Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a366330303a3a2f34382d3438203d3e203136393039.roa
File: 326131343a373538343a366330303a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier: hcPJM56xdCg1bVWuMbBHXeFKI/ZOyFKjQyHpEqvgUDA=
Subject key identifier: 10:82:F8:0D:23:DC:D7:16:EE:80:5D:D7:E7:C8:AC:69:D7:07:F1:3D
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 3B5AFE6B1323336E5EA95A2DD33F5B587D6791B7
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a366330303a3a2f34382d3438203d3e203136393039.roa
Signing time: Sat 01 Feb 2025 19:33:46 +0000
ROA not before: Sat 01 Feb 2025 19:28:46 +0000
ROA not after: Sat 31 Jan 2026 19:33:46 +0000
asID: 16909
IP address blocks: 2a14:7584:6c00::/48 maxlen: 48
Validation: Failed, certificate revoked on Sat 15 Feb 2025 20:42:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3b:5a:fe:6b:13:23:33:6e:5e:a9:5a:2d:d3:3f:5b:58:7d:67:91:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: Feb 1 19:28:46 2025 GMT
Not After : Jan 31 19:33:46 2026 GMT
Subject: CN=1082F80D23DCD716EE805DD7E7C8AC69D707F13D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:00:f7:79:98:c9:fb:bb:6d:ef:ff:fe:e6:08:
05:d6:a9:d7:d5:3a:29:80:ac:20:a4:d9:cb:78:99:
c1:04:c2:91:4d:1d:85:c3:37:b5:28:bd:14:4e:10:
63:92:d0:cc:01:f0:f0:55:37:a8:3d:1c:91:14:64:
8a:a7:f3:30:ad:6f:c1:95:fa:33:78:f4:29:bd:e2:
1b:3d:a7:b7:7a:ce:ac:ee:2a:a7:77:40:0b:fa:71:
37:d8:eb:d7:9b:ea:4a:a7:28:8c:da:e8:19:c9:b6:
08:82:01:44:4a:35:f4:95:ea:2b:00:7e:9f:41:e4:
3d:d9:1f:97:dc:e6:f5:ba:0d:3a:92:af:47:28:56:
e4:bf:1c:7b:d9:77:73:de:6f:3f:3a:b8:92:e7:f1:
b1:38:83:b9:63:48:e3:41:ff:3a:29:84:26:e3:cb:
56:2c:ad:26:e7:ec:4f:e8:d7:57:3c:e8:72:6a:76:
84:af:4d:c2:78:09:12:72:e5:1a:7f:d3:37:1a:d6:
06:c3:f3:89:fc:68:6f:7a:83:7d:e4:e2:7b:99:77:
c4:bb:73:87:36:2e:80:0e:6c:5e:30:0f:aa:f1:79:
dd:cd:c6:54:a6:fe:4a:8f:46:a5:c5:73:32:c8:17:
ca:52:66:d7:48:e4:2f:91:0c:47:ce:f0:b4:f2:1f:
12:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:82:F8:0D:23:DC:D7:16:EE:80:5D:D7:E7:C8:AC:69:D7:07:F1:3D
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a366330303a3a2f34382d3438203d3e203136393039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:6c00::/48
Signature Algorithm: sha256WithRSAEncryption
33:29:95:c1:d1:99:7f:f1:02:31:dd:a6:02:59:c2:db:5b:00:
12:75:69:16:15:14:08:8d:ae:9d:61:93:74:bb:42:3e:f6:0b:
03:07:4a:89:ac:0a:6c:38:60:2b:a2:16:a7:83:78:78:53:18:
20:37:ac:58:01:fe:68:37:05:f6:cb:07:96:a5:10:5a:2e:fc:
f1:50:60:97:64:33:05:62:4b:d1:42:71:53:dc:35:18:06:4a:
2a:81:fd:82:d8:ae:f5:32:aa:87:67:f5:dc:dd:87:73:11:7d:
7b:21:4d:47:56:ac:08:46:c9:86:ab:cf:b8:33:a8:ea:ce:b5:
ca:37:c8:44:0a:16:e0:2e:0b:bf:62:1a:83:04:6c:9b:f8:f6:
95:2c:6d:00:c9:60:d9:c1:11:c1:85:2a:98:27:3e:b5:1a:09:
96:e8:7f:e4:d8:ac:9a:6d:82:d2:31:80:b8:cc:75:c0:00:e8:
b7:54:e7:e7:1d:31:e4:13:42:14:ed:8a:c4:01:81:03:4d:11:
89:22:8d:ff:4c:5c:1c:ce:55:60:21:31:73:9a:cf:bf:6e:7e:
31:ea:b3:6f:a5:83:86:ba:59:20:7d:bc:22:05:93:f7:f1:78:
a3:43:97:70:bb:f1:ad:b8:b0:5b:aa:aa:18:65:49:3b:a4:56:
1b:cb:51:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 00:45:51 2025 by rpki-client