Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363131363a3a2f34382d3438203d3e20343031353037.roa
File: 326131343a373538343a363131363a3a2f34382d3438203d3e20343031353037.roa (raw, json)
Hash identifier: oxDI5c9l/KZgCRA3dPTVsEaB0im7gR9Q/22mIX/cb+E=
Subject key identifier: 4F:B7:5D:C9:52:33:69:6B:AC:42:FD:38:3F:5C:E7:7B:C4:5D:34:53
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 56FFBFE45CC6A60E13D92F82D5A0FCBD9A9FCD02
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363131363a3a2f34382d3438203d3e20343031353037.roa
Signing time: Wed 02 Apr 2025 18:47:24 +0000
ROA not before: Wed 02 Apr 2025 18:42:24 +0000
ROA not after: Wed 01 Apr 2026 18:47:24 +0000
asID: 401507
IP address blocks: 2a14:7584:6116::/48 maxlen: 48
Validation: Failed, certificate revoked on Fri 18 Apr 2025 18:15:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
56:ff:bf:e4:5c:c6:a6:0e:13:d9:2f:82:d5:a0:fc:bd:9a:9f:cd:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: Apr 2 18:42:24 2025 GMT
Not After : Apr 1 18:47:24 2026 GMT
Subject: CN=4FB75DC95233696BAC42FD383F5CE77BC45D3453
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:10:42:19:7c:dd:71:f3:0b:90:23:82:0d:42:
08:40:0a:04:83:90:16:7d:3e:e3:9f:7c:7d:e4:a7:
8b:a8:f9:9a:a7:72:af:0b:8e:12:72:70:cb:ea:db:
fe:ad:4c:cd:fa:36:11:14:9a:26:89:10:c7:f1:e0:
91:43:69:a7:b2:1a:af:c3:47:ae:09:70:3c:74:4a:
64:3c:0e:80:40:8b:a2:b8:88:b2:26:6d:37:10:25:
ac:bd:18:62:c8:e6:ec:c6:a8:a5:68:5c:2a:6d:87:
61:46:ea:23:17:cf:0d:19:0e:e8:4f:32:56:4f:66:
e5:cc:61:c2:27:47:1d:8d:3a:e4:78:d6:3f:0e:f0:
ce:be:b4:b8:fd:0d:e8:c7:98:91:2f:6e:a6:71:42:
c4:a0:80:0a:b0:29:ae:4e:48:d5:d6:b3:48:95:4d:
92:97:04:b9:0d:a5:24:fc:1e:08:cd:75:90:22:25:
4a:1e:01:3d:6b:07:58:b4:9c:a4:39:c6:e4:23:23:
6b:5c:08:a6:1d:e8:f1:83:3f:b2:50:ae:8d:da:3a:
08:39:89:3d:7d:23:7c:54:8a:86:a8:25:0e:3c:26:
7d:f8:a2:fe:9c:57:85:2b:dc:8d:33:2e:50:b2:b6:
88:24:cf:aa:72:23:39:9e:7a:93:5a:0f:ca:95:05:
43:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:B7:5D:C9:52:33:69:6B:AC:42:FD:38:3F:5C:E7:7B:C4:5D:34:53
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363131363a3a2f34382d3438203d3e20343031353037.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:6116::/48
Signature Algorithm: sha256WithRSAEncryption
6e:f4:4a:fd:53:96:ed:54:ad:90:a0:ec:8a:73:c5:4d:6a:69:
75:a2:0e:10:da:ad:77:ae:b9:e8:f1:95:c9:e9:9e:84:ad:97:
2e:46:7a:6b:e9:32:32:95:1d:93:d2:3e:d4:43:95:79:6c:57:
80:b9:2b:1e:06:55:03:a7:00:05:a3:e8:48:6b:ac:06:de:a8:
15:fb:41:e8:56:76:f1:16:af:48:ea:ce:6a:d0:29:c7:78:bb:
9c:ba:e5:13:de:eb:fa:4d:cc:c6:4d:f0:db:cc:f4:64:b6:e9:
62:26:0f:e4:57:64:e9:95:6c:07:96:fc:93:54:cc:61:25:4d:
2f:be:81:15:11:50:d7:d3:47:a8:8a:01:d4:69:d9:db:d6:4a:
a5:c4:c3:18:b9:11:30:2c:8d:b8:70:8f:29:86:06:6b:a4:0c:
70:4e:a3:bd:d8:72:4a:da:c0:d2:05:9f:2d:b5:a3:64:97:fe:
10:38:8e:b5:c0:ab:bb:96:15:81:10:95:6f:bf:b6:b6:a1:3a:
c6:90:62:42:2a:ff:b2:a1:5e:ec:0e:1a:30:84:e0:3b:b6:f7:
b5:53:28:d7:c0:9f:29:0a:85:de:9b:6b:ca:f1:d3:c1:db:d1:
93:cf:90:35:51:78:6d:c0:38:bc:90:4e:cd:a1:db:a5:8e:77:
a7:cd:d3:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 00:47:15 2025 by rpki-client