Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363334613a3a2f34382d3438203d3e203136393039.roa
File: 326131343a373538343a363334613a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier: 3oZNCDqiJ3i8xcHe4t/V806eCnz66wBzfEfYBc4dEes=
Subject key identifier: 39:56:C0:D9:4D:BD:0D:08:00:E0:EA:4B:42:13:8B:B6:4B:B2:CE:F0
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 5119E2168C91A37BED0CBBAD32790902409E51E2
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363334613a3a2f34382d3438203d3e203136393039.roa
Signing time: Thu 22 May 2025 15:12:02 +0000
ROA not before: Thu 22 May 2025 15:07:02 +0000
ROA not after: Thu 21 May 2026 15:12:02 +0000
asID: 16909
IP address blocks: 2a14:7584:634a::/48 maxlen: 48
Validation: Failed, certificate revoked on Fri 23 May 2025 17:54:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
51:19:e2:16:8c:91:a3:7b:ed:0c:bb:ad:32:79:09:02:40:9e:51:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: May 22 15:07:02 2025 GMT
Not After : May 21 15:12:02 2026 GMT
Subject: CN=3956C0D94DBD0D0800E0EA4B42138BB64BB2CEF0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:94:0f:e6:e3:e7:1f:c2:47:3f:df:76:95:bc:
72:31:05:ed:b9:0f:bf:6e:fb:98:46:22:a9:93:89:
4f:5c:c8:10:97:38:50:f0:12:91:d1:96:e3:e7:60:
08:34:87:47:2b:f4:ff:7d:6e:26:2c:ba:d9:dd:ae:
4b:27:7d:b2:b0:9d:dd:33:81:b8:f9:85:b6:0e:d1:
12:95:ac:b1:6d:ba:78:43:f5:49:e0:a9:82:e7:c8:
ac:a0:c3:36:f3:85:95:11:17:f0:ad:ce:e2:68:99:
bc:97:54:1e:b3:5d:39:78:0e:fd:a9:20:10:b8:01:
33:a8:69:42:eb:d1:a7:63:18:0f:24:e5:73:f5:79:
8b:60:d7:48:76:95:b5:5f:9e:33:5c:1a:4a:11:51:
4c:28:cf:b0:45:b4:a9:b4:f2:86:18:a7:81:2b:07:
69:f4:86:d0:55:65:59:95:d7:84:13:21:b1:c3:d5:
ee:f0:52:35:a0:e7:f0:88:7c:9a:a9:4a:68:46:5a:
ac:14:fb:a2:bd:ae:51:ab:fc:53:39:65:d7:f9:06:
b4:9d:d1:f2:f3:72:05:92:e1:f4:4a:c9:ac:ce:7a:
e9:10:ee:78:f0:8a:1a:ad:3e:d1:7c:f3:62:5f:26:
5c:df:f9:f8:54:47:62:63:91:38:93:24:b1:66:c2:
f7:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:56:C0:D9:4D:BD:0D:08:00:E0:EA:4B:42:13:8B:B6:4B:B2:CE:F0
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363334613a3a2f34382d3438203d3e203136393039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:634a::/48
Signature Algorithm: sha256WithRSAEncryption
54:20:e8:a8:9f:2d:44:04:69:53:72:a0:80:ca:e3:16:fc:2b:
58:a0:5a:4a:f7:31:53:eb:db:34:e7:9d:66:0b:43:0a:01:78:
e4:1a:97:17:fe:0b:d3:45:74:d0:e7:51:ef:7d:2a:d6:62:0b:
7e:17:01:69:d4:9b:39:e2:c0:75:bc:99:4f:4f:fe:04:ca:db:
f2:39:83:17:f2:3e:33:92:08:77:7c:a1:98:de:92:8a:c8:ab:
97:5a:b9:05:73:f0:c8:cc:c8:7e:58:59:43:5a:3b:d7:0b:d4:
bd:e4:6f:dd:dc:6c:19:f1:fa:fb:41:2e:c4:e9:9e:a3:1f:ac:
93:1c:50:10:80:10:0f:68:e3:b5:58:23:89:f3:47:ba:16:06:
8d:2b:86:b9:a9:a2:96:81:b8:38:e6:aa:43:07:f5:71:61:02:
67:bb:9a:8c:7e:76:f3:a8:56:24:ec:72:58:11:01:0b:c7:83:
dd:a8:d0:18:4a:7e:8f:51:3c:88:77:b2:5a:60:1b:71:d7:25:
1f:45:fb:cc:c9:c5:0b:39:bb:d5:eb:2f:0e:70:2f:c6:b4:2a:
3f:79:77:1f:07:e1:cf:c9:a9:bb:b8:3b:3d:0b:cf:fd:43:1e:
4a:ee:9a:44:f1:0f:0c:42:32:e6:e1:26:1f:6c:09:ec:41:3f:
2b:86:4d:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 23 23:54:12 2025 by rpki-client