Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363130363a3a2f34382d3438203d3e203136393039.roa
File: 326131343a373538343a363130363a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier: 5cFk7JuXhHgbNWZQ7etXISKeJCJETkPrjKW+vW2RNPU=
Subject key identifier: 36:C3:98:EC:0F:4F:35:45:BF:66:A0:90:0E:76:18:3F:33:CE:1B:9F
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 4E30EA4CBBB92A0821DB86E8AC7D8AB0D3E7EF3E
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363130363a3a2f34382d3438203d3e203136393039.roa
Signing time: Wed 02 Apr 2025 18:46:17 +0000
ROA not before: Wed 02 Apr 2025 18:41:17 +0000
ROA not after: Wed 01 Apr 2026 18:46:17 +0000
asID: 16909
IP address blocks: 2a14:7584:6106::/48 maxlen: 48
Validation: Failed, certificate revoked on Fri 18 Apr 2025 18:15:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4e:30:ea:4c:bb:b9:2a:08:21:db:86:e8:ac:7d:8a:b0:d3:e7:ef:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: Apr 2 18:41:17 2025 GMT
Not After : Apr 1 18:46:17 2026 GMT
Subject: CN=36C398EC0F4F3545BF66A0900E76183F33CE1B9F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:cc:3c:28:86:c8:ca:16:3c:04:0c:54:f5:80:
75:be:e9:23:70:d0:31:f5:8f:1b:d2:14:4c:2b:c9:
7f:b7:73:22:7b:75:f1:cf:ec:ce:08:9e:ed:2a:71:
ca:01:2b:50:41:4b:90:c7:18:5a:34:51:0f:fd:97:
bd:0b:00:b2:d8:c0:55:c5:75:44:2e:69:e7:64:c1:
00:4f:39:df:6a:eb:bd:3f:be:c9:35:74:cb:fd:52:
d7:8e:4d:c3:91:23:3d:7b:f9:71:f2:c1:82:fe:0b:
98:58:7c:21:0c:03:6a:f3:d8:16:6c:cf:2c:59:b1:
ff:72:69:c3:a4:b3:c1:ea:9d:64:39:ec:0c:8f:9f:
17:56:7f:bf:74:0a:fc:fb:51:b2:8c:5a:af:55:87:
18:12:97:2b:39:6b:d2:c9:08:47:a8:f7:e9:4a:1f:
d7:94:88:f8:e2:f1:fc:51:da:72:71:f8:a1:ec:69:
93:db:d7:04:8a:3f:26:b1:47:94:38:c3:24:1f:af:
be:dd:75:22:2f:69:1c:5e:e8:dd:20:75:d2:e0:81:
28:2f:fe:77:97:9a:a9:cd:de:db:98:d6:b9:15:95:
9d:d9:f6:2b:55:da:b2:5b:8a:71:ee:d0:08:a8:30:
67:70:da:9a:42:4a:6a:1d:d3:51:1b:c1:f4:2a:de:
df:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:C3:98:EC:0F:4F:35:45:BF:66:A0:90:0E:76:18:3F:33:CE:1B:9F
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363130363a3a2f34382d3438203d3e203136393039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:6106::/48
Signature Algorithm: sha256WithRSAEncryption
4f:7c:41:4a:17:dd:ce:a1:76:32:5e:1e:4c:46:c3:11:34:65:
98:0c:5b:91:98:c4:c4:87:dd:b8:3f:bc:6b:62:e2:8c:26:fe:
ee:b1:2e:5c:62:0e:4c:8c:9e:6a:f8:a6:4e:f1:4f:b2:3b:61:
ed:58:a0:ba:5a:87:12:b9:19:79:22:94:db:db:52:38:cc:9c:
cf:47:e6:91:8e:89:73:03:d8:d0:e4:32:74:bc:e1:d7:7c:37:
e8:86:fd:62:d6:ef:4c:d5:24:39:ed:6c:56:46:99:b7:08:b4:
43:9b:a9:3b:ce:68:47:45:76:a6:13:2a:d7:4e:1a:d3:7c:e4:
0b:9d:3c:c8:7a:88:f2:ff:36:ba:82:26:ab:8e:a4:a8:5c:02:
9e:85:16:09:10:a2:4f:e2:55:59:b0:bd:41:a3:09:1b:d1:66:
22:1f:ce:23:cd:31:3f:f0:3d:43:60:42:5b:05:49:0c:d3:04:
d0:ab:35:59:e2:62:3e:32:7b:8d:dd:73:7d:5f:dc:f5:49:ae:
1f:75:65:61:13:f3:50:9e:c7:58:e6:de:24:83:d6:d1:94:58:
5d:59:2d:b8:d2:e9:26:20:cd:41:e5:44:33:be:2b:ef:94:94:
03:0e:85:82:0c:3a:56:2f:69:f7:33:fe:5e:5f:e0:30:f0:5d:
55:a2:d3:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 00:46:54 2025 by rpki-client