Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363237363a3a2f34382d3438203d3e203136393039.roa
File: 326131343a373538343a363237363a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier: NJG9Y2vz07yLZ5j6pMjOez7boYNXIQeJpnwGSvlzOZc=
Subject key identifier: C4:91:49:05:34:23:08:A6:FD:B1:38:59:9C:6D:78:6B:C7:11:89:64
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 04955579BE532D806624F4BB5AD8FA500EC2E332
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363237363a3a2f34382d3438203d3e203136393039.roa
Signing time: Tue 13 May 2025 21:36:02 +0000
ROA not before: Tue 13 May 2025 21:31:02 +0000
ROA not after: Tue 12 May 2026 21:36:02 +0000
asID: 16909
IP address blocks: 2a14:7584:6276::/48 maxlen: 48
Validation: Failed, certificate revoked on Fri 16 May 2025 04:54:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
04:95:55:79:be:53:2d:80:66:24:f4:bb:5a:d8:fa:50:0e:c2:e3:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: May 13 21:31:02 2025 GMT
Not After : May 12 21:36:02 2026 GMT
Subject: CN=C4914905342308A6FDB138599C6D786BC7118964
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:88:6d:b7:46:e7:07:74:ff:c0:fe:f5:55:a2:
26:ee:00:72:f2:42:da:be:e8:06:60:e8:cd:11:9a:
8d:c5:e1:da:a7:1d:a2:65:2c:f7:54:41:0b:f7:c8:
0d:94:6f:05:95:14:1f:c3:69:89:f0:8b:25:92:ad:
7d:b2:e6:da:a3:a2:cd:3a:e4:08:01:14:97:67:95:
a7:f2:dd:c7:fd:27:04:b6:87:73:3f:c1:ab:9d:60:
94:52:59:4b:6a:2d:04:b6:76:1f:bc:e2:24:41:75:
04:54:c2:a3:e8:3b:0b:60:70:3f:8e:7b:05:83:f3:
db:13:ee:5e:17:1b:28:f1:6c:94:44:fe:2a:37:6c:
31:f8:e7:04:2c:53:4f:d1:2f:8a:52:d4:00:2f:ef:
17:bf:04:99:73:d7:cd:55:58:a8:66:95:82:9e:ee:
c3:93:5c:9d:ab:f4:d8:5e:16:09:50:b3:90:26:a8:
46:66:fa:77:f4:91:22:df:74:a6:a7:be:d9:34:5b:
d8:9c:b0:2a:31:e2:e2:7a:60:f6:6f:be:3c:2d:9a:
3c:64:ca:a1:de:a0:60:9c:23:f3:ec:d7:86:a0:e5:
f6:84:fc:ab:62:55:b7:6e:53:38:7c:f0:aa:45:4b:
aa:71:02:7d:0b:cd:56:c0:32:cc:e6:65:a0:5f:6e:
ac:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:91:49:05:34:23:08:A6:FD:B1:38:59:9C:6D:78:6B:C7:11:89:64
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363237363a3a2f34382d3438203d3e203136393039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:6276::/48
Signature Algorithm: sha256WithRSAEncryption
5a:4e:e2:66:c1:3c:bb:7d:c7:0e:01:ca:0c:43:b9:a2:6d:cf:
69:32:0e:b9:32:7d:fe:ae:88:d6:b3:2c:43:98:46:1d:30:59:
fd:8b:9c:25:b0:4d:d8:ad:8c:7b:54:be:0b:a9:a3:8b:02:ec:
22:7a:35:c6:1d:5b:62:d7:d3:c7:32:c7:38:1f:91:22:9a:e7:
25:80:10:71:c4:0a:56:fb:ef:6d:7c:62:bf:82:3f:dd:79:5b:
38:01:ec:20:ac:9b:8f:70:5a:3d:9e:98:a3:ac:c6:5a:04:fa:
1b:66:05:58:76:2d:10:90:dd:a4:5d:ac:12:67:6b:9b:10:6c:
55:ec:eb:dd:1d:7f:c0:73:c4:c2:af:be:23:39:0d:08:56:3b:
d8:7f:53:7c:fe:89:87:6a:68:18:e0:6e:ef:f7:94:b8:1c:42:
db:5d:30:32:1a:c0:e8:ce:fb:b9:0e:5b:cf:35:01:a9:41:2b:
49:01:00:ce:da:ce:4a:db:d2:d0:d9:94:5e:91:dc:ba:82:20:
32:1a:26:ca:cb:4a:3c:e2:2f:98:6a:34:54:be:b7:bd:41:ef:
80:3a:ed:ae:57:c4:b5:f6:11:d8:8e:ad:ac:9e:1a:fd:0c:22:
c4:74:8f:06:03:76:0b:00:d5:9d:b7:e9:1e:0c:89:53:54:36:
c6:28:ac:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 25 01:01:00 2025 by rpki-client