Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363237623a3a2f34382d3438203d3e203136393039.roa
File: 326131343a373538343a363237623a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier: Mlr/ZyCaBy6aLuCww8iFpmg5NV/rIzwoaFaVKQXaSW4=
Subject key identifier: 3F:F2:76:5A:A5:E6:89:E6:92:A3:41:16:0B:F5:55:A3:0B:86:40:46
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 564F5C41097D7B124F0FC0AD6706E590213A7E7C
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363237623a3a2f34382d3438203d3e203136393039.roa
Signing time: Wed 14 May 2025 11:30:02 +0000
ROA not before: Wed 14 May 2025 11:25:02 +0000
ROA not after: Wed 13 May 2026 11:30:02 +0000
asID: 16909
IP address blocks: 2a14:7584:627b::/48 maxlen: 48
Validation: Failed, certificate revoked on Fri 16 May 2025 15:48:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
56:4f:5c:41:09:7d:7b:12:4f:0f:c0:ad:67:06:e5:90:21:3a:7e:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: May 14 11:25:02 2025 GMT
Not After : May 13 11:30:02 2026 GMT
Subject: CN=3FF2765AA5E689E692A341160BF555A30B864046
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:82:bb:58:9d:c9:1b:62:94:65:1c:8e:10:1f:
a1:c6:4b:ca:72:9a:66:c9:e4:7b:cc:af:3b:b3:23:
76:ee:bd:26:0c:6f:6f:60:d3:07:88:d4:d0:27:bf:
c6:7c:d1:f5:d2:21:fe:64:8a:91:40:32:0d:b4:2e:
1e:cd:4e:de:57:44:20:fa:00:90:c4:c7:83:6d:bd:
7e:18:f5:66:45:7a:a2:50:47:f3:02:43:7c:32:2c:
35:48:8f:dc:66:0c:28:c9:74:1c:a7:da:e7:fd:09:
a1:95:72:88:d3:d5:b0:5e:f0:8a:0a:34:54:94:3e:
be:85:30:35:d7:46:1a:ff:2b:54:2c:d5:32:5e:a3:
57:01:90:38:21:0a:aa:aa:78:93:c1:b9:a0:6c:95:
84:15:22:13:96:56:68:34:cd:bf:a5:6c:5f:e5:16:
05:4c:de:1f:d4:89:c3:a1:42:74:0c:6f:c2:b5:15:
80:8a:70:3e:17:6e:84:94:14:b6:63:a7:44:07:03:
11:20:e2:ac:eb:78:d1:79:cf:ad:7d:3a:26:fa:14:
4b:8e:a5:4b:eb:c1:11:a2:22:a4:66:e9:97:f1:5c:
58:5e:2b:6f:45:cd:d8:b7:be:63:57:b5:58:4e:f9:
b3:3e:ae:d1:76:6d:84:dc:49:a8:fc:8b:d5:41:c5:
ad:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:F2:76:5A:A5:E6:89:E6:92:A3:41:16:0B:F5:55:A3:0B:86:40:46
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363237623a3a2f34382d3438203d3e203136393039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:627b::/48
Signature Algorithm: sha256WithRSAEncryption
3d:c5:ef:04:d1:19:a1:64:24:28:ce:48:63:fa:3d:2b:1c:75:
f4:68:88:70:d0:4b:26:7b:e1:21:fa:73:1c:bc:ee:77:78:fd:
f9:ce:b1:30:bc:fc:df:69:28:58:8d:e2:59:93:88:48:10:73:
70:68:38:17:15:e4:49:d8:9f:ad:ba:31:78:09:44:53:b9:63:
0e:ab:ff:46:58:3d:25:e9:ce:3e:94:28:df:29:de:7d:ad:b8:
f5:90:3e:c0:54:e5:b0:10:c0:5d:cf:c9:f9:b4:72:71:36:8b:
01:56:6d:b7:9e:cf:82:02:9c:b9:ed:18:fa:a3:0a:4d:db:7d:
69:6f:f1:cb:9b:73:37:7d:5c:4d:34:bc:d2:ba:aa:ba:a2:62:
12:fd:1e:0a:0e:13:66:a5:32:e1:9c:b6:62:21:2d:9e:8b:44:
a4:0b:a8:d1:60:f7:c7:04:8c:4e:11:d5:51:82:4d:a5:f7:e9:
1f:1f:de:f1:10:e6:76:1d:08:f9:64:a4:db:f8:10:65:2f:a9:
d1:96:d1:13:1c:6b:7e:fd:7e:e6:32:3c:bc:98:03:95:aa:3e:
bb:57:7d:5f:32:0e:f8:e4:27:fa:f7:b0:f5:f4:b2:ac:11:26:
66:e4:0d:0c:be:c4:6b:59:be:04:4e:d7:a3:54:98:a4:9c:09:
1f:2f:b9:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 23 23:53:39 2025 by rpki-client