e:9b:2a:86:bc:06:
f7:dd:ea:92:1c:83:5b:99:25:c2:3d:9b:80:3a:64:
4f:63:29:96:ab:0a:85:34:c2:85:e6:31:1d:c6:10:
97:fd:f3:56:8a:a0:6d:5a:2d:07:1f:eb:37:c1:6b:
af:83:64:32:7b:61:2b:eb:a6:ea:d0:4c:38:6e:38:
2f:f1:4d:89:97:ec:4e:a1:d6:75:02:24:94:e3:15:
ff:cd:a9:61:99:ef:45:3f:2e:8e:7d:0b:ad:ff:b4:
b4:b7:dd:c7:f9:c5:3a:22:ce:b0:bf:f0:38:4e:16:
0a:8c:c1:49:06:e2:98:66:c8:8e:9e:8c:d2:ab:b1:
39:1f:e6:2a:ca:b8:13:06:05:d1:83:d4:51:90:b9:
c6:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:1E:23:7F:BB:04:AE:CF:BE:D7:B4:68:3F:02:7C:4E:B1:0C:A8:88
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363039313a3a2f34382d3438203d3e203136393039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:6091::/48
Signature Algorithm: sha256WithRSAEncryption
22:32:a2:1f:0e:a2:15:b7:fd:bf:95:d6:df:eb:74:e3:a2:aa:
9a:17:71:fb:96:37:f1:6e:c9:78:51:3f:88:f0:69:ef:3c:87:
73:6d:92:5f:0d:f9:86:3a:18:f3:21:dd:d6:1f:38:d3:e1:32:
bc:9f:cc:b2:ab:64:fa:4b:b6:64:2b:fc:e6:e9:de:c3:60:8d:
99:41:59:33:6f:a8:23:17:85:ea:12:4d:04:e4:a4:46:f5:20:
90:67:0a:f5:ad:17:e0:4f:5e:cf:77:1c:9f:26:21:29:d7:e7:
77:ed:e4:40:a4:12:69:33:1b:ab:f8:f6:c1:87:6e:6f:d5:c8:
8b:e1:19:df:7d:56:60:f5:3e:c4:7e:5c:72:9b:f5:c7:1f:ce:
5b:c8:b3:c1:3f:fd:27:bd:7f:73:62:5c:1a:c9:32:dc:e7:8c:
7d:b7:75:33:6b:8f:9e:b4:f5:90:44:96:e8:62:57:4c:86:84:
e4:08:7e:8e:bd:79:5c:d1:17:46:c1:36:be:13:61:93:b5:11:
64:79:3d:72:84:77:25:a5:f9:de:64:27:86:f7:79:22:6a:71:
79:7b:c8:49:c8:60:b8:47:33:5a:9d:be:f0:6e:73:dd:e5:f9:
61:7b:14:39:e8:35:79:97:7b:5b:ba:0b:13:6d:cf:1a:b2:eb:
3c:88:a8:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 00:40:22 2025 by rpki-client