Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363237653a3a2f34382d3438203d3e203136393039.roa
File: 326131343a373538343a363237653a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier: 8VdtTx2ifl/GM2qEiE16AVHsE/+kXNlsML3YteQH+wc=
Subject key identifier: 84:F8:51:3F:AB:B3:DD:57:6E:C5:3C:55:4F:EC:8F:AE:1C:E3:59:A4
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 2239E552F9838192E27501F99DDB0B7B7ABFE9E7
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363237653a3a2f34382d3438203d3e203136393039.roa
Signing time: Wed 14 May 2025 11:30:02 +0000
ROA not before: Wed 14 May 2025 11:25:02 +0000
ROA not after: Wed 13 May 2026 11:30:02 +0000
asID: 16909
IP address blocks: 2a14:7584:627e::/48 maxlen: 48
Validation: Failed, certificate revoked on Sat 17 May 2025 00:24:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
22:39:e5:52:f9:83:81:92:e2:75:01:f9:9d:db:0b:7b:7a:bf:e9:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: May 14 11:25:02 2025 GMT
Not After : May 13 11:30:02 2026 GMT
Subject: CN=84F8513FABB3DD576EC53C554FEC8FAE1CE359A4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:72:3c:02:91:aa:e4:2b:25:73:88:6c:f5:62:
91:58:62:7f:a6:22:46:71:02:55:29:88:8f:77:dc:
89:ea:63:a2:9c:c8:22:f4:ae:1b:eb:58:21:9a:3d:
1a:d1:f6:04:02:50:48:41:ef:74:93:d5:78:e6:27:
ba:54:bd:3e:9a:3d:24:7b:fc:a5:34:91:79:37:91:
fd:a9:87:a2:a9:e7:9b:e4:aa:a9:d7:59:04:ee:af:
cc:a2:38:89:e7:96:04:88:a4:fc:d3:59:41:51:43:
5a:27:fe:11:d9:4b:81:b3:41:9c:a9:68:fe:e6:16:
cb:7a:e1:e0:a8:9c:7d:87:d5:94:0d:8b:10:56:62:
8d:21:a4:cc:ed:43:4d:6d:d3:e1:cf:a5:6b:eb:e7:
60:0b:2b:b3:2f:80:c5:95:82:6a:21:4b:16:ee:63:
39:0f:c8:59:e5:48:31:57:59:6d:de:6a:58:e0:6a:
e9:df:93:00:f7:06:6f:d8:e4:7a:e0:82:7e:c2:8b:
70:a6:37:8b:f1:ab:85:de:be:12:2e:0f:2c:8b:23:
fc:a4:e1:8c:d5:42:1d:82:c0:94:99:2d:bc:f2:43:
df:c6:7e:d5:e0:78:c4:30:e6:4d:db:31:f5:89:45:
cf:28:13:84:cd:63:30:7f:58:5b:28:69:f4:85:48:
bd:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:F8:51:3F:AB:B3:DD:57:6E:C5:3C:55:4F:EC:8F:AE:1C:E3:59:A4
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363237653a3a2f34382d3438203d3e203136393039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:627e::/48
Signature Algorithm: sha256WithRSAEncryption
82:39:82:92:58:f7:1b:2f:72:e8:f6:91:9f:aa:b9:a1:c7:aa:
10:1f:72:56:1c:e3:de:fe:be:c3:7b:06:78:be:51:90:fa:da:
e3:b0:e3:14:20:fa:18:fa:d7:f8:99:ec:3c:fd:86:5d:59:5f:
e4:01:73:9e:ad:66:8c:9b:e1:1e:04:c2:c8:ad:aa:04:e6:35:
9a:0d:cc:fb:42:49:9d:a7:e7:14:64:35:f7:68:e6:96:c1:3e:
fb:32:0c:62:b8:02:63:c1:84:42:31:c6:ee:03:2a:ac:ee:c8:
53:fe:56:c9:91:bd:58:32:88:c4:7b:5b:e1:95:2d:01:3a:0e:
69:37:aa:1e:a3:db:50:e0:e6:67:f4:b9:8e:c0:8e:4a:8c:af:
07:b1:b7:20:a9:9b:a3:74:e7:a9:ef:4f:c4:d9:c9:95:c7:cc:
64:ab:4a:83:87:e4:79:72:58:96:66:47:33:54:f2:45:f7:0c:
c3:0b:5c:fa:ac:50:dc:f7:f5:92:09:52:ad:ba:2d:80:88:ae:
b6:ed:94:2b:82:15:57:30:02:45:0d:64:35:d3:b9:17:9b:f7:
4d:f6:24:cd:c0:b3:57:94:97:df:7f:8e:49:e0:64:2a:da:68:
dd:65:c5:38:78:32:69:b8:ea:59:d2:e5:60:be:90:4a:67:2b:
b4:51:62:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 06:06:06 2025 by rpki-client