Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a366464393a3a2f34382d3438203d3e203136393039.roa
File: 326131343a373538343a366464393a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier: cJ3BEGD3tqzxWExcBUsiRuDUDg2/0RIhv4dZYHYATPs=
Subject key identifier: 53:AE:AD:CA:60:8F:D7:76:76:A6:B0:A0:D5:11:BF:40:4F:05:D2:1B
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 4766EB830CFC344462B530BC797F965D186463CB
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a366464393a3a2f34382d3438203d3e203136393039.roa
Signing time: Sat 24 May 2025 16:12:02 +0000
ROA not before: Sat 24 May 2025 16:07:02 +0000
ROA not after: Sat 23 May 2026 16:12:02 +0000
asID: 16909
IP address blocks: 2a14:7584:6dd9::/48 maxlen: 48
Validation: Failed, certificate revoked on Sun 25 May 2025 13:47:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
47:66:eb:83:0c:fc:34:44:62:b5:30:bc:79:7f:96:5d:18:64:63:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: May 24 16:07:02 2025 GMT
Not After : May 23 16:12:02 2026 GMT
Subject: CN=53AEADCA608FD77676A6B0A0D511BF404F05D21B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:20:d3:d1:72:33:7f:73:f9:a2:b6:8c:a1:5d:
ac:28:58:1b:cc:67:fe:1b:b1:aa:9c:61:b0:37:f0:
ed:52:bd:96:0b:c0:95:46:47:e6:ba:8b:bb:3b:86:
0b:d1:5c:5e:e1:4c:91:52:ed:78:7a:61:2d:a5:fa:
31:07:56:10:8a:1f:02:fb:de:55:90:6c:50:40:90:
e2:61:aa:87:0f:77:e2:90:5c:f9:02:66:7f:7b:85:
df:4e:70:89:84:b0:9f:0d:ac:a1:52:0b:30:d2:69:
14:e6:29:27:48:bc:a3:5c:ac:19:ac:5c:de:f6:db:
47:a8:57:31:53:20:1a:0b:a7:1d:74:28:12:e5:f5:
66:3c:86:f8:99:d7:6b:8f:d7:d2:5e:9b:88:21:f5:
92:d7:de:c2:74:12:12:91:b4:bb:f9:1d:ba:cb:79:
a4:c6:a5:96:af:e0:a5:f5:fe:fc:a0:5d:5f:95:7a:
27:82:fa:4a:94:41:7f:c7:eb:66:41:5f:1b:e4:ca:
16:52:5b:77:27:a0:64:ec:88:de:90:a3:3e:55:fd:
a8:38:ae:4a:45:74:02:8e:48:de:94:02:90:00:1c:
82:df:73:af:62:99:d6:64:f5:9f:d2:97:f7:79:a9:
b5:b1:cb:8b:37:0f:f4:58:01:ee:ca:72:80:47:fb:
c9:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:AE:AD:CA:60:8F:D7:76:76:A6:B0:A0:D5:11:BF:40:4F:05:D2:1B
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a366464393a3a2f34382d3438203d3e203136393039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:6dd9::/48
Signature Algorithm: sha256WithRSAEncryption
18:c7:f4:53:8a:5c:a1:42:3d:82:c6:14:2f:56:b1:ae:8f:b2:
c3:f5:65:42:b0:2c:76:1f:aa:27:37:83:8d:35:f0:28:93:87:
fc:b9:8b:a1:80:17:fe:be:39:52:2d:e4:3e:bd:e3:a9:9e:64:
05:89:4a:ff:b7:e7:66:d4:45:f0:52:eb:9f:e0:3e:93:27:4a:
11:51:50:4b:de:47:fa:16:9a:73:ab:02:87:f0:04:de:2f:4e:
f1:ee:c2:1c:5f:c3:e6:ff:98:f5:9e:79:8b:af:9b:e0:54:f4:
9c:7d:78:2c:79:31:64:f9:2e:42:9e:6d:98:77:05:8a:19:99:
11:6b:e3:a2:e8:ee:d6:22:62:64:1b:a2:a2:54:6b:cf:4d:1f:
e6:cc:46:e1:c1:81:5a:20:94:41:a1:e0:78:50:22:81:0a:3d:
9e:3e:d6:d5:dd:28:a2:99:da:ea:e4:90:a9:6d:d8:72:2a:67:
a4:1c:7b:bf:7b:9c:e6:74:01:50:ca:93:fc:72:87:1b:45:cc:
30:df:8b:ed:e0:1a:b5:d4:12:3f:59:5e:bb:87:58:3c:00:bb:
0d:75:fa:74:3e:8a:42:95:19:07:3c:33:34:04:e9:2e:62:e0:
84:98:a5:c1:60:4c:65:2b:66:67:df:35:76:9e:f0:1b:31:86:
a3:96:f5:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 20:16:15 2025 by rpki-client