Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363061393a3a2f34382d3438203d3e203136393039.roa
File: 326131343a373538343a363061393a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier: +GxzvYNrfD2dpeYA1GbTLSWIAAoy5xmpmaNNZqfDZh8=
Subject key identifier: 4E:53:A9:67:94:60:93:E3:39:B6:C4:98:13:20:EB:5D:94:A1:8E:2F
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 63515C63248848139E5330D38E41DE0F5950CDBE
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363061393a3a2f34382d3438203d3e203136393039.roa
Signing time: Sun 16 Mar 2025 15:50:03 +0000
ROA not before: Sun 16 Mar 2025 15:45:03 +0000
ROA not after: Sun 15 Mar 2026 15:50:03 +0000
asID: 16909
IP address blocks: 2a14:7584:60a9::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 26 Mar 2025 14:25:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
63:51:5c:63:24:88:48:13:9e:53:30:d3:8e:41:de:0f:59:50:cd:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: Mar 16 15:45:03 2025 GMT
Not After : Mar 15 15:50:03 2026 GMT
Subject: CN=4E53A967946093E339B6C4981320EB5D94A18E2F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:6f:1f:23:e4:8c:10:42:4a:3c:c4:17:3a:e8:
2b:e5:c4:1f:a6:c6:07:77:37:0c:2b:c2:8d:72:f7:
1f:b6:38:5d:62:22:60:17:16:49:05:ae:56:aa:ed:
ce:c1:b4:49:5d:3b:94:9b:e4:1f:4c:04:be:cd:1f:
06:dd:05:ff:50:03:fe:77:f1:70:eb:0c:a9:e2:ba:
49:a1:0b:2c:56:11:1d:c8:2c:84:cc:0f:f2:50:ca:
cd:df:c1:84:4b:c5:5f:78:3d:09:2b:92:3c:10:c8:
fd:c6:b7:f0:a1:f2:30:ca:6b:bc:a8:e6:f5:b7:a2:
f5:6c:2d:c2:2a:eb:e5:33:8c:fa:c6:de:df:59:30:
f3:c9:1a:13:98:7b:d2:1b:fb:9f:22:bb:a0:42:b3:
d1:b2:f6:f3:3b:8b:61:f5:40:49:29:64:08:5f:a5:
2b:2b:cd:74:05:0d:f4:da:c4:26:84:ab:05:5d:d4:
9c:fa:a5:4a:72:1a:92:d8:45:4e:7f:19:d7:30:42:
c2:36:d7:39:64:93:b3:30:89:e9:b5:a4:89:cb:09:
7d:f9:99:81:8c:4b:f3:06:3b:43:82:12:25:6f:b7:
fc:f2:79:16:e5:64:9f:19:83:a7:52:fb:a3:b6:c7:
c7:a8:56:93:69:d6:fc:c1:a9:87:bc:13:14:bc:55:
ec:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:53:A9:67:94:60:93:E3:39:B6:C4:98:13:20:EB:5D:94:A1:8E:2F
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363061393a3a2f34382d3438203d3e203136393039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:60a9::/48
Signature Algorithm: sha256WithRSAEncryption
36:3c:fa:1b:c0:c0:e7:49:79:90:bc:83:30:f4:70:5c:2f:fa:
a6:77:18:da:d6:6e:11:c2:63:25:e0:d8:73:c6:89:a0:b2:be:
d0:8c:70:87:89:f1:5b:29:5a:f1:ff:8c:a0:bf:02:d3:48:7f:
f7:ec:fc:8f:ff:37:39:93:b3:83:d3:07:7e:ec:95:87:05:d5:
23:50:91:ce:72:00:4c:f7:44:ef:e0:1d:e1:38:2d:ab:af:4b:
7c:7a:c2:ae:d9:d7:e0:00:79:af:9c:ca:25:c7:c6:1c:65:13:
e0:e2:b1:88:81:72:11:a7:a1:43:07:7b:dc:63:1b:16:82:74:
29:b4:e7:8d:f6:d5:7f:ec:29:15:73:30:71:84:d0:29:8b:c8:
09:f1:8a:d7:c1:85:40:a7:c9:60:75:9b:b9:31:fd:41:48:99:
e6:19:c8:08:a3:97:2f:5c:e8:52:bf:8b:02:81:98:c0:29:2c:
0a:45:03:5a:62:1c:d7:ff:89:26:20:f3:17:b1:cc:c0:60:a0:
8f:39:f7:c1:91:db:99:74:4f:33:2a:95:ee:2f:58:74:bd:1a:
a1:17:e3:05:ec:57:15:4e:df:b1:9f:65:68:c1:fb:dd:8d:3e:
7e:ac:04:92:44:a4:20:ec:4d:9e:3e:c9:18:ce:0f:93:ee:59:
1c:8f:6f:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 00:47:03 2025 by rpki-client