Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363237393a3a2f34382d3438203d3e203136393039.roa
File: 326131343a373538343a363237393a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier: m+rXvwGtDLovaXOWfn7/XYy+Fd8TZFEKE1uOin4wRgk=
Subject key identifier: 30:FD:F5:E5:08:FD:E8:DB:B6:01:15:10:53:8E:B3:0C:06:01:08:0F
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 1C41AB9377FD04DBBCE09AC87DF1E1DFCFA41E7B
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363237393a3a2f34382d3438203d3e203136393039.roa
Signing time: Wed 14 May 2025 05:36:02 +0000
ROA not before: Wed 14 May 2025 05:31:02 +0000
ROA not after: Wed 13 May 2026 05:36:02 +0000
asID: 16909
IP address blocks: 2a14:7584:6279::/48 maxlen: 48
Validation: Failed, certificate revoked on Fri 16 May 2025 10:36:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1c:41:ab:93:77:fd:04:db:bc:e0:9a:c8:7d:f1:e1:df:cf:a4:1e:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: May 14 05:31:02 2025 GMT
Not After : May 13 05:36:02 2026 GMT
Subject: CN=30FDF5E508FDE8DBB6011510538EB30C0601080F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:9b:39:ee:1c:c2:cc:fa:7b:e0:c0:59:71:b5:
bc:d3:03:ac:0d:8d:52:51:5d:83:d5:37:30:79:8f:
a0:b1:56:0f:ae:4a:f3:49:cf:72:5e:1f:57:2a:55:
8c:82:f6:15:51:72:13:7e:36:fe:34:bc:c1:d0:f9:
85:53:85:7e:79:29:6a:59:8d:c0:3b:5e:02:4c:b4:
f9:8c:27:9e:71:9a:45:4f:fd:18:24:12:ef:20:ec:
33:42:66:82:17:fc:13:5f:74:7d:a3:42:70:72:65:
85:1b:0c:e9:33:90:01:2b:96:f8:fb:27:75:13:4d:
fb:66:99:39:8e:59:5d:10:e1:3c:d3:9c:b4:8a:f6:
de:53:f0:fb:c7:76:9d:11:45:79:0d:01:f2:f6:bc:
42:2e:eb:14:ff:4e:70:96:80:15:6b:d3:c0:92:6d:
dc:e3:e6:fd:c3:21:80:16:e5:b1:35:c4:7e:18:02:
2b:a7:eb:e8:4a:f6:3a:13:91:92:fc:8a:b6:2c:16:
40:e1:81:35:d6:03:04:6a:09:a2:20:2a:3d:f1:e9:
f2:8f:9a:05:40:cf:24:97:59:06:d8:56:6c:cc:22:
24:00:28:ef:db:9b:8f:c0:8d:88:13:7d:71:f9:a3:
67:07:90:83:fc:4e:98:8a:68:a0:7b:ce:e7:ff:e1:
03:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:FD:F5:E5:08:FD:E8:DB:B6:01:15:10:53:8E:B3:0C:06:01:08:0F
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363237393a3a2f34382d3438203d3e203136393039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:6279::/48
Signature Algorithm: sha256WithRSAEncryption
81:c2:8d:f2:66:d5:a5:b5:4f:8d:ca:be:3d:8d:1b:42:49:89:
d4:b9:a8:5f:6a:04:1f:61:27:3a:de:f8:dc:b1:7a:14:c2:0e:
d1:1a:8b:f1:79:cb:b6:d2:c3:40:78:c8:35:30:da:ee:f2:a0:
62:34:1f:f3:53:9b:fc:87:2e:8a:2a:c8:78:85:c2:86:ea:cf:
07:72:32:78:f6:4a:77:19:b9:21:d3:d3:e9:2a:31:d7:54:8e:
88:c3:4e:70:cb:2c:00:56:bd:5b:c1:3e:e5:0f:d7:6d:27:d6:
0b:45:6d:18:24:f3:fe:c3:8d:3d:97:00:cc:70:19:fa:d4:a2:
4a:a5:a8:d9:50:03:fe:74:fe:f5:2c:89:72:ea:77:59:81:8b:
6e:2b:15:2a:49:1d:85:38:d1:0c:8c:5e:66:63:76:1e:4f:fe:
35:47:da:59:00:5e:e1:4b:56:de:f3:67:3c:76:cb:77:26:02:
58:f1:cd:5a:25:51:8c:11:fc:9c:86:5b:86:47:43:3f:5e:a9:
71:a7:13:de:0a:79:64:f0:c0:b7:c7:80:91:8c:c7:d9:ad:44:
a3:95:11:c7:99:bb:5a:57:1a:9d:29:f8:d6:76:51:22:d8:c4:
4e:73:2c:12:b3:19:65:13:d7:95:2b:fb:92:f7:ff:0d:27:05:
43:2f:61:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 09:38:20 2025 by rpki-client