Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363238643a3a2f34382d3438203d3e203136393039.roa
File: 326131343a373538343a363238643a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier: mHrjNsFDEGhijYZEl3SgMHaIL8x0iY/zJgzzrjA9qIQ=
Subject key identifier: 7A:92:28:0D:8C:65:E8:33:8C:AF:88:78:01:60:C9:71:01:53:5B:12
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 2633A95AF132AC62D7DABF71F543F8792729DD44
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363238643a3a2f34382d3438203d3e203136393039.roa
Signing time: Thu 15 May 2025 08:18:02 +0000
ROA not before: Thu 15 May 2025 08:13:02 +0000
ROA not after: Thu 14 May 2026 08:18:02 +0000
asID: 16909
IP address blocks: 2a14:7584:628d::/48 maxlen: 48
Validation: Failed, certificate revoked on Sat 17 May 2025 05:24:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
26:33:a9:5a:f1:32:ac:62:d7:da:bf:71:f5:43:f8:79:27:29:dd:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: May 15 08:13:02 2025 GMT
Not After : May 14 08:18:02 2026 GMT
Subject: CN=7A92280D8C65E8338CAF88780160C97101535B12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:91:20:c2:30:79:c6:4b:58:76:98:bb:66:2b:
31:9f:3a:17:da:33:d3:67:f7:e3:eb:3d:33:c9:3d:
a9:a2:38:a4:c9:3d:3f:f6:13:ca:25:9e:03:eb:a6:
02:46:94:89:68:cc:3f:45:c5:c8:47:aa:e6:29:19:
16:e7:5e:d1:72:b0:d3:d6:c9:ad:6d:de:24:1a:ce:
ef:e2:e2:30:2b:c7:cc:6f:b0:73:0b:ae:2a:2f:6a:
05:9c:24:0e:0a:db:5a:75:bb:d9:44:28:00:c5:1b:
f5:7a:df:ae:ce:f2:30:58:ef:e7:ac:02:c1:20:33:
e5:78:7c:e3:f6:cc:1f:a5:fa:ab:fc:3c:a8:2e:55:
44:97:91:72:21:d9:f4:dc:78:71:76:bb:da:7f:14:
d1:75:97:ab:ac:7e:da:e7:54:67:8c:1c:ab:ab:de:
db:00:1a:f9:56:1b:79:d0:b7:06:4a:1f:a7:3e:23:
8c:8b:e5:b0:2a:6f:55:00:dc:28:5c:33:2b:bb:5d:
38:10:7f:3f:d6:90:5b:e5:92:2a:14:40:52:18:4d:
9f:61:57:7c:66:61:03:e8:29:43:40:79:26:f8:02:
f9:9d:ed:96:9f:e8:b0:18:a6:ef:10:0c:59:f7:ab:
ea:f7:6d:7a:ad:5c:f3:7e:6a:34:f2:7a:53:db:64:
d7:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:92:28:0D:8C:65:E8:33:8C:AF:88:78:01:60:C9:71:01:53:5B:12
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363238643a3a2f34382d3438203d3e203136393039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:628d::/48
Signature Algorithm: sha256WithRSAEncryption
88:87:25:fc:99:9c:31:1a:dc:b2:48:4a:aa:45:c2:4a:a1:e1:
af:62:3b:ad:b1:46:d2:3a:f7:d3:82:28:c9:44:ab:56:eb:b6:
2a:12:69:86:eb:f8:1d:5d:af:46:e3:cb:2a:82:c4:58:23:7a:
e6:d8:f8:a3:36:fe:49:e1:be:e7:75:f4:01:68:3b:e6:99:04:
24:bd:11:5d:ea:9d:dc:74:a0:fb:c0:a6:42:1e:3d:f6:5a:d8:
de:2a:2a:0e:cd:1f:5b:b2:92:f0:63:fc:45:de:5e:58:46:e4:
9b:c6:10:5e:02:98:01:b4:ff:69:5b:d4:3f:cd:4d:bd:04:90:
e1:10:27:4a:2a:f5:9d:2c:c0:52:a2:11:2d:5e:92:2e:ca:19:
a4:6d:3c:20:fd:b1:2c:37:46:1b:32:80:62:f9:9d:d2:50:b6:
22:96:78:67:c7:4f:5c:ec:7b:e1:a5:58:5b:86:a7:45:15:cf:
8d:23:92:5c:19:3b:60:13:72:c8:77:d5:c5:d4:f0:3c:7e:ec:
7b:40:42:3f:58:54:e6:e2:ec:30:93:3f:15:a1:d8:c0:93:92:
46:12:39:de:53:73:ce:c3:9d:72:58:44:83:05:38:82:85:9e:
5e:3e:67:97:8f:96:7c:e9:2e:71:2f:ba:97:4d:6c:d6:f0:0e:
ed:46:3b:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 06:11:48 2025 by rpki-client