Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363131373a3a2f34382d3438203d3e20343031353037.roa
File: 326131343a373538343a363131373a3a2f34382d3438203d3e20343031353037.roa (raw, json)
Hash identifier: c9N8KZjBPaIoHo4owlb4Bgtriii+9uyQcUfTNgION+w=
Subject key identifier: 8F:FA:91:3B:76:01:DC:FB:B9:C7:D1:65:37:9B:C3:6D:35:99:78:45
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 1FEBE8EB6C6F2FDC4AEA1FA99EB622EDCE2C36E8
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363131373a3a2f34382d3438203d3e20343031353037.roa
Signing time: Wed 02 Apr 2025 18:47:24 +0000
ROA not before: Wed 02 Apr 2025 18:42:24 +0000
ROA not after: Wed 01 Apr 2026 18:47:24 +0000
asID: 401507
IP address blocks: 2a14:7584:6117::/48 maxlen: 48
Validation: Failed, certificate revoked on Fri 18 Apr 2025 18:15:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1f:eb:e8:eb:6c:6f:2f:dc:4a:ea:1f:a9:9e:b6:22:ed:ce:2c:36:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: Apr 2 18:42:24 2025 GMT
Not After : Apr 1 18:47:24 2026 GMT
Subject: CN=8FFA913B7601DCFBB9C7D165379BC36D35997845
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:08:0e:46:0e:5b:ed:a5:d0:75:bf:1a:c3:26:
5f:b4:82:47:1c:dc:83:d3:4a:78:e1:ea:e8:88:0c:
cc:25:c8:e8:16:09:d3:0d:3f:8a:28:fa:1e:07:16:
c2:99:a7:69:51:56:29:22:f6:5d:52:fd:d0:d0:5a:
8c:e8:70:55:76:23:7e:f7:0d:ee:1d:18:63:56:9c:
cb:17:51:c3:b6:f1:fd:d8:38:3d:f6:09:05:fd:33:
b0:15:c9:2c:38:18:aa:b0:84:3e:a2:5c:7c:b6:23:
78:23:3d:11:f0:00:f3:b0:b9:20:29:20:e4:dc:3a:
34:f7:88:60:1e:65:25:46:cd:90:fd:68:3e:ed:83:
68:c0:eb:7b:76:44:74:ae:5a:f4:82:f3:70:2f:db:
1d:d5:b7:28:8e:fe:f5:d8:51:4c:b2:13:e6:7c:7d:
d6:7e:2d:6a:f1:a5:8a:6f:a2:da:f3:fc:7c:41:a0:
da:8c:08:10:57:ef:5a:57:6a:f9:74:b4:7b:86:cb:
d8:70:51:06:dd:ab:cf:42:63:62:b7:c4:9c:f8:43:
f1:4f:65:a3:59:34:e8:20:e0:17:84:c8:f2:3d:9c:
65:83:f9:3f:98:1e:ee:f8:f0:95:c5:6b:e6:bf:2c:
75:8d:d4:fc:b0:fb:a0:d1:86:14:3f:b7:94:db:e4:
20:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:FA:91:3B:76:01:DC:FB:B9:C7:D1:65:37:9B:C3:6D:35:99:78:45
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363131373a3a2f34382d3438203d3e20343031353037.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:6117::/48
Signature Algorithm: sha256WithRSAEncryption
9d:16:5d:a1:8a:8f:d5:20:8d:90:17:2b:95:50:47:71:a8:9e:
b5:12:f5:27:8a:b0:d5:40:32:24:d3:62:3c:af:50:31:16:ef:
b2:d1:9a:6e:1c:c0:2d:59:b0:52:e3:37:18:fe:98:4a:70:42:
c0:53:1b:7d:31:20:30:e1:68:1c:f8:85:56:b4:cf:94:a6:41:
bb:cb:35:f6:df:1f:fe:eb:09:96:ca:b8:50:c5:c6:e0:fd:44:
13:f8:4d:3e:02:2f:46:c4:1d:18:c3:d1:e4:9b:80:63:91:9e:
39:73:29:63:38:82:cb:6b:75:61:48:74:79:38:2d:87:1d:1c:
54:d1:a2:a0:ba:de:fa:cb:1b:9e:28:db:84:43:90:04:58:97:
0d:6a:2b:78:21:97:36:2d:c3:7f:a8:7e:e7:60:e8:1e:64:ec:
e5:4f:14:9f:c3:ae:f4:37:55:8e:84:61:af:69:22:8b:70:39:
dc:e0:36:6c:ee:91:62:b0:2a:5b:ed:7d:65:96:08:38:db:b9:
23:97:01:7a:41:2f:ad:7e:56:d3:dc:0e:57:55:33:66:59:cf:
56:ea:ba:e8:24:44:41:fa:c6:d5:26:f1:94:47:3b:b0:1b:01:
60:8a:93:e5:f4:9f:d8:98:2c:e7:b5:0c:e5:86:d7:c9:e2:92:
9f:22:f8:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 00:47:03 2025 by rpki-client