Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363238393a3a2f34382d3438203d3e203136393039.roa
File: 326131343a373538343a363238393a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier: 3Nif9cqseeSCMAHEPRFOCtTydsaOgaSESD4O9XRyaWY=
Subject key identifier: 8F:9C:43:C2:BA:AF:A1:BA:AE:EE:E7:7B:BB:99:89:9E:9A:06:19:2A
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 61DFC61D99DF5A01D7BC42F02913D63649016076
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363238393a3a2f34382d3438203d3e203136393039.roa
Signing time: Thu 15 May 2025 00:42:02 +0000
ROA not before: Thu 15 May 2025 00:37:02 +0000
ROA not after: Thu 14 May 2026 00:42:02 +0000
asID: 16909
IP address blocks: 2a14:7584:6289::/48 maxlen: 48
Validation: Failed, certificate revoked on Sat 17 May 2025 00:36:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
61:df:c6:1d:99:df:5a:01:d7:bc:42:f0:29:13:d6:36:49:01:60:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: May 15 00:37:02 2025 GMT
Not After : May 14 00:42:02 2026 GMT
Subject: CN=8F9C43C2BAAFA1BAAEEEE77BBB99899E9A06192A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:3f:e0:8a:fa:53:19:06:a9:59:9e:de:7e:1a:
af:72:6b:84:d7:2b:34:6c:1b:e3:dd:1e:bf:b4:0c:
10:de:e6:00:88:1b:d8:ea:fa:61:e9:77:09:24:dd:
78:28:62:dc:29:d1:7b:e4:db:49:8e:27:ce:f6:52:
a3:40:3c:f6:65:93:d3:c7:8d:82:1a:4e:a8:a2:a0:
ca:81:f7:2a:f3:2b:e8:b9:6d:ad:eb:18:82:81:85:
da:71:fe:6a:80:a7:9d:de:cc:5e:6a:a1:c9:08:09:
46:96:fe:0a:0e:f4:35:9c:1c:56:13:ab:33:e3:4b:
8d:08:e0:d8:fc:5c:88:ae:a8:bf:b7:98:62:50:2b:
34:c9:dc:a9:82:0e:b5:ee:2a:d4:d0:6d:4c:54:4f:
43:7e:1c:70:d1:f2:f8:76:09:a5:d5:9f:37:25:80:
e1:3a:ef:d8:e3:f5:c9:ff:ae:86:00:6f:fc:49:4b:
e4:1e:d5:ff:48:0e:37:d5:fd:73:d3:4a:d3:a2:dd:
d3:c4:2d:28:55:66:08:18:48:11:ad:ed:09:23:82:
a4:13:bf:03:2e:68:0e:ec:51:07:36:2d:1d:32:d7:
63:9c:1c:00:c6:da:8e:e4:82:3a:6d:26:36:be:e5:
d3:e7:83:81:a5:cc:73:ba:ae:40:38:7f:f0:11:1d:
1b:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:9C:43:C2:BA:AF:A1:BA:AE:EE:E7:7B:BB:99:89:9E:9A:06:19:2A
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363238393a3a2f34382d3438203d3e203136393039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:6289::/48
Signature Algorithm: sha256WithRSAEncryption
16:b1:66:47:57:4c:07:30:18:31:a9:05:15:9a:4b:fc:94:be:
58:95:e9:c1:2d:b2:15:7e:88:48:9a:bc:2b:c7:2b:79:ea:db:
3d:3f:98:6e:53:02:24:9e:86:7d:d2:11:bc:49:94:2d:2d:9e:
f9:5d:12:0e:ff:14:7f:43:db:36:a6:8a:5e:b9:5f:61:10:0a:
18:cc:36:92:65:38:10:35:89:7a:6c:73:3b:97:43:29:0b:22:
b7:d9:57:31:75:58:fb:94:1f:ee:3a:fd:ea:6b:dc:c9:b8:64:
39:16:6c:5e:fa:7f:bf:a9:d6:11:9e:ee:17:01:af:63:0a:cb:
be:9d:df:7a:b1:f2:b7:90:8e:57:47:e7:06:d4:ad:09:5a:bf:
69:37:fd:fc:47:87:7a:66:b9:91:dc:c2:61:be:66:30:d4:0f:
35:a9:e4:8d:74:07:f4:2c:9b:a2:a9:59:65:84:4b:53:fe:99:
17:e4:0b:75:0e:6f:48:7f:5b:c7:31:8d:93:bf:f5:8d:88:39:
a4:91:88:ed:78:f9:55:97:c8:a0:b1:b8:0a:c8:03:9d:e5:d7:
43:d5:d8:71:78:03:05:d2:4d:57:c3:15:a2:a9:17:49:85:7d:
a9:a0:0b:d2:36:13:fb:19:6c:53:c3:43:43:48:f3:9b:df:c9:
f8:a0:54:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 16:38:16 2025 by rpki-client