Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363064343a3a2f34382d3438203d3e203136393039.roa
File: 326131343a373538343a363064343a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier: CymNooHoK57gCHbOrR4IsWMUuHe4KuYm30wG4xA/1iY=
Subject key identifier: F7:43:2C:17:9E:2C:F3:55:59:03:AD:F6:A1:BB:92:8F:EB:C3:E3:8C
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 34C430EC2DED1972C46EAFB358D518980505909F
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363064343a3a2f34382d3438203d3e203136393039.roa
Signing time: Sat 22 Mar 2025 15:22:54 +0000
ROA not before: Sat 22 Mar 2025 15:17:54 +0000
ROA not after: Sat 21 Mar 2026 15:22:54 +0000
asID: 16909
IP address blocks: 2a14:7584:60d4::/48 maxlen: 48
Validation: Failed, certificate revoked on Fri 11 Apr 2025 18:30:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
34:c4:30:ec:2d:ed:19:72:c4:6e:af:b3:58:d5:18:98:05:05:90:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: Mar 22 15:17:54 2025 GMT
Not After : Mar 21 15:22:54 2026 GMT
Subject: CN=F7432C179E2CF3555903ADF6A1BB928FEBC3E38C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:3c:3b:f5:32:b4:4b:91:25:1f:ad:d7:6b:6e:
c5:ab:8d:e4:94:98:c9:8f:7e:6b:86:f6:53:37:89:
b9:11:f8:0b:f2:16:43:91:5c:88:08:41:82:7c:c5:
58:7d:d7:31:98:9b:44:d5:f1:a8:43:bd:a9:13:47:
1f:4f:ac:4a:40:62:ea:70:c6:c4:8e:c3:be:ce:d1:
bc:f5:49:fe:74:32:ba:9e:00:31:22:27:b2:0a:1f:
11:5a:c0:c9:ea:da:dd:e3:bb:34:15:67:6f:e9:53:
e5:95:1a:f1:b7:0e:85:dc:f7:32:0d:4c:15:ea:7a:
b7:cd:aa:c1:00:b8:5f:f7:66:2f:af:10:ca:26:de:
b9:f9:ec:57:90:b3:9e:31:6d:41:ac:66:01:d4:15:
5f:5e:dd:51:20:3c:82:44:e6:70:92:74:17:31:9d:
9c:fa:c0:d1:45:a1:d0:da:1e:66:13:5f:4f:0a:e0:
44:d1:51:4b:14:41:13:59:f4:58:f9:e8:4f:83:61:
a8:cb:4f:8a:7a:c7:82:79:25:eb:3f:6d:c6:cd:cd:
1c:b2:6d:6f:67:28:2f:19:57:8f:d8:9d:96:44:16:
7a:79:ae:86:c0:0e:c7:93:c8:82:87:34:b8:88:f9:
33:19:63:b0:44:01:cd:26:46:e4:7a:a6:1f:d1:27:
e4:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:43:2C:17:9E:2C:F3:55:59:03:AD:F6:A1:BB:92:8F:EB:C3:E3:8C
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363064343a3a2f34382d3438203d3e203136393039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:60d4::/48
Signature Algorithm: sha256WithRSAEncryption
6a:5c:27:25:3c:a5:9e:d8:5c:c2:f3:68:12:c8:5d:c1:76:19:
ec:b1:78:35:2f:e5:48:78:08:06:bc:06:ce:dd:14:d0:6a:17:
54:55:60:8d:c4:86:3d:70:e2:09:df:97:fe:bd:cb:cc:c9:32:
ce:cd:3f:c3:5d:4b:2f:bf:27:8b:b5:14:0f:2a:8e:39:2f:f5:
85:87:ba:f9:d0:55:dd:05:b6:69:cc:c8:47:39:25:69:39:92:
a0:fd:86:f8:e8:61:ac:ab:6a:00:ce:70:da:85:a3:29:97:09:
c3:32:61:8a:d2:b8:65:87:d0:28:4e:9d:58:3c:de:e5:37:d9:
ca:25:46:88:5f:a7:43:ce:4d:51:d4:38:5d:76:5f:92:42:32:
32:53:fa:52:8a:c2:6a:80:ee:80:5d:a8:b2:94:07:71:05:ee:
f8:19:5c:80:b1:d0:04:32:31:e4:de:48:d7:33:a8:73:88:a9:
c7:3b:93:ca:83:e1:16:25:d4:e0:fd:16:50:53:47:16:f7:17:
0a:08:95:ca:55:6b:83:2f:25:b4:26:d7:ef:fa:61:64:d3:f4:
2b:3e:e9:35:6d:83:19:3b:47:25:cc:1f:a0:00:cf:d5:05:b0:
8c:94:ff:a4:fd:d8:c0:9a:97:2c:24:6f:9c:11:81:91:c5:36:
df:d1:ff:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 00:47:15 2025 by rpki-client