Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363030303a3a2f33362d3438203d3e203136393039.roa
File: 326131343a373538343a363030303a3a2f33362d3438203d3e203136393039.roa (raw, json)
Hash identifier: W1mWgUHHY6tUONKpxylLe8x+AFk7UM9QNP5nhPf+WZE=
Subject key identifier: 56:4B:48:AD:44:3A:67:FA:C8:F2:E3:1D:31:03:B3:57:2D:3C:3E:79
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 5CC519BF9774A60749C6C2C0779B4073D2DEB776
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363030303a3a2f33362d3438203d3e203136393039.roa
Signing time: Mon 12 May 2025 16:18:04 +0000
ROA not before: Mon 12 May 2025 16:13:04 +0000
ROA not after: Mon 11 May 2026 16:18:04 +0000
asID: 16909
IP address blocks: 2a14:7584:6000::/36 maxlen: 48
Validation: Failed, certificate revoked on Sat 31 May 2025 17:16:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5c:c5:19:bf:97:74:a6:07:49:c6:c2:c0:77:9b:40:73:d2:de:b7:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: May 12 16:13:04 2025 GMT
Not After : May 11 16:18:04 2026 GMT
Subject: CN=564B48AD443A67FAC8F2E31D3103B3572D3C3E79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:7f:05:80:49:1e:b2:2a:d5:aa:52:30:51:7f:
91:ee:b6:86:79:16:95:d9:b4:82:b1:70:a1:06:7c:
8e:bd:72:0c:9b:7c:8a:6f:51:2c:42:86:5a:b7:50:
b4:58:4e:07:31:d7:af:d7:8a:89:20:b4:c3:b6:89:
36:3e:4c:5e:9f:1e:b6:9f:d3:1a:d0:bb:95:84:42:
b1:ee:5a:18:96:51:88:c4:b2:51:76:5e:8b:a8:ef:
8c:14:97:91:da:c4:42:84:75:39:1c:02:69:72:3c:
60:83:10:76:63:69:44:c4:75:39:7a:51:01:fb:26:
b0:97:e8:80:6f:32:3f:ca:a1:30:a1:39:b4:98:4b:
26:d7:f5:b8:ec:18:bf:db:6e:44:00:8b:ad:f9:66:
4b:e4:15:0e:fd:b8:1c:be:3a:24:3f:0a:fd:44:62:
c1:09:d2:39:fb:41:4a:0b:35:b8:08:0f:1a:37:f0:
a8:ea:c6:7c:ca:53:cb:18:aa:08:77:13:5a:55:0b:
43:d6:8a:a4:c3:b0:db:57:0f:11:64:88:3d:8e:7d:
82:3a:e4:38:92:a8:d7:da:4d:fd:16:a6:92:dc:8a:
ff:bf:fd:71:65:da:31:ad:81:85:e6:e6:01:74:eb:
d5:cb:ec:1b:1b:4c:c1:bf:a4:59:34:6d:62:f4:6f:
b1:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:4B:48:AD:44:3A:67:FA:C8:F2:E3:1D:31:03:B3:57:2D:3C:3E:79
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363030303a3a2f33362d3438203d3e203136393039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:6000::/36
Signature Algorithm: sha256WithRSAEncryption
80:b4:f9:0f:aa:00:80:d4:30:24:84:a3:fc:f4:2f:08:73:cf:
47:f1:fc:a1:44:a7:1d:67:4e:5b:02:58:2d:c2:6e:53:f6:1a:
8b:1d:56:f0:fe:ea:89:14:20:e4:3a:2d:a2:06:21:02:2a:96:
23:69:98:9d:2d:6c:6f:c6:cb:11:6c:40:df:a8:a2:b2:45:c1:
9e:3d:f8:22:92:cf:58:c8:36:53:07:40:3f:69:d0:7b:27:e4:
7a:f3:35:30:fa:66:e1:ce:ff:8f:24:83:13:df:5c:5c:e0:09:
b0:88:c4:38:5c:c3:46:89:78:91:f8:4e:55:93:7c:ec:cb:e9:
34:ef:71:d8:0d:98:76:fa:c3:e8:81:ac:23:83:f2:b8:ae:68:
40:f1:b7:67:ce:9f:7b:71:4b:3e:b6:f6:b7:28:d2:78:9e:67:
3b:26:99:af:3e:5b:94:08:55:f0:12:9f:81:b4:53:3d:8e:88:
d0:fa:b0:72:bb:73:7f:1e:25:c7:b4:60:f5:8e:65:43:d9:3d:
96:95:6f:be:3a:dc:fa:8a:29:bb:01:85:0f:b8:d0:74:c9:7d:
c8:b3:96:34:2e:85:26:9d:32:b5:11:59:04:b9:bb:a6:9a:ea:
2f:d9:83:41:7d:2b:de:ff:3f:b9:73:e4:33:d2:26:ef:8a:f7:
61:6e:e2:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 23 23:53:44 2025 by rpki-client