Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363262313a3a2f34382d3438203d3e203136393039.roa
File: 326131343a373538343a363262313a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier: E0x8hwFwPaYJJMSzG1oHYhflekoYe6BQocA/BzTlyc0=
Subject key identifier: 09:8D:1B:1E:AF:9E:DA:F7:79:3F:9A:9C:CD:9E:8C:DC:F5:3E:7D:C6
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 7EEE5050AA7BA4F44C774FD58AED836F34250933
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363262313a3a2f34382d3438203d3e203136393039.roa
Signing time: Sat 17 May 2025 00:24:02 +0000
ROA not before: Sat 17 May 2025 00:19:02 +0000
ROA not after: Sat 16 May 2026 00:24:02 +0000
asID: 16909
IP address blocks: 2a14:7584:62b1::/48 maxlen: 48
Validation: Failed, certificate revoked on Sun 18 May 2025 15:24:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7e:ee:50:50:aa:7b:a4:f4:4c:77:4f:d5:8a:ed:83:6f:34:25:09:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: May 17 00:19:02 2025 GMT
Not After : May 16 00:24:02 2026 GMT
Subject: CN=098D1B1EAF9EDAF7793F9A9CCD9E8CDCF53E7DC6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:9b:85:14:d8:98:9f:63:07:84:2f:31:58:f3:
81:ea:f5:2a:03:77:57:0f:26:a2:9f:f9:08:f1:fc:
54:60:31:65:6f:06:32:c0:d6:13:4f:e5:db:74:03:
72:ea:0b:dc:d5:21:f9:53:6b:1e:e1:5a:3a:83:e3:
67:8b:d5:c9:de:1c:3d:a4:2b:3b:bb:cd:cd:88:44:
f9:33:45:d9:5c:5f:9d:97:1d:7b:16:00:12:7b:27:
ec:12:1e:98:01:0c:9e:10:96:cc:7d:6f:c0:0a:1f:
86:40:0b:2e:33:76:43:65:4b:cc:df:4a:46:a9:e5:
e2:19:b9:23:8b:3f:c1:ba:43:9d:1d:62:25:b8:29:
08:64:ac:99:d0:86:67:c9:1e:2f:6d:c4:80:dc:5d:
47:c5:51:85:f2:59:fa:5a:cd:d5:24:51:9e:37:8c:
9c:9c:e1:84:68:28:1b:2f:f9:ed:26:79:7c:3d:d9:
b2:a9:61:87:96:19:09:c4:22:ae:82:32:22:d2:a5:
7c:cc:d0:31:25:74:e2:c2:62:c3:15:d4:af:ae:f9:
49:1b:6d:4d:b9:46:bb:dd:3e:79:0b:48:a7:a0:a4:
09:11:6b:9b:9e:81:8c:a5:fa:15:b0:eb:1b:fe:f6:
b5:97:3e:e1:e5:78:88:e6:a5:b0:cb:f8:6d:d9:3a:
bf:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:8D:1B:1E:AF:9E:DA:F7:79:3F:9A:9C:CD:9E:8C:DC:F5:3E:7D:C6
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363262313a3a2f34382d3438203d3e203136393039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:62b1::/48
Signature Algorithm: sha256WithRSAEncryption
63:e8:e9:78:97:ef:13:7c:8a:91:0d:93:06:2f:19:09:6f:95:
53:cf:22:e0:84:73:d4:be:b1:32:af:d1:bd:eb:06:03:2c:17:
4b:fb:86:f2:db:f5:ea:3f:8e:85:56:05:25:0d:a7:16:3a:62:
54:69:2d:10:15:b0:40:cb:7a:b4:6a:88:cd:66:ef:bd:22:bc:
0d:54:76:86:c4:21:15:31:a7:e2:72:98:88:21:63:5c:e0:b0:
8f:97:78:0e:20:18:c0:af:1e:bf:11:ba:11:d5:ae:a1:05:66:
0f:c4:9d:bb:78:c0:2a:34:84:3b:68:59:78:10:ed:bf:ef:f6:
c2:2d:2c:93:ad:39:af:1f:7d:d5:74:27:20:27:f5:78:68:87:
24:3a:68:ac:13:b4:89:3d:14:04:78:91:d3:6e:a5:27:b0:7d:
ca:5c:84:09:84:42:ae:f2:a1:6e:4c:bd:72:87:36:aa:60:d7:
18:86:dc:02:26:de:a9:0a:bf:76:24:f2:e7:86:09:53:b0:76:
e7:f6:7e:df:ba:1d:d7:11:f4:6d:0f:67:34:34:60:c2:e4:21:
9a:0c:b2:c1:1d:53:52:30:64:87:a5:e7:48:e3:91:70:0f:b8:
18:59:49:7e:1d:00:b5:ff:e6:38:9a:ef:36:3a:51:0f:d1:56:
e2:8b:75:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 23 23:53:45 2025 by rpki-client