Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363237373a3a2f34382d3438203d3e203136393039.roa
File: 326131343a373538343a363237373a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier: Pj351xZCzf25Kt5LP32FL0Ch+qQlyQt1iNY9xe0F9/A=
Subject key identifier: E6:78:EB:81:34:B4:18:55:00:82:F9:CB:7E:1C:0E:17:A6:40:13:28
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 6341C9F5A931B175A8DBDB68FD7CE481323A2A87
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363237373a3a2f34382d3438203d3e203136393039.roa
Signing time: Wed 14 May 2025 05:36:02 +0000
ROA not before: Wed 14 May 2025 05:31:02 +0000
ROA not after: Wed 13 May 2026 05:36:02 +0000
asID: 16909
IP address blocks: 2a14:7584:6277::/48 maxlen: 48
Validation: Failed, certificate revoked on Sat 17 May 2025 00:18:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
63:41:c9:f5:a9:31:b1:75:a8:db:db:68:fd:7c:e4:81:32:3a:2a:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: May 14 05:31:02 2025 GMT
Not After : May 13 05:36:02 2026 GMT
Subject: CN=E678EB8134B418550082F9CB7E1C0E17A6401328
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:df:c1:a0:c9:91:38:25:2d:c3:0f:74:4a:2a:
98:e8:5e:df:0e:c7:0b:42:a4:a4:88:ae:f8:9d:52:
f5:44:25:3a:6a:25:0b:c1:3f:c0:64:e0:d2:d3:0f:
3a:85:a8:4c:d3:c3:1c:eb:bf:20:53:c6:84:ba:2c:
26:3c:21:59:f8:e7:82:7f:56:8f:3f:b2:5d:17:b8:
49:73:79:61:fe:28:bf:1b:c7:32:df:80:e1:b3:e4:
a0:aa:52:4c:c5:70:84:3b:54:28:a6:8d:fb:7b:13:
8a:fd:0e:57:e7:a8:e6:ca:e2:b7:3a:0a:67:ec:97:
ca:d4:5e:6a:36:8e:a0:7e:63:67:e1:a0:50:23:f2:
61:23:94:5c:2b:0a:fd:e1:4b:b6:3f:8d:4f:d4:14:
8e:c7:c5:db:ec:8e:b1:64:bb:9b:01:6f:c5:15:72:
64:20:27:a3:48:4f:77:49:4b:68:54:f6:e3:fa:15:
3a:74:34:7a:a1:6f:c4:5e:f2:b9:b3:91:70:3a:9d:
d4:92:53:cd:31:18:68:84:7c:3c:76:9e:c8:12:67:
3a:c1:f7:f9:6f:75:c2:99:d8:06:be:0b:aa:f6:2c:
24:0b:ea:26:c3:df:98:f9:ef:f9:40:4e:a3:51:7e:
4e:49:fe:d5:e9:4d:56:b8:7e:54:2d:90:88:96:af:
e4:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:78:EB:81:34:B4:18:55:00:82:F9:CB:7E:1C:0E:17:A6:40:13:28
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363237373a3a2f34382d3438203d3e203136393039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:6277::/48
Signature Algorithm: sha256WithRSAEncryption
81:72:fb:02:1e:06:e1:47:b3:f4:2a:2f:78:ef:80:cd:61:04:
2a:9c:57:51:dc:28:46:1a:93:2d:63:76:77:d2:e1:f7:cb:30:
4e:bc:d4:27:15:a7:42:1f:fc:36:d4:9c:8a:63:0d:b0:9c:cf:
17:41:a0:47:c2:4d:5a:6b:28:a0:da:1a:0c:22:f6:cb:92:04:
9f:c8:d4:2f:06:f0:d4:d2:d9:39:eb:24:54:62:40:59:72:33:
9e:f2:54:cd:f3:8f:e8:39:88:00:5e:f3:d5:16:db:24:62:75:
e2:73:41:de:2b:2e:b6:76:0d:dd:15:ac:6e:96:65:a8:c1:75:
d5:67:6d:05:3a:a7:8c:d7:1b:52:57:7f:18:29:f4:ba:05:c9:
0f:c9:ee:20:85:b8:a8:1e:63:c2:5c:d3:05:26:46:80:cf:e2:
bb:c1:95:9a:b9:4b:cb:4c:c9:22:04:d8:5c:7e:90:6c:5a:8e:
c8:aa:ca:58:5e:c3:ab:6a:f0:df:86:f1:22:c9:b8:6f:97:d4:
9f:31:9c:65:0b:ac:ba:2d:e7:bf:08:f1:b2:bf:65:a7:fc:68:
17:c2:e6:2f:d4:b8:60:41:3c:12:f8:2f:31:72:58:de:93:02:
d2:3c:1c:79:ed:0f:fc:0c:75:78:b7:a6:34:4d:6a:7e:ea:45:
32:6a:bd:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 05:00:46 2025 by rpki-client