Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363061613a3a2f34382d3438203d3e203136393039.roa
File: 326131343a373538343a363061613a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier: /ixdBI0Y+y1KkGoNNRLPfV/DiN1y2LYNYzyrv1TblKg=
Subject key identifier: DA:9A:15:59:07:20:40:D2:F4:CC:C3:81:28:D1:A9:D9:45:E4:E8:79
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 3E5090D425A3B3A43312DE93280E0E5EE45F2DD5
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363061613a3a2f34382d3438203d3e203136393039.roa
Signing time: Sun 16 Mar 2025 15:50:03 +0000
ROA not before: Sun 16 Mar 2025 15:45:03 +0000
ROA not after: Sun 15 Mar 2026 15:50:03 +0000
asID: 16909
IP address blocks: 2a14:7584:60aa::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 26 Mar 2025 14:25:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3e:50:90:d4:25:a3:b3:a4:33:12:de:93:28:0e:0e:5e:e4:5f:2d:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: Mar 16 15:45:03 2025 GMT
Not After : Mar 15 15:50:03 2026 GMT
Subject: CN=DA9A1559072040D2F4CCC38128D1A9D945E4E879
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:de:14:79:d1:8d:c1:bf:fe:3e:80:b4:f3:9c:
ab:8c:e3:d5:9a:ee:42:4a:01:e6:e6:e8:7b:93:71:
83:ce:ca:47:ca:ee:cb:fe:95:2d:14:b1:44:3e:18:
a9:22:1f:42:d5:a4:13:d8:5f:2f:23:95:81:fb:78:
f4:70:b3:2b:e0:1d:5d:bf:21:3b:e8:80:38:d3:11:
88:ae:d0:a5:4a:33:2d:7f:e7:23:e1:41:55:4f:ba:
1a:93:6b:e6:80:5e:90:4e:2d:7d:1e:3d:be:52:99:
ee:d4:f1:64:a6:69:77:98:b8:fb:1f:15:85:08:93:
15:75:f4:93:41:cb:07:ae:37:3f:88:14:dc:7a:76:
33:09:34:7c:47:5e:58:d0:9a:a2:22:04:3c:3b:23:
d3:03:52:32:70:63:38:63:32:07:8c:2f:9d:3a:d2:
22:50:b6:c1:88:85:07:62:02:4d:80:00:57:5f:2f:
04:71:ea:94:b2:49:c3:3f:6a:f0:ad:61:78:40:ac:
9c:e7:3b:4b:83:48:0c:d7:01:d4:87:ed:51:10:f2:
d2:80:94:5f:9b:9d:33:eb:9b:bd:ce:4b:58:a4:4d:
46:54:50:4a:5c:a4:7b:f6:9f:32:95:1c:38:fd:a1:
63:e5:ca:93:f0:92:e6:51:fe:36:af:cf:de:a8:ee:
3a:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:9A:15:59:07:20:40:D2:F4:CC:C3:81:28:D1:A9:D9:45:E4:E8:79
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363061613a3a2f34382d3438203d3e203136393039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:60aa::/48
Signature Algorithm: sha256WithRSAEncryption
23:4b:da:9a:41:4d:e9:17:05:33:9e:ca:69:d5:fd:54:01:53:
c2:a1:72:ed:c8:07:38:b7:ce:82:9f:00:be:27:41:26:dc:0d:
b5:ea:17:3a:b0:40:b6:57:06:ff:1e:72:c1:2d:75:40:92:04:
99:84:f7:82:4e:5d:1b:bb:e4:a8:aa:4d:4d:ae:83:11:a2:db:
a1:b1:2c:04:d8:86:3e:39:1b:59:1d:5f:44:2e:2a:52:b6:02:
8d:59:c6:6e:2e:8a:51:50:97:48:a6:62:10:ff:11:10:94:68:
fb:cc:58:d3:2f:c5:8e:61:ed:e4:19:98:7b:9d:a0:20:d4:69:
80:04:8a:b8:be:f2:30:d4:cb:f5:f4:dc:83:2a:ee:68:1d:87:
d7:a3:e6:bc:9f:83:e3:10:2e:90:8f:da:38:e1:d0:dc:ef:f0:
e3:08:04:c3:f9:e6:26:08:5e:11:35:2e:f0:c8:e5:9d:b8:ee:
e7:78:7e:6f:a4:7a:9e:22:b8:4b:61:0e:5f:6e:52:4c:ec:1c:
cd:18:c4:f4:3b:0f:86:99:a9:86:4e:9b:a3:6c:f4:a3:18:bb:
d9:d5:3f:f3:e8:15:29:07:4d:7d:f2:da:ef:85:ff:c4:d2:c9:
de:52:58:d0:74:a5:c7:7b:57:a6:ca:84:44:73:3e:e9:79:12:
a0:1e:c6:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 00:47:12 2025 by rpki-client