Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363236353a3a2f34382d3438203d3e203136393039.roa
File: 326131343a373538343a363236353a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier: tVMmg4/boGbVMRWT2i3Zgsjx7JHg1tGg3nj9yKQor1I=
Subject key identifier: 21:1E:4F:7C:37:78:BF:22:B8:67:4B:68:6E:91:97:88:22:DF:81:18
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 5FA8C26BDE9FF38672A04C0D03AE5287FED8BF48
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363236353a3a2f34382d3438203d3e203136393039.roa
Signing time: Mon 12 May 2025 16:18:03 +0000
ROA not before: Mon 12 May 2025 16:13:03 +0000
ROA not after: Mon 11 May 2026 16:18:03 +0000
asID: 16909
IP address blocks: 2a14:7584:6265::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 14 May 2025 05:30:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5f:a8:c2:6b:de:9f:f3:86:72:a0:4c:0d:03:ae:52:87:fe:d8:bf:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: May 12 16:13:03 2025 GMT
Not After : May 11 16:18:03 2026 GMT
Subject: CN=211E4F7C3778BF22B8674B686E91978822DF8118
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:ce:fd:17:8a:81:73:d6:d4:87:2e:c2:97:b8:
0b:c0:0e:dc:08:da:ba:44:59:cb:75:47:32:2c:aa:
8c:6f:82:fa:21:84:f0:52:dd:7c:48:19:a4:b8:3f:
f5:cb:9b:d7:1a:20:da:18:ba:ec:ad:ac:1f:2b:b2:
e7:b3:1d:cd:fb:19:72:aa:dd:f6:a7:2c:62:7a:7c:
01:1c:60:29:74:fa:83:96:2a:01:60:43:7b:c4:5c:
0d:20:2b:a8:00:83:83:3f:81:00:09:5c:08:f4:fb:
77:08:be:70:a4:bb:ac:cc:cf:3c:f9:4f:72:64:da:
3f:41:21:7a:8d:d1:2a:b1:34:cf:f3:e5:98:01:5e:
f2:48:30:4c:0d:e5:d8:ca:bf:07:86:76:c3:78:c4:
55:8c:3f:bc:74:04:d5:89:1e:35:85:c4:7d:12:30:
6b:cd:4c:cc:67:c6:97:bf:2c:1c:25:84:c8:cb:3c:
da:05:54:bf:07:ee:4d:2d:20:c8:31:80:f2:b1:b8:
9e:3e:12:69:a7:9d:06:a8:94:07:75:11:15:9f:37:
fb:0a:81:15:33:8d:76:66:48:14:47:76:7a:83:45:
4a:aa:23:d1:f0:65:b8:d4:a9:dd:53:4a:9f:96:5a:
4b:df:60:fc:ed:43:4d:19:ba:ce:6b:09:35:d4:6b:
ac:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:1E:4F:7C:37:78:BF:22:B8:67:4B:68:6E:91:97:88:22:DF:81:18
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363236353a3a2f34382d3438203d3e203136393039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:6265::/48
Signature Algorithm: sha256WithRSAEncryption
80:3b:c4:d6:f6:a1:fc:9f:f3:b1:21:9f:a8:06:de:e5:13:c0:
f2:e9:0c:26:34:a8:ea:f6:59:88:f7:b4:ac:22:f3:2f:ab:f4:
81:f9:06:16:e8:5a:47:6f:9e:85:15:b9:f6:6f:3c:09:7a:fb:
f9:4e:6b:64:5b:b7:c5:23:af:a9:29:5d:64:8f:2b:3b:f2:6d:
d7:b0:3b:57:8e:f8:3a:3d:73:9f:43:bf:dc:1d:ee:a7:1a:f4:
4a:79:18:30:62:32:ee:24:9d:4a:e6:69:94:cb:67:e5:c9:be:
c6:8b:cf:dd:94:bd:f4:26:e5:02:e6:b8:58:5d:d4:b6:eb:17:
99:50:17:99:43:5e:a6:8e:cd:a1:d6:69:50:1c:a8:4a:25:2e:
59:3c:e7:d3:88:16:c8:82:a7:33:11:9d:74:95:52:af:b5:1f:
8e:7b:50:2f:04:cc:d7:87:e4:ca:e0:03:88:3a:1b:f2:8a:9e:
80:1c:65:10:22:b4:2f:f8:76:69:52:0d:43:ff:bb:81:52:57:
34:f3:46:e1:f2:d1:07:71:2e:20:7a:6e:5a:cd:a3:50:a2:2e:
9d:85:af:87:22:2a:08:e7:01:0e:1a:ee:29:62:aa:89:d3:55:
34:1d:47:3c:80:fe:56:42:d0:9e:74:e0:ab:14:0a:41:e1:d6:
af:8c:fb:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 09:39:22 2025 by rpki-client