Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363261343a3a2f34382d3438203d3e203136393039.roa
File: 326131343a373538343a363261343a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier: f0Ai7OIVaSxH7RkyVDF5ooa0vj+K8tLJ/D4wWOitIbg=
Subject key identifier: 5F:D7:23:AF:BB:7A:3C:1F:9E:0B:F0:3A:20:6E:B0:C6:65:65:1D:88
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 2BA828AD6D9206F160013B387E335D3ED71B837F
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363261343a3a2f34382d3438203d3e203136393039.roa
Signing time: Fri 16 May 2025 15:54:02 +0000
ROA not before: Fri 16 May 2025 15:49:02 +0000
ROA not after: Fri 15 May 2026 15:54:02 +0000
asID: 16909
IP address blocks: 2a14:7584:62a4::/48 maxlen: 48
Validation: Failed, certificate revoked on Sat 17 May 2025 23:24:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2b:a8:28:ad:6d:92:06:f1:60:01:3b:38:7e:33:5d:3e:d7:1b:83:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: May 16 15:49:02 2025 GMT
Not After : May 15 15:54:02 2026 GMT
Subject: CN=5FD723AFBB7A3C1F9E0BF03A206EB0C665651D88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:b0:3f:23:94:07:d5:9a:97:ca:a6:a7:d9:03:
fc:3d:48:99:08:13:b0:17:10:46:82:4c:0f:52:79:
b5:d2:96:e3:48:09:af:fb:27:2e:56:f5:03:23:c1:
1f:15:85:0b:d9:8b:44:6f:78:cb:61:e3:42:56:ad:
65:67:74:97:71:80:62:01:b5:4e:7c:67:b7:74:70:
ca:ab:5a:73:50:96:96:f9:35:e3:a4:d2:b3:8b:60:
e0:a4:29:0f:26:e8:b9:45:55:a8:1d:df:f2:8d:a2:
c4:5e:f0:0d:bf:ec:f2:6a:21:b7:33:db:9b:a0:80:
d0:cb:fe:51:71:32:85:14:6a:fc:2a:8c:c0:4d:b5:
96:29:5a:67:e8:2e:69:39:79:66:9a:02:8b:69:d9:
c0:a7:dd:f7:11:f8:82:15:5e:61:3f:00:eb:f0:68:
eb:70:46:bf:7b:c5:dc:35:e5:e5:31:d6:b7:61:dc:
4f:73:45:4f:be:de:fe:ba:8e:19:84:a3:1a:80:cf:
bb:c5:d8:70:b1:16:9d:ca:ff:97:48:3b:ab:a2:6f:
69:d6:ff:f5:cf:92:74:34:ba:3f:cb:7f:f3:7d:b9:
cc:d7:09:af:cc:f0:b6:df:4f:fc:a2:e1:f8:a4:c7:
cd:31:cd:ae:6c:bc:f1:20:31:67:70:a6:31:1c:90:
a4:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:D7:23:AF:BB:7A:3C:1F:9E:0B:F0:3A:20:6E:B0:C6:65:65:1D:88
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363261343a3a2f34382d3438203d3e203136393039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:62a4::/48
Signature Algorithm: sha256WithRSAEncryption
82:c3:78:98:b0:96:32:ce:48:fa:e5:81:b9:34:8c:d6:03:d3:
a7:91:5e:2d:0c:58:a1:7d:2a:51:78:e1:70:14:fd:4d:f3:90:
c7:b1:46:8b:f5:85:26:c6:73:00:19:44:36:ef:a1:8c:99:0b:
ee:db:69:12:3b:2f:fe:82:1d:1e:f6:a9:11:86:42:99:a1:fd:
7c:9f:ba:46:19:fc:18:29:c4:be:06:d6:c4:d7:8c:43:3f:75:
c9:af:54:cc:2f:e0:d4:bc:b7:2f:33:4e:a3:c2:85:a0:3e:17:
ac:da:71:8f:47:57:cc:46:dc:bd:7f:4e:75:24:7c:45:6e:7b:
85:77:77:ac:ea:40:bb:b2:f9:5a:35:f0:cf:b9:40:60:3b:0d:
64:6e:d1:49:2d:6a:72:b4:98:35:89:c3:07:7d:20:6c:45:f0:
e6:c2:72:87:21:29:f0:45:5a:49:2d:cb:db:e7:c1:dd:2e:89:
00:b8:23:11:6d:29:6c:67:2e:11:77:f2:d8:af:81:67:e0:84:
69:e0:4c:e2:c3:74:dc:47:b1:74:1a:ae:b5:db:2b:a8:2d:6e:
47:3f:63:83:dd:92:c7:a5:30:52:b2:e4:41:58:af:d5:a8:93:
7d:49:a0:ce:44:54:b6:c6:ac:92:f1:3a:b7:fd:5b:23:ed:7b:
ea:72:dd:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 25 00:59:07 2025 by rpki-client