Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363232633a3a2f34382d3438203d3e203136393039.roa
File: 326131343a373538343a363232633a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier: WMktJWkItqmXtnbF2rm5TYkucsDCVSJAvXS0acjTbI8=
Subject key identifier: 05:F9:DA:0C:AE:3D:B4:2B:6D:78:4A:5D:72:64:4B:76:B0:D4:2A:41
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 60818292EE0992CF6B2D52DE7B33C6D0EED67FCB
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363232633a3a2f34382d3438203d3e203136393039.roa
Signing time: Mon 12 May 2025 16:18:08 +0000
ROA not before: Mon 12 May 2025 16:13:08 +0000
ROA not after: Mon 11 May 2026 16:18:08 +0000
asID: 16909
IP address blocks: 2a14:7584:622c::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 14 May 2025 13:59:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
60:81:82:92:ee:09:92:cf:6b:2d:52:de:7b:33:c6:d0:ee:d6:7f:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: May 12 16:13:08 2025 GMT
Not After : May 11 16:18:08 2026 GMT
Subject: CN=05F9DA0CAE3DB42B6D784A5D72644B76B0D42A41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:e3:c6:63:01:30:99:96:61:39:02:62:93:b3:
89:90:e7:5b:0c:60:52:10:0e:f8:8e:32:a7:24:b7:
48:3e:48:32:8e:ba:9c:6a:93:cf:c6:12:b6:3a:0d:
0a:df:ac:b2:cc:93:ee:94:97:ca:cd:e6:05:17:20:
c1:f6:e1:f3:71:42:d2:70:77:95:3a:cc:32:47:53:
16:91:4f:0b:3a:1f:9e:11:1d:99:71:41:92:1d:e3:
fb:9e:da:5a:6a:69:fc:7d:c0:f7:96:01:21:24:47:
90:91:21:73:6e:0f:af:8a:65:3f:f2:ec:ae:c1:06:
37:f8:1a:86:b4:a1:93:d2:31:ad:0c:de:d7:14:4a:
ba:6e:be:1b:84:c0:65:0e:1e:df:c7:fa:96:5b:72:
2e:db:96:a6:e3:44:17:59:b1:6d:7d:9d:b4:d6:c7:
52:9a:6b:e5:fc:b9:13:e1:60:fd:d2:30:0c:ed:a8:
b5:a3:10:90:11:38:d1:8e:bd:44:2b:a1:99:57:e6:
b8:6d:e9:25:54:b6:c6:59:a5:23:9f:ec:14:56:cb:
09:8d:cd:bc:60:26:10:90:ce:1b:df:02:b0:3a:80:
de:38:ba:9e:8f:a6:13:00:31:42:70:64:58:50:fb:
09:00:e9:b5:fc:ec:74:bd:57:aa:dc:68:df:bf:4e:
45:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:F9:DA:0C:AE:3D:B4:2B:6D:78:4A:5D:72:64:4B:76:B0:D4:2A:41
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363232633a3a2f34382d3438203d3e203136393039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:622c::/48
Signature Algorithm: sha256WithRSAEncryption
13:d2:56:b1:8b:c8:a1:d3:80:ab:79:69:00:25:17:87:6c:f0:
2d:04:72:2e:68:e0:55:50:fc:81:d9:31:d0:69:64:06:92:a6:
bd:a2:e4:df:f5:3a:36:54:59:be:96:1e:7e:e5:29:60:4c:a2:
59:c2:0b:26:94:57:c5:fb:0c:f7:c9:5f:52:b8:0d:d8:40:78:
68:4f:1e:fc:e3:42:e9:f9:9f:2b:b9:19:fd:17:a0:24:ff:8f:
f4:aa:8e:a4:2e:de:68:fb:e4:8c:20:58:a1:56:1f:71:0d:51:
68:96:a1:d0:36:01:c7:e9:ca:3c:42:46:0e:3f:2c:27:00:8f:
8f:9d:9c:1e:1c:87:13:f0:29:a7:b0:87:ae:a5:fa:53:9a:0b:
05:bb:98:e2:e6:5e:d0:1f:66:06:6b:9f:df:81:9d:fc:91:6a:
51:32:66:81:a0:da:4b:33:bd:15:43:37:ce:65:d7:5d:3e:cb:
11:38:c0:18:1d:56:f0:11:79:8d:f4:a4:44:04:93:0a:ac:0c:
64:7d:1d:28:db:0d:45:58:a1:b1:2e:d0:d4:68:3f:b1:ab:98:
57:57:72:73:e0:3c:7d:2f:95:a3:16:f8:14:10:33:15:03:3a:
9f:df:eb:b5:6a:63:79:ae:e8:86:76:b2:5d:c9:75:5b:24:76:
ba:c2:f8:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 06:02:34 2025 by rpki-client