Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363235613a3a2f34382d3438203d3e203136393039.roa
File: 326131343a373538343a363235613a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier: f2JhKZ7CVZyVG3RMjDGsHotKbzsbYl2EbiGfeCuUESk=
Subject key identifier: 7E:5F:12:3F:89:E8:2E:0A:9D:E3:65:3F:C9:95:2E:77:5C:5C:8C:EF
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 7CB7F3D60832FC9E3E9A2C49F1C4646344DC6805
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363235613a3a2f34382d3438203d3e203136393039.roa
Signing time: Mon 12 May 2025 16:18:08 +0000
ROA not before: Mon 12 May 2025 16:13:08 +0000
ROA not after: Mon 11 May 2026 16:18:08 +0000
asID: 16909
IP address blocks: 2a14:7584:625a::/48 maxlen: 48
Validation: Failed, certificate revoked on Thu 15 May 2025 00:36:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7c:b7:f3:d6:08:32:fc:9e:3e:9a:2c:49:f1:c4:64:63:44:dc:68:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: May 12 16:13:08 2025 GMT
Not After : May 11 16:18:08 2026 GMT
Subject: CN=7E5F123F89E82E0A9DE3653FC9952E775C5C8CEF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:d5:7b:73:41:18:b1:6a:10:79:bf:c3:89:c4:
f9:fe:07:1f:68:10:ff:09:24:e5:a4:42:a2:8c:df:
7c:4d:da:1e:e8:b5:61:65:ef:00:c5:11:16:38:d1:
41:be:3d:aa:56:c9:6f:ad:08:37:1c:45:3b:46:5f:
97:37:78:44:ea:95:ea:73:52:66:81:4b:44:6a:ca:
14:1b:f6:a0:b9:b4:41:0d:3c:38:18:d3:82:5a:39:
bf:c1:6d:aa:65:42:d4:03:a5:f3:ed:48:19:28:ea:
aa:b7:e1:76:08:6a:85:d7:ab:e3:4e:3b:1f:18:7c:
3f:e9:a4:2f:e2:5a:64:a5:ba:b4:70:96:eb:a7:ed:
77:6a:e0:cb:2c:fb:31:03:c8:b2:fd:df:7b:e0:4b:
54:87:75:62:dd:a7:d1:33:9d:24:ca:c0:ae:80:d5:
cd:40:ed:aa:ab:91:52:c8:ee:fc:13:7a:fb:e9:06:
80:34:57:fa:de:f9:96:17:5f:41:f7:9c:cc:5f:6b:
f4:48:d6:4f:b8:ec:6f:35:81:53:73:d7:f4:10:e6:
05:b1:7d:a9:26:31:cf:ed:4e:9e:e3:0c:2d:1a:f1:
9b:ed:f3:30:db:d1:e1:bb:48:0e:5c:0e:cb:0c:68:
92:b1:55:c4:3f:36:7f:94:37:9f:2a:3b:74:c1:04:
67:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:5F:12:3F:89:E8:2E:0A:9D:E3:65:3F:C9:95:2E:77:5C:5C:8C:EF
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363235613a3a2f34382d3438203d3e203136393039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:625a::/48
Signature Algorithm: sha256WithRSAEncryption
60:04:2e:60:62:6d:6f:f3:ad:51:73:dd:ec:85:54:ef:43:2b:
1e:47:f1:cd:1c:67:d2:29:dd:01:b9:fc:2b:b2:27:16:e5:ee:
27:e0:7a:ea:59:ae:b7:e2:b5:73:1d:23:3d:6c:73:f6:42:65:
1e:fa:42:e2:17:6b:c6:2f:d9:76:1a:9b:a4:a4:bf:46:5a:7a:
27:e8:4e:4e:99:ac:88:67:90:62:8e:18:ec:0c:b9:b8:80:38:
a8:92:83:48:75:8c:19:68:54:f5:58:29:ac:ec:f7:19:12:e2:
12:3a:4b:62:c1:b0:44:13:13:25:b9:c8:47:cc:f6:c8:52:8c:
3b:f8:c5:9f:40:41:97:9f:e7:c8:b6:89:6c:37:59:22:2b:fb:
78:4b:7b:08:99:1f:de:8c:b5:26:25:3e:61:b2:e4:54:db:00:
46:2a:e0:69:92:6b:da:c8:77:5a:7c:42:39:98:64:a2:72:46:
5e:64:5d:6b:fc:5e:d8:66:68:ba:29:88:2c:21:62:4c:27:fe:
28:f4:a0:a0:8a:90:b8:d5:fe:e4:50:98:33:7a:67:33:ac:59:
e3:32:65:ee:ee:63:64:c3:57:36:62:1d:d4:8c:19:c8:ac:4d:
57:47:b2:38:b6:e6:60:d1:8b:60:cf:12:a9:43:18:3b:73:41:
a9:b2:23:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 07:15:29 2025 by rpki-client