Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363537633a3a2f34382d3438203d3e203136393039.roa
File: 326131343a373538343a363537633a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier: 53T/rJtdYqsrIZOKtwjXWsLUnnuZbwFCSoIhDw5q1YU=
Subject key identifier: E7:F3:61:39:D9:08:1A:02:18:3A:B6:B8:E5:E7:86:9C:02:EC:BC:3A
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 0C9743EF1FF84F23BC408672B5762DD3C507FE78
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363537633a3a2f34382d3438203d3e203136393039.roa
Signing time: Fri 23 May 2025 20:51:02 +0000
ROA not before: Fri 23 May 2025 20:46:02 +0000
ROA not after: Fri 22 May 2026 20:51:02 +0000
asID: 16909
IP address blocks: 2a14:7584:657c::/48 maxlen: 48
Validation: Failed, certificate revoked on Sat 24 May 2025 17:06:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0c:97:43:ef:1f:f8:4f:23:bc:40:86:72:b5:76:2d:d3:c5:07:fe:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: May 23 20:46:02 2025 GMT
Not After : May 22 20:51:02 2026 GMT
Subject: CN=E7F36139D9081A02183AB6B8E5E7869C02ECBC3A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:eb:e4:9f:84:97:32:99:26:4b:87:d0:2a:3c:
5c:b0:7d:8b:b7:98:94:68:c3:32:6e:da:fb:84:5c:
04:9e:2d:2d:30:ac:97:ef:41:c5:49:de:a9:af:a9:
0d:37:3b:2b:11:a7:cc:06:ca:7d:d0:67:e6:ef:70:
1a:64:af:ce:d1:b6:7a:f8:00:da:55:65:9f:fa:ba:
b5:a4:d8:04:89:11:ea:02:ab:6c:b4:6e:8c:ac:69:
42:e0:4d:af:ff:e8:66:61:04:a6:2a:f0:bd:e4:74:
9d:73:10:01:ad:80:1a:f2:3f:6a:34:aa:c7:f6:b8:
f8:6d:71:f8:a4:7d:62:8e:79:38:66:f9:fe:a5:98:
a3:12:d1:89:6e:87:58:73:f4:2a:47:dc:7a:b9:59:
ac:7e:23:69:c0:5e:19:40:e3:4f:91:63:df:ea:9a:
18:e5:27:5a:18:85:eb:e5:ec:fc:b4:9e:ec:05:54:
87:3a:fc:8a:8c:89:18:f1:e8:67:39:54:3d:87:07:
6e:ae:01:4b:e8:eb:f4:12:ac:49:9c:aa:89:48:ed:
ee:fb:60:0a:16:34:a2:7e:47:26:5c:26:2a:51:f8:
78:bc:8e:04:d0:ca:64:f7:6e:16:0f:fc:97:9c:45:
92:d2:ec:10:68:aa:de:36:c4:95:0f:2d:0a:5a:6d:
ad:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:F3:61:39:D9:08:1A:02:18:3A:B6:B8:E5:E7:86:9C:02:EC:BC:3A
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363537633a3a2f34382d3438203d3e203136393039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:657c::/48
Signature Algorithm: sha256WithRSAEncryption
04:4b:d6:20:d6:d0:b8:22:14:a0:47:db:41:94:d4:55:56:9b:
1c:2e:d3:f0:2b:ff:fd:04:e0:2c:a1:d6:87:41:1b:a2:2d:d4:
5f:7f:e2:06:37:77:82:db:bb:63:b9:67:c2:fd:42:75:9e:fe:
da:df:16:6a:f7:cd:d2:18:ac:e6:4d:29:2d:cd:12:6b:8d:fd:
17:82:a7:fb:6c:a5:a0:32:1d:41:e3:3c:82:ad:53:19:6c:0d:
da:61:54:f2:3c:58:70:ee:0e:6d:50:17:65:28:56:bc:48:7c:
24:b2:d2:aa:b2:5c:53:cd:84:99:7c:05:59:51:1c:39:6e:e4:
e3:f4:31:9f:0c:9b:83:04:6c:76:ab:e6:7d:44:23:cf:4c:cf:
10:83:a8:bb:c1:e7:7d:c2:c0:98:5e:3f:08:6c:69:92:06:d3:
19:6a:87:22:d2:5e:a5:77:13:98:e6:96:43:ea:ba:54:ff:59:
9e:9c:b8:e2:1a:c6:03:6e:c8:ff:ad:a2:da:38:0b:d2:85:56:
ad:77:ee:9b:e8:2e:52:07:b1:ce:29:9b:aa:95:54:d8:58:34:
f1:a9:9f:29:33:db:22:2c:8d:74:8c:76:b3:38:bd:3f:68:b6:
af:be:3e:09:f9:21:d1:77:c1:2d:d8:c9:f6:90:7e:f9:54:71:
3b:29:3a:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 25 00:58:25 2025 by rpki-client