Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363130353a3a2f34382d3438203d3e203136393039.roa
File: 326131343a373538343a363130353a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier: AUDVqKQ7mgcurNaKL2yh9uUJlqFzhHllzxIWuicQphI=
Subject key identifier: 82:D5:F1:4B:CD:A6:12:54:8D:02:0A:36:71:BE:6F:A7:35:E0:8C:09
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 2D35737218B5545D80E006151CA4FEF42740BE82
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363130353a3a2f34382d3438203d3e203136393039.roa
Signing time: Wed 02 Apr 2025 18:46:16 +0000
ROA not before: Wed 02 Apr 2025 18:41:16 +0000
ROA not after: Wed 01 Apr 2026 18:46:16 +0000
asID: 16909
IP address blocks: 2a14:7584:6105::/48 maxlen: 48
Validation: Failed, certificate revoked on Fri 11 Apr 2025 18:31:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2d:35:73:72:18:b5:54:5d:80:e0:06:15:1c:a4:fe:f4:27:40:be:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: Apr 2 18:41:16 2025 GMT
Not After : Apr 1 18:46:16 2026 GMT
Subject: CN=82D5F14BCDA612548D020A3671BE6FA735E08C09
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:32:5f:a0:38:f7:cd:6d:45:6c:1b:b9:33:8e:
d5:db:83:f6:03:89:ca:ea:c7:26:36:07:67:ae:2d:
7c:ba:6b:c5:61:bd:3c:fd:5f:79:80:55:3f:78:1f:
8a:3e:b7:21:8d:e4:2c:f1:25:d5:2c:33:b1:46:7c:
dc:51:fb:08:ed:57:12:bb:be:00:35:41:89:31:38:
28:59:92:2d:71:c9:c1:a7:5d:b2:58:33:05:e7:73:
65:02:06:e0:10:39:d4:36:2d:10:60:06:b1:94:b8:
a2:5f:5d:c0:d8:92:3d:cb:04:09:cd:04:ad:81:d1:
96:be:5c:bd:31:93:66:69:b2:39:ff:33:2a:2c:5a:
dd:26:a6:19:15:be:d2:b2:bd:b9:1f:b5:94:be:9b:
49:74:cb:23:9f:82:c5:9a:6c:56:4a:85:c3:05:54:
75:a0:38:e4:c2:03:b7:ad:46:b2:ea:17:df:91:d8:
c9:57:64:9a:0a:bd:f3:3a:5a:f3:4f:b6:21:eb:54:
f8:56:a2:3f:53:8a:83:24:03:9e:91:a6:4e:ac:b4:
92:fd:c9:00:ad:c3:70:8c:eb:21:af:f5:7b:a5:ea:
21:63:b2:ce:e8:76:be:a9:11:42:eb:fe:7f:c3:78:
1d:3c:84:07:be:53:90:df:4e:e7:0f:e1:90:58:ef:
44:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:D5:F1:4B:CD:A6:12:54:8D:02:0A:36:71:BE:6F:A7:35:E0:8C:09
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363130353a3a2f34382d3438203d3e203136393039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:6105::/48
Signature Algorithm: sha256WithRSAEncryption
87:81:dd:89:99:df:80:ba:fd:95:4d:3c:90:2e:95:58:a8:d2:
d2:e1:0b:5b:77:38:8e:4b:bb:94:34:90:b2:82:a6:c0:f0:52:
59:a2:ad:13:b5:45:ae:96:b0:cb:ed:41:1c:26:bb:86:b4:1d:
a0:66:77:a4:a3:78:ab:61:f7:ff:8c:d0:93:29:24:9b:ba:24:
1c:a8:66:d1:49:47:c1:21:a7:cb:e3:3d:e2:13:cc:ee:25:9f:
c8:a0:32:9b:a3:3c:4a:7f:8f:c1:3f:07:cd:9a:50:e8:6d:04:
bd:ea:fc:70:8c:43:73:36:96:69:36:66:66:c7:6c:37:7d:87:
51:f5:53:8d:8d:9a:2f:7f:ea:ba:4e:39:2c:16:ca:83:41:dd:
ca:74:6e:ee:12:fe:2f:0b:e5:c5:c0:df:7d:a1:2b:6c:4f:75:
09:db:17:ea:2b:66:e3:ae:bd:d8:8d:06:10:b7:05:3a:ff:ef:
19:d0:d5:f7:ba:44:3f:dd:bb:81:f2:d4:14:c0:ac:0d:54:fb:
ba:55:03:dd:f2:24:ba:5a:82:e0:96:9d:8d:07:dc:6e:22:7d:
81:9c:06:be:9b:a8:4f:57:d0:f8:95:8c:29:1b:87:dd:00:88:
08:43:43:7e:d1:28:50:5a:49:ea:f0:73:41:06:69:2f:01:70:
d2:ab:d5:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 25 00:59:56 2025 by rpki-client