Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363238663a3a2f34382d3438203d3e203136393039.roa
File: 326131343a373538343a363238663a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier: jt43mWAVFQi/rFAU78ifqx9IfUfHzWqJb9lH048aqsY=
Subject key identifier: 1F:5A:38:F5:AD:A7:3F:A8:AD:EA:96:18:C6:F3:90:98:98:63:98:F4
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 7AD92C76CD750206B320A932F80A09AF124F68E6
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363238663a3a2f34382d3438203d3e203136393039.roa
Signing time: Thu 15 May 2025 08:18:02 +0000
ROA not before: Thu 15 May 2025 08:13:02 +0000
ROA not after: Thu 14 May 2026 08:18:02 +0000
asID: 16909
IP address blocks: 2a14:7584:628f::/48 maxlen: 48
Validation: Failed, certificate revoked on Sat 17 May 2025 12:18:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7a:d9:2c:76:cd:75:02:06:b3:20:a9:32:f8:0a:09:af:12:4f:68:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: May 15 08:13:02 2025 GMT
Not After : May 14 08:18:02 2026 GMT
Subject: CN=1F5A38F5ADA73FA8ADEA9618C6F39098986398F4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f9:0b:00:8d:12:28:1b:89:45:9d:8d:ae:d7:76:
ef:9f:48:59:20:50:bf:d5:08:c7:5b:52:d2:5a:59:
23:9c:5c:70:c0:45:0b:9e:b3:55:16:78:f8:44:9b:
37:b1:a9:59:51:8e:58:a1:3d:7e:22:d8:e8:05:b1:
fc:18:ba:88:92:00:74:07:b8:c9:30:04:c3:68:52:
ff:1a:c5:60:a3:75:b4:5b:f8:86:df:b7:b0:9b:fc:
86:8a:1b:78:74:c9:d9:ef:73:69:d1:65:1c:99:bb:
c9:1d:a2:b2:20:0f:1b:69:1f:c9:cb:cd:8a:8f:f0:
82:80:81:cd:24:90:7f:c7:97:78:cb:06:84:a2:d1:
5b:df:84:1b:90:f2:18:bd:8b:41:fd:29:39:50:e9:
f6:01:51:9c:e5:ee:63:fe:8f:10:96:71:19:05:de:
e3:93:27:d1:d2:57:de:36:17:8c:ce:e0:76:15:ec:
2f:e3:81:eb:d6:25:87:76:e2:e7:de:03:97:ad:eb:
8b:1e:d7:10:71:19:db:72:90:26:4f:ca:59:47:33:
20:f9:a4:44:7a:ae:2f:c3:28:0a:fb:4e:67:ef:62:
95:8a:68:e2:27:3b:ec:d1:19:76:95:36:7f:7b:1e:
d5:06:20:8a:75:5c:48:e7:3c:63:69:47:f6:a5:96:
89:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:5A:38:F5:AD:A7:3F:A8:AD:EA:96:18:C6:F3:90:98:98:63:98:F4
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363238663a3a2f34382d3438203d3e203136393039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:628f::/48
Signature Algorithm: sha256WithRSAEncryption
63:ca:da:e8:18:52:f4:0c:4f:53:11:a1:26:f1:36:b4:5b:17:
2f:29:53:ef:de:c7:82:a4:23:45:9f:95:a2:d6:6b:a2:6b:35:
6f:2e:bd:c2:78:e7:fa:54:9f:a5:47:6b:a2:d9:58:37:1b:43:
bf:19:07:d6:2f:e4:8d:d8:32:ef:e4:31:b4:0c:8f:6c:6a:3f:
0a:fe:83:67:ae:ed:ef:d9:bd:bd:15:72:09:9b:6b:78:ec:21:
7e:4c:81:43:06:52:b4:86:ac:86:91:5b:6b:d3:78:65:8f:15:
4c:2a:2c:5a:51:5d:5e:ea:17:97:b7:6c:cc:44:72:b1:2f:d1:
12:8a:c9:07:d1:46:a4:8e:04:5c:57:93:ca:62:80:75:30:7c:
d4:6f:3a:e3:ac:ed:15:73:20:8c:9c:2a:28:fd:86:05:53:79:
c9:d3:36:f8:4d:7c:b0:c9:02:4c:14:2f:dd:e5:5f:04:d6:d0:
ec:dd:0d:00:fa:b8:41:17:40:dc:22:59:15:c4:f6:a8:e3:0f:
0d:f7:fd:44:6a:cb:02:01:b0:5c:77:e5:f1:e6:be:da:cf:31:
fc:8f:e3:e2:f9:f0:33:73:b0:d0:bc:5e:a7:4a:db:d6:58:0c:
78:88:19:a0:c4:ee:41:5f:75:3e:59:ef:d2:d0:4f:58:6f:9b:
88:4a:26:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 04:57:57 2025 by rpki-client