Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363238323a3a2f34382d3438203d3e203136393039.roa
File: 326131343a373538343a363238323a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier: iP1rvfRhHDg8TO34A99NqKpLFx3zzc8h4/abgRvREOo=
Subject key identifier: 05:52:07:EB:34:03:F6:4A:3F:3A:EA:AF:EC:24:AC:53:FB:84:C9:7F
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 3DDB899B61AAA2A795106BFA8BEBFDF9FBFBD19B
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363238323a3a2f34382d3438203d3e203136393039.roa
Signing time: Wed 14 May 2025 16:30:02 +0000
ROA not before: Wed 14 May 2025 16:25:02 +0000
ROA not after: Wed 13 May 2026 16:30:02 +0000
asID: 16909
IP address blocks: 2a14:7584:6282::/48 maxlen: 48
Validation: Failed, certificate revoked on Fri 16 May 2025 00:18:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3d:db:89:9b:61:aa:a2:a7:95:10:6b:fa:8b:eb:fd:f9:fb:fb:d1:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: May 14 16:25:02 2025 GMT
Not After : May 13 16:30:02 2026 GMT
Subject: CN=055207EB3403F64A3F3AEAAFEC24AC53FB84C97F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:68:10:80:a7:c3:e8:4d:b8:9c:f6:a1:da:b6:
0f:27:3b:c8:4b:a5:cf:84:a4:6d:97:06:92:b0:3e:
0f:af:6e:7d:2a:98:64:b5:e8:42:1f:20:96:59:64:
1a:11:26:80:14:c9:6d:37:b3:5f:e9:7b:ae:da:cf:
a7:38:2e:bf:ad:46:cc:68:b2:d5:d4:b9:1f:5a:63:
54:60:d5:20:48:06:5d:26:b1:a1:a6:4b:e2:70:ff:
a4:1d:25:b6:0b:dc:83:c3:10:4b:ac:91:74:b2:0b:
d4:9e:83:36:67:47:7e:28:d3:07:08:50:94:a7:1e:
46:9e:cb:64:3c:91:cc:3e:73:04:e8:2a:c4:f0:a1:
15:75:65:58:32:e4:98:3f:66:bb:95:a0:29:a0:7e:
3d:1f:db:7b:d7:7f:69:f4:e7:ec:ba:21:b1:59:a5:
16:09:2f:70:91:43:90:c9:bc:91:04:13:72:ac:85:
ee:c3:00:c0:a9:62:df:de:4f:f2:20:9e:11:64:c6:
64:26:e6:99:fa:e8:30:ba:a0:ff:4d:50:97:ab:f5:
af:4e:fb:10:a8:8a:ce:d3:c6:73:66:95:e5:60:92:
1e:f3:49:20:c3:40:b9:42:dd:aa:48:2a:a1:8f:ae:
a8:74:36:36:dc:4a:a0:36:c1:13:68:61:56:44:97:
c1:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:52:07:EB:34:03:F6:4A:3F:3A:EA:AF:EC:24:AC:53:FB:84:C9:7F
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363238323a3a2f34382d3438203d3e203136393039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:6282::/48
Signature Algorithm: sha256WithRSAEncryption
2e:cd:dc:2b:5a:a6:d5:b6:12:06:2c:98:47:a4:9d:a0:7e:29:
29:61:cc:34:e2:a3:56:f3:af:fb:87:2b:28:1d:f4:08:7d:77:
1f:55:74:ad:2a:84:cb:76:a9:59:76:cd:e6:4f:a4:e6:6e:f8:
7c:cb:d6:23:f4:a9:a4:b3:92:3a:2c:41:8e:9e:02:41:17:c2:
2d:6b:8d:f3:2b:40:3d:85:7d:14:3a:24:95:e3:d6:ac:57:71:
68:f1:6d:d1:09:36:a1:6c:f8:89:a4:3f:5b:d3:0a:a2:89:6d:
02:59:87:51:bb:8c:6b:0c:ba:7f:ab:23:ab:14:8c:10:86:e5:
d3:3c:36:ec:17:9b:de:18:7d:5d:75:bb:4e:5c:90:93:85:ef:
d7:db:ad:da:f2:7b:cf:6d:44:52:8c:69:3e:b1:ef:5c:6b:e8:
4f:cf:5e:6b:4f:77:24:d2:b7:4a:86:11:1c:50:29:3f:12:f6:
b7:75:be:93:f8:84:55:63:3a:a6:4c:9a:2e:e7:ed:40:ee:f3:
e5:2b:3a:77:26:7a:09:2b:e4:f0:58:fd:37:c9:de:de:b7:94:
47:0b:2f:af:8e:61:1a:77:d3:35:c4:1c:10:52:fb:9f:61:4d:
7d:00:9f:1d:75:be:99:dc:cc:99:30:4e:76:d5:a8:aa:b7:83:
16:a8:a4:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 05:57:45 2025 by rpki-client