Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363235663a3a2f34382d3438203d3e203136393039.roa
File: 326131343a373538343a363235663a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier: PdwjS9Z76XXf0pBIlxx49fIHM4JrhNtWfoWJeYeSEDs=
Subject key identifier: D5:68:F5:E9:D9:E2:5A:9B:A5:B5:52:DF:94:FC:2D:14:A8:D7:1D:E3
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 5C5578B26F1FE81F25A2D43778CD45BFBBC1675A
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363235663a3a2f34382d3438203d3e203136393039.roa
Signing time: Mon 12 May 2025 16:18:09 +0000
ROA not before: Mon 12 May 2025 16:13:09 +0000
ROA not after: Mon 11 May 2026 16:18:09 +0000
asID: 16909
IP address blocks: 2a14:7584:625f::/48 maxlen: 48
Validation: Failed, certificate revoked on Thu 15 May 2025 00:30:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5c:55:78:b2:6f:1f:e8:1f:25:a2:d4:37:78:cd:45:bf:bb:c1:67:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: May 12 16:13:09 2025 GMT
Not After : May 11 16:18:09 2026 GMT
Subject: CN=D568F5E9D9E25A9BA5B552DF94FC2D14A8D71DE3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:8d:b3:1c:67:a4:59:2f:da:a4:07:69:55:7e:
16:7d:30:9c:d1:23:58:23:24:85:f5:40:df:b4:c9:
55:57:4e:39:a1:6c:b6:9e:c0:b4:fc:20:96:98:70:
1a:f0:c2:a4:a1:b7:04:5a:43:df:2d:05:1b:f6:9d:
35:7c:28:f9:29:03:77:01:37:09:85:a2:8e:df:bd:
8e:de:1f:6b:0c:db:4f:33:0c:48:3e:7a:34:a6:8a:
c7:ee:eb:9a:94:05:2f:64:8e:61:dc:e6:a9:2b:7a:
1c:fe:68:d3:a5:38:ae:6f:73:aa:da:d2:34:76:1f:
b4:78:33:a5:a7:92:30:a8:49:14:0b:a7:ef:cd:a2:
cf:fc:b6:cf:bf:19:f8:ba:44:83:ef:e0:c7:44:1b:
8d:35:f2:9a:69:c7:4d:b1:fe:b6:01:c2:26:4a:b5:
1f:22:b5:f5:27:c9:6f:b4:52:3d:8b:e3:23:e0:5d:
5f:15:78:25:d2:4e:1e:ee:77:ef:f9:a6:d6:25:72:
75:b9:fa:1c:63:b4:40:36:b1:1d:7b:90:a6:e6:37:
2a:5f:b5:eb:20:9a:ea:90:c2:6f:28:4b:e5:9d:79:
ae:b1:7f:ee:de:c1:44:b2:f8:99:37:94:40:c8:cf:
58:0f:96:80:59:8d:51:81:51:03:09:66:c8:77:db:
5f:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:68:F5:E9:D9:E2:5A:9B:A5:B5:52:DF:94:FC:2D:14:A8:D7:1D:E3
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363235663a3a2f34382d3438203d3e203136393039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:625f::/48
Signature Algorithm: sha256WithRSAEncryption
73:34:77:9f:c6:55:a7:d7:98:ab:8f:b8:96:62:08:00:49:56:
3a:a9:ca:9e:dd:d8:50:4c:03:10:cf:5d:de:8f:1e:86:ff:01:
af:49:7f:b3:65:bd:fc:4e:29:af:c2:75:d2:36:74:b0:40:d0:
30:de:ab:e8:8c:d7:22:76:06:d3:67:6d:d3:01:4b:ea:c0:e8:
eb:6d:66:4f:14:3b:f9:6a:97:fa:76:51:e7:3b:16:d4:55:60:
c3:cc:00:b7:e3:1b:10:25:ac:e3:35:b1:6c:b3:33:9c:5c:56:
4a:3a:65:34:8f:5f:2b:ca:cd:d8:cb:92:83:c3:9d:43:25:73:
74:f7:4d:49:c5:0b:54:e9:28:ae:79:97:ed:dd:a4:14:2a:04:
c5:3a:76:ba:98:67:67:f8:5c:78:95:bd:e8:91:f7:20:40:18:
d8:ac:c0:1e:6c:14:ee:7e:08:b9:7f:6e:84:61:33:a2:3f:43:
79:e6:ad:12:6d:c4:e7:79:65:6d:1f:3d:9d:ef:2a:50:2c:dc:
4a:d8:3a:2f:fa:73:e6:0c:e7:32:e3:e9:b8:b3:a3:74:65:a6:
5d:ef:8f:67:37:0b:82:23:a2:1b:5a:23:01:11:e8:f2:9b:16:
89:a1:62:c4:e0:75:9b:07:de:bc:03:50:ee:60:93:9d:e2:b2:
6f:00:6c:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 06:36:49 2025 by rpki-client