Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363039643a3a2f34382d3438203d3e203136393039.roa
File: 326131343a373538343a363039643a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier: r4axHgVn86T20+J/rm0mRmN9wO+VtiedcbZ9awfD+f8=
Subject key identifier: AE:55:CC:26:8F:26:BC:E3:56:6A:74:CD:75:F1:01:6D:54:5D:D5:16
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 32B1FB7C14D220A869298B67493079200B00F1FD
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363039643a3a2f34382d3438203d3e203136393039.roa
Signing time: Sun 16 Mar 2025 15:49:28 +0000
ROA not before: Sun 16 Mar 2025 15:44:28 +0000
ROA not after: Sun 15 Mar 2026 15:49:28 +0000
asID: 16909
IP address blocks: 2a14:7584:609d::/48 maxlen: 48
Validation: Failed, certificate revoked on Sun 16 Mar 2025 16:16:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
32:b1:fb:7c:14:d2:20:a8:69:29:8b:67:49:30:79:20:0b:00:f1:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: Mar 16 15:44:28 2025 GMT
Not After : Mar 15 15:49:28 2026 GMT
Subject: CN=AE55CC268F26BCE3566A74CD75F1016D545DD516
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:4e:58:3d:e7:3c:dd:bd:20:ee:a1:43:16:1f:
f3:1b:a4:28:3a:56:6c:46:17:d5:ca:b9:30:54:c9:
72:a0:7d:11:af:70:1a:9b:0c:7a:14:1a:e2:93:f8:
1d:77:7f:f7:fe:f2:86:5d:10:13:e5:32:47:26:22:
47:7c:48:9e:30:ca:6f:57:31:1a:8b:e1:34:15:d0:
7f:2f:8c:2f:f6:b7:1e:ab:42:2e:42:b8:5a:ac:fe:
57:9e:ed:b6:86:9b:7d:4b:6d:38:e6:8e:ba:26:df:
ba:c2:5b:21:88:24:ba:8c:cd:2b:c7:da:cf:d1:3e:
8d:aa:10:3c:17:a8:b3:7f:89:d3:17:c4:6d:46:61:
d2:6f:a7:de:5e:92:40:a4:ad:d9:f1:dc:12:46:73:
32:e0:8b:05:de:3d:d3:99:76:d4:88:7b:3a:a4:b1:
30:8a:68:54:c6:7c:e8:70:07:ef:1d:af:f9:7e:52:
6e:e7:6a:b1:87:b5:e3:25:3a:96:e8:3b:c4:c4:9c:
7c:57:59:1c:ab:d7:a7:c1:a5:2b:87:05:7e:12:bd:
a8:9d:b8:99:5f:27:47:0d:3e:e3:60:37:23:a7:84:
80:90:93:6e:9a:e5:eb:2c:8b:09:5a:b5:67:bc:1e:
ad:7e:06:0e:66:4e:38:0f:58:c4:d4:d6:bd:5b:13:
d0:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:55:CC:26:8F:26:BC:E3:56:6A:74:CD:75:F1:01:6D:54:5D:D5:16
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363039643a3a2f34382d3438203d3e203136393039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:609d::/48
Signature Algorithm: sha256WithRSAEncryption
73:d8:e1:72:2e:03:d2:c5:22:fd:44:f0:2a:06:7b:78:ae:d6:
78:dd:c6:2e:b1:ef:d5:0a:c1:fe:cc:88:b8:4b:f8:5e:ef:1a:
84:74:b5:32:ad:03:50:d9:08:0a:3d:81:aa:78:6d:0a:87:b0:
7b:47:8c:cd:ad:65:f0:b5:2e:ad:1f:a8:6f:8b:e9:a1:7b:28:
1e:00:c9:f6:7d:d1:07:9e:09:01:a7:93:9a:ca:25:3a:5d:80:
a9:4b:ad:46:76:b2:1f:36:53:7e:b5:b7:5c:c0:c6:fa:16:06:
19:14:85:84:12:02:0f:f0:71:10:fe:48:72:53:e5:59:b3:de:
51:ee:aa:d9:37:15:44:70:15:7a:be:57:7a:30:6a:07:58:92:
0b:c8:e7:bc:03:c8:88:07:f1:22:cb:a7:9c:60:0c:ed:ae:02:
28:76:ce:c2:b9:88:92:b1:8f:d9:eb:be:a6:11:3e:1d:ee:1d:
c2:ae:89:77:f7:d2:d5:c8:2b:7f:63:1c:5d:13:fa:52:85:c2:
41:64:aa:71:17:40:91:f7:78:94:b0:ec:94:e8:81:8d:97:30:
e2:63:02:4a:44:da:d6:d7:56:94:e7:cd:7a:6a:af:e0:c7:d2:
82:20:aa:6a:37:2b:d7:31:6d:8b:70:e3:98:d8:80:36:ae:16:
d9:50:21:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 23:30:10 2025 by rpki-client