Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363232343a3a2f34382d3438203d3e203136393039.roa
File: 326131343a373538343a363232343a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier: 4OAumBuQYxKJ5b9DY7G7sdhN2IrQbe0bQvluQJR/j1I=
Subject key identifier: 00:D3:45:02:FD:F9:2E:4A:C3:AC:89:AB:AB:BC:DE:57:38:81:A3:F2
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 21DCCE64A5452F83E34E456AFEA49F623F6DCCDD
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363232343a3a2f34382d3438203d3e203136393039.roa
Signing time: Mon 12 May 2025 16:18:08 +0000
ROA not before: Mon 12 May 2025 16:13:08 +0000
ROA not after: Mon 11 May 2026 16:18:08 +0000
asID: 16909
IP address blocks: 2a14:7584:6224::/48 maxlen: 48
Validation: Failed, certificate revoked on Tue 13 May 2025 13:36:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
21:dc:ce:64:a5:45:2f:83:e3:4e:45:6a:fe:a4:9f:62:3f:6d:cc:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: May 12 16:13:08 2025 GMT
Not After : May 11 16:18:08 2026 GMT
Subject: CN=00D34502FDF92E4AC3AC89ABABBCDE573881A3F2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:d3:bc:7b:68:24:7e:27:44:f2:27:51:e4:80:
2d:59:d3:af:9a:19:28:92:1d:c9:38:37:f0:32:de:
9d:cb:93:66:09:d3:53:a9:63:c5:37:99:cf:ba:57:
f1:03:f3:00:97:33:a0:a8:21:81:c5:a8:b9:66:71:
05:3c:0d:08:6c:34:eb:88:24:b2:8f:cf:bc:a5:57:
36:9f:c2:22:0e:93:9e:15:3f:ad:05:cd:a9:e7:b1:
94:4c:12:4f:6a:7d:50:b9:18:1b:32:67:f7:2f:5c:
20:d6:1c:c9:57:4b:f6:f9:68:b1:d8:b3:7f:f6:42:
8d:7b:8a:d3:9d:c8:07:58:2a:c5:aa:b9:5b:f4:df:
6f:1d:a3:e8:6c:b6:5d:0a:2c:e9:2b:47:50:3a:7b:
cb:7f:23:9c:ea:ad:cc:c2:d6:13:87:0b:7c:74:31:
07:35:16:78:c8:23:93:1e:54:a0:bb:64:9e:b3:0e:
6f:18:ac:a3:ba:18:a1:ba:ec:53:e9:fd:8d:93:e1:
bd:be:69:43:9f:3c:d7:d4:4d:d5:64:cf:48:91:ae:
b1:56:1f:8f:35:e9:f7:02:16:3a:d0:1b:77:28:15:
6d:a1:e6:cc:21:44:d1:41:82:32:ea:1d:ca:76:e7:
c5:26:21:97:9d:29:8e:c2:d8:23:c4:89:32:3d:7b:
d2:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:D3:45:02:FD:F9:2E:4A:C3:AC:89:AB:AB:BC:DE:57:38:81:A3:F2
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363232343a3a2f34382d3438203d3e203136393039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:6224::/48
Signature Algorithm: sha256WithRSAEncryption
23:ea:91:6d:be:9e:77:54:b4:20:3b:69:60:eb:74:f2:76:ca:
6a:f7:fa:df:66:c2:8a:9d:df:04:10:4c:c9:66:63:d8:ba:94:
65:e7:aa:89:0b:fb:2e:99:05:85:98:1c:e0:14:b6:34:0b:4a:
2d:0a:bf:d0:a9:6f:60:3c:f5:cf:17:1a:aa:e0:26:82:a6:a0:
80:ce:7d:3b:e4:86:a7:1b:f5:a7:29:b1:6e:e9:49:95:3e:0e:
a7:d0:32:a5:fc:6d:81:f2:79:5a:67:56:c6:e3:0f:f8:8d:45:
54:22:65:04:ca:45:08:0a:7f:99:c4:14:5a:7f:06:67:81:56:
f7:87:a7:29:6f:6e:44:eb:a8:fe:d0:4e:3a:b3:72:16:7d:fb:
7b:34:c8:d0:41:9e:17:68:08:f9:15:a6:5b:eb:a9:7c:9d:8e:
30:66:b9:2d:11:13:bc:30:0d:4a:bc:1b:be:62:80:c5:8f:6f:
3c:c8:5f:bf:f6:7f:83:6c:26:f6:ab:b3:58:34:ac:2f:bf:d5:
3c:74:a3:70:9a:98:06:e3:d0:01:95:c4:33:95:58:53:ef:97:
30:4c:16:1f:0d:f2:0b:ec:01:d5:63:76:d2:a1:79:11:38:ba:
5f:40:97:4b:c3:66:d1:c7:78:14:9e:b3:0e:84:63:74:16:9b:
90:ca:75:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 06:21:18 2025 by rpki-client