Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363237333a3a2f34382d3438203d3e203136393039.roa
File: 326131343a373538343a363237333a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier: XAeu6QxgK/TNL5taDHKA99FWZ9c3D69+udnMogmnA0s=
Subject key identifier: 59:6D:5C:37:3E:49:5C:49:59:76:CD:80:44:23:00:73:43:0C:47:04
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 02FAFB284E5FF87CA6009AA98720342300E12E6D
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363237333a3a2f34382d3438203d3e203136393039.roa
Signing time: Tue 13 May 2025 21:36:02 +0000
ROA not before: Tue 13 May 2025 21:31:02 +0000
ROA not after: Tue 12 May 2026 21:36:02 +0000
asID: 16909
IP address blocks: 2a14:7584:6273::/48 maxlen: 48
Validation: Failed, certificate revoked on Fri 16 May 2025 00:18:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
02:fa:fb:28:4e:5f:f8:7c:a6:00:9a:a9:87:20:34:23:00:e1:2e:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: May 13 21:31:02 2025 GMT
Not After : May 12 21:36:02 2026 GMT
Subject: CN=596D5C373E495C495976CD8044230073430C4704
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:ae:e2:57:4d:93:57:fc:d1:79:e8:77:74:e6:
c2:8e:da:fd:79:4d:86:cf:46:9a:3e:79:03:f1:61:
02:f7:22:b8:a7:a2:04:22:85:e5:99:92:d9:ee:7a:
75:ec:a0:43:b3:b0:7c:ed:b5:cf:02:59:c5:0b:6d:
fe:61:95:4f:80:01:df:f6:17:2d:6e:bb:f1:5a:a5:
25:73:c5:56:53:ca:0b:bc:b2:d7:57:74:96:36:94:
b9:d4:4c:65:12:18:86:16:3c:d7:a3:d2:38:1a:2c:
f8:cb:80:ed:c2:15:e6:7d:4c:2d:26:64:23:ca:87:
0e:4e:ff:fa:a1:12:b2:fa:2a:48:06:60:7c:55:10:
00:8d:6b:17:0f:98:45:a3:4a:35:40:ff:3c:fd:9c:
e1:d6:c1:cc:c4:89:99:ec:ff:e0:9f:b1:50:b8:16:
45:fa:9c:ee:6c:98:2b:da:22:c7:61:a5:50:e6:39:
25:42:96:15:d1:25:23:8b:5c:5f:17:e9:08:d4:ea:
9e:a9:1e:dd:53:59:d2:9d:63:e5:8b:38:e4:6a:3f:
8a:f1:03:10:73:ce:2c:e1:09:40:d9:a2:ab:79:1f:
75:45:24:53:50:2b:7f:c0:a7:4c:9b:14:49:a3:6b:
57:10:59:47:71:9c:9d:c7:c3:9c:77:da:8a:79:82:
a7:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:6D:5C:37:3E:49:5C:49:59:76:CD:80:44:23:00:73:43:0C:47:04
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363237333a3a2f34382d3438203d3e203136393039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:6273::/48
Signature Algorithm: sha256WithRSAEncryption
96:7b:70:d5:b7:6d:06:53:da:a8:b1:fb:bb:0a:0c:58:4c:0c:
53:14:aa:ba:08:c7:f0:23:c5:98:66:71:d2:17:de:69:a7:81:
e9:f3:22:71:2a:8b:bb:a1:36:14:d0:62:7e:28:dd:cc:ff:dc:
1f:fc:da:08:0b:2e:cc:f7:49:77:02:ec:5c:37:04:f9:e1:af:
07:d5:11:04:6d:ae:e4:32:ef:08:72:c1:28:14:b2:89:80:21:
1a:67:f1:aa:b4:6e:39:b5:b5:cf:98:1d:88:7d:21:b0:be:f6:
37:00:a9:a3:16:95:81:d3:7c:34:cf:50:71:53:5a:ea:32:3e:
70:d6:fa:82:3c:c7:75:4a:6c:43:74:a1:0c:dd:22:48:30:8a:
a2:79:ce:af:d8:ed:4f:d2:9a:af:7a:72:04:06:3d:f1:45:9d:
f2:f7:49:b7:14:98:c8:80:9d:65:c0:8d:57:eb:cd:4b:a8:1a:
7d:5d:82:d4:80:64:ff:1d:04:a0:2a:61:8c:3f:50:b5:be:90:
78:13:1b:26:69:b7:37:5b:ea:dc:2f:a5:a4:27:0e:7c:0d:f7:
2d:aa:06:97:57:08:47:e9:88:d2:7a:a5:d3:ba:8e:95:ba:2c:
a1:42:5a:d1:66:16:9d:91:e8:1f:3d:05:2d:df:1d:67:7b:65:
4a:e6:33:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 06:39:27 2025 by rpki-client