Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363064363a3a2f34382d3438203d3e203136393039.roa
File: 326131343a373538343a363064363a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier: oiQQEBEKMx/X+L9vRdOR0liAdNQ6xWKUOIx+df73cKc=
Subject key identifier: DD:6A:CA:04:84:FC:63:06:E3:20:E8:3A:6D:6A:13:3C:20:2C:1A:E5
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 2360FF33CD85F1F0E9311C22664B9397AD36C3B7
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363064363a3a2f34382d3438203d3e203136393039.roa
Signing time: Sat 22 Mar 2025 15:22:56 +0000
ROA not before: Sat 22 Mar 2025 15:17:56 +0000
ROA not after: Sat 21 Mar 2026 15:22:56 +0000
asID: 16909
IP address blocks: 2a14:7584:60d6::/48 maxlen: 48
Validation: Failed, certificate revoked on Fri 11 Apr 2025 18:31:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
23:60:ff:33:cd:85:f1:f0:e9:31:1c:22:66:4b:93:97:ad:36:c3:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: Mar 22 15:17:56 2025 GMT
Not After : Mar 21 15:22:56 2026 GMT
Subject: CN=DD6ACA0484FC6306E320E83A6D6A133C202C1AE5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:69:c5:65:33:82:f0:d7:f7:57:b1:11:b0:ec:
20:71:b4:99:d8:39:4e:48:77:29:e5:58:86:23:5d:
43:6a:1d:0e:13:5a:11:18:28:d9:22:17:60:16:d3:
7c:03:11:df:46:88:93:b5:10:f3:76:22:1d:cf:b0:
07:54:9b:86:b4:70:05:09:10:cb:f9:fe:d3:3f:4e:
d3:f7:fc:bf:13:69:17:2c:74:ae:cb:d0:06:c0:1a:
90:ef:8f:4e:3e:d6:6f:04:18:a4:24:d0:52:e1:7f:
02:dd:66:45:a9:eb:08:a2:af:e4:ce:a8:22:ce:85:
c3:cc:43:10:94:2b:2f:bc:54:b5:3a:58:9a:02:27:
c7:f1:8a:5b:ea:ce:2f:9a:a1:00:ca:b1:ae:ac:00:
9a:c1:b3:83:25:62:cf:b8:eb:42:90:8a:10:23:bc:
8e:0d:c0:15:4e:98:d1:c8:4c:ae:97:6b:44:d8:a1:
15:59:51:cc:54:5a:84:50:b6:e0:76:51:4a:35:95:
22:5d:b1:23:17:be:54:63:b9:bd:2a:da:e4:b0:d1:
58:03:ef:17:04:52:25:93:9f:f1:b6:27:e6:25:ae:
86:4a:b6:9b:69:a7:e9:e4:77:09:bb:c0:f0:fb:67:
c2:ea:c6:b9:e8:a6:11:41:6e:a6:ca:99:0f:81:dd:
61:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:6A:CA:04:84:FC:63:06:E3:20:E8:3A:6D:6A:13:3C:20:2C:1A:E5
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363064363a3a2f34382d3438203d3e203136393039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:60d6::/48
Signature Algorithm: sha256WithRSAEncryption
5d:8c:1d:6b:99:30:fb:0a:da:54:64:63:70:18:52:dc:9d:00:
28:ce:5f:7e:ea:a3:c8:2a:d4:c3:bd:79:c3:68:90:54:f1:67:
92:6a:d5:62:71:02:bf:18:07:a6:90:5a:91:59:6d:df:78:cb:
88:ce:bc:dd:32:68:97:0f:dd:b5:2d:f9:25:3e:ba:cb:d3:65:
fe:88:9c:0e:7f:fd:c5:2a:1e:16:37:03:64:82:33:71:62:7a:
7f:4d:ca:fd:02:7d:f0:6f:b9:14:4f:0a:ec:eb:65:fa:9b:a0:
50:1d:61:b3:f3:36:1b:3a:3a:de:08:dd:c1:38:45:36:1a:f2:
83:6b:ad:73:e4:71:88:ca:9d:9f:7c:cd:52:4d:cd:81:9a:b8:
6a:7e:48:c5:97:8d:91:45:a6:e2:6e:9f:bc:e2:51:0d:d4:a3:
0a:04:55:4a:e8:ba:fd:74:68:8d:5d:9e:58:5b:61:f4:82:10:
19:09:38:8b:e2:68:11:3f:f7:32:5b:6a:cd:ec:96:a3:81:61:
9d:0d:5c:d5:5b:d7:b8:6f:d8:6a:15:07:be:18:2d:42:7d:fd:
fd:95:3e:ea:24:5e:ca:41:04:40:77:cf:e3:9a:6c:23:3f:5a:
7d:32:5b:92:15:ea:80:c2:b8:99:b2:9f:c7:16:91:ac:4c:0c:
11:b2:53:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 00:49:30 2025 by rpki-client