Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363236653a3a2f34382d3438203d3e203136393039.roa
File: 326131343a373538343a363236653a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier: aNHV1BOI7qrUbAgbVhrKj2CjpSGgX0TMcbWIioqk0f4=
Subject key identifier: 49:24:9F:D7:E3:B5:58:D2:B4:9B:B7:26:C1:85:90:9F:36:F6:1F:57
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 38DCA2973AB743C8BC8A8DCEC72D54143ACDA092
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363236653a3a2f34382d3438203d3e203136393039.roa
Signing time: Tue 13 May 2025 15:54:02 +0000
ROA not before: Tue 13 May 2025 15:49:02 +0000
ROA not after: Tue 12 May 2026 15:54:02 +0000
asID: 16909
IP address blocks: 2a14:7584:626e::/48 maxlen: 48
Validation: Failed, certificate revoked on Thu 15 May 2025 15:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
38:dc:a2:97:3a:b7:43:c8:bc:8a:8d:ce:c7:2d:54:14:3a:cd:a0:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: May 13 15:49:02 2025 GMT
Not After : May 12 15:54:02 2026 GMT
Subject: CN=49249FD7E3B558D2B49BB726C185909F36F61F57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:d5:91:ec:d2:26:d7:77:70:ed:ad:82:29:85:
f9:bd:4d:5d:80:96:ae:20:2e:ac:0d:ba:f9:84:e5:
73:d1:57:4b:04:f3:40:18:ba:74:3b:58:23:d8:bc:
75:61:c0:a9:e0:d9:47:d0:59:58:c0:27:23:9b:d3:
fe:20:01:0d:ea:0b:29:3c:4c:a9:5d:8a:1a:89:4d:
47:52:07:6c:68:dd:c2:ef:fb:e0:d8:eb:ba:b3:63:
41:e5:e0:9a:ca:46:e5:1c:ce:98:f8:50:2d:d4:da:
22:82:10:f7:5b:7e:80:9d:e9:b7:28:f4:e9:43:47:
b2:7c:9b:b1:a4:b0:f9:8f:5e:de:ed:78:8d:3c:8a:
2d:df:bb:2d:92:f5:09:fb:87:dc:d9:6b:a9:36:63:
50:f8:b8:6a:2d:a1:52:44:de:ae:01:76:f1:ee:11:
c7:c8:c4:0a:97:41:1c:ad:4a:73:4c:14:21:48:5d:
2a:fe:2c:97:ab:d2:5a:38:34:f6:ea:f5:f4:b6:6b:
10:e7:fa:b5:f1:09:9f:0a:de:85:73:4c:fb:d6:3d:
7c:62:1f:bc:89:9b:8d:45:cb:c7:77:e6:8c:0f:2c:
a4:fb:c7:bb:07:00:39:70:f5:89:c0:31:59:34:24:
ed:d6:02:e2:48:d0:94:a6:e7:a5:70:fd:c9:5e:ff:
2f:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:24:9F:D7:E3:B5:58:D2:B4:9B:B7:26:C1:85:90:9F:36:F6:1F:57
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363236653a3a2f34382d3438203d3e203136393039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:626e::/48
Signature Algorithm: sha256WithRSAEncryption
6b:35:96:90:0d:44:c5:88:27:71:4b:c1:d9:ec:bc:92:33:90:
35:94:1b:25:b4:dd:ba:3b:ed:8c:c3:3a:08:b2:a9:3b:75:1e:
b5:e3:92:66:45:78:15:38:ea:69:f0:16:68:3f:51:17:0a:34:
1e:49:8a:69:21:78:ce:17:ae:57:0e:23:ff:5d:d4:05:60:e2:
6d:9d:1a:7c:e3:2e:ec:41:c6:cd:9e:f8:aa:01:33:b0:4f:65:
5c:fa:5a:f3:42:29:95:83:b1:4d:48:b5:24:4e:d5:b2:3d:78:
91:bd:8e:69:f3:40:e8:e9:4a:d0:7e:1d:15:1d:79:0d:f5:df:
20:cd:56:00:69:1a:e4:5f:e7:4b:69:9e:cf:60:85:c7:17:df:
1e:6c:95:30:fa:f4:dd:2e:80:b7:79:b9:3c:7e:ef:02:d1:60:
d6:bd:34:0a:34:93:63:0b:87:a6:79:88:14:bb:f7:3a:2c:68:
b2:59:73:1c:7d:cc:a7:77:2f:b7:1f:39:4e:d8:b3:9e:b6:2b:
6a:98:3a:bd:4c:25:6c:a4:67:1b:0c:32:24:70:52:1f:13:90:
d0:2e:0a:a0:56:0b:84:09:95:94:51:d3:d2:ed:21:6f:7e:75:
8b:94:b3:ff:75:aa:71:01:e5:52:4a:40:b5:7a:80:1f:cb:a3:
c2:d1:e9:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 13:00:27 2025 by rpki-client