Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363261353a3a2f34382d3438203d3e203136393039.roa
File: 326131343a373538343a363261353a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier: bibs0FJt2mE9Ae4/nU9hvw4vZtn2ggiZsw3MyDT18GI=
Subject key identifier: AF:76:26:3B:B1:44:9B:64:DB:B4:CF:FA:2C:8B:95:B9:6E:F2:80:8B
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 32374D9465C89ECCE2F07E47894E55C3E4021178
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363261353a3a2f34382d3438203d3e203136393039.roa
Signing time: Fri 16 May 2025 15:54:01 +0000
ROA not before: Fri 16 May 2025 15:49:01 +0000
ROA not after: Fri 15 May 2026 15:54:01 +0000
asID: 16909
IP address blocks: 2a14:7584:62a5::/48 maxlen: 48
Validation: Failed, certificate revoked on Sat 17 May 2025 23:30:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
32:37:4d:94:65:c8:9e:cc:e2:f0:7e:47:89:4e:55:c3:e4:02:11:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: May 16 15:49:01 2025 GMT
Not After : May 15 15:54:01 2026 GMT
Subject: CN=AF76263BB1449B64DBB4CFFA2C8B95B96EF2808B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:3d:ff:3e:9c:84:4c:1e:f7:37:4c:81:ae:0e:
ff:43:c7:17:9f:a1:60:b2:d8:d5:be:6c:50:73:47:
35:85:b5:73:98:23:83:7a:b1:8c:a8:34:cc:50:fe:
0e:a3:2a:cb:48:d0:da:f6:ea:7e:a6:ec:86:c3:73:
b3:e1:d8:a3:1b:14:35:ac:8b:1b:01:60:ba:aa:9c:
df:b3:ac:0e:b7:4a:28:d6:f0:c7:75:18:5c:04:6b:
fa:b0:76:9a:a9:1d:32:7e:a2:90:cb:f0:e1:d5:5f:
d5:71:70:dc:56:38:51:20:12:67:cf:b2:cb:fa:55:
5a:9d:43:81:a6:3e:67:8d:88:13:4f:95:27:12:7a:
ca:4e:f4:85:52:82:db:47:e6:58:a9:95:78:df:4a:
c9:45:8e:cd:8d:c8:2d:e1:d0:3d:20:5d:36:30:38:
19:28:b1:28:00:e6:a2:c4:43:19:69:58:61:8d:a5:
78:c0:8a:3c:ba:ed:01:84:6f:b6:46:f6:19:55:42:
15:2d:d2:8e:d9:30:e3:aa:12:b1:9d:c6:a1:bf:97:
55:0d:66:c1:50:1f:88:a2:6e:05:64:8a:9a:47:9d:
df:a4:39:e2:30:2b:78:b8:ca:bb:c4:18:75:22:c3:
cf:f5:33:4b:84:ef:82:26:2c:30:9c:2d:fc:38:e7:
dc:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:76:26:3B:B1:44:9B:64:DB:B4:CF:FA:2C:8B:95:B9:6E:F2:80:8B
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363261353a3a2f34382d3438203d3e203136393039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:62a5::/48
Signature Algorithm: sha256WithRSAEncryption
47:05:f1:65:d0:84:69:b9:19:a6:a3:27:de:5b:17:a0:c0:46:
e1:67:55:f2:8b:8b:db:49:1f:b2:5c:53:d1:ee:ea:23:e2:14:
8a:9e:6a:2d:cb:54:74:3a:0e:4f:1a:6a:6a:b4:3c:89:aa:d5:
97:ee:b0:75:02:ad:c6:3d:8d:30:4c:07:46:8f:04:de:67:7d:
a9:1d:8f:a2:a3:31:97:2d:71:82:7c:26:4c:9b:63:35:78:aa:
aa:17:30:2d:62:cd:05:67:03:51:54:e5:90:21:a3:01:51:61:
43:8f:c4:f9:e4:d0:2b:a2:d7:81:28:46:25:7a:6b:28:a4:6e:
30:e0:4f:9f:a1:c0:fe:1c:76:22:f7:ab:a3:0c:79:2f:cb:e3:
21:e8:88:1d:99:6e:00:6f:be:45:c7:01:38:e2:88:37:e3:a6:
4c:95:71:1a:f4:0c:61:a3:43:cb:4e:bb:a4:a5:9f:cf:cb:f1:
81:41:57:50:e7:ae:df:08:09:ad:5d:75:d3:89:f7:87:f8:b9:
13:1b:40:f5:4f:78:07:a7:22:a3:78:81:ec:e2:44:fa:0b:be:
fe:17:64:8e:d6:ce:06:2f:50:fc:ce:84:90:5d:4b:6b:ea:60:
cd:07:14:e2:f2:2c:d6:35:02:0d:1f:7e:7f:7d:1f:cf:a0:ed:
1d:aa:be:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 06:26:03 2025 by rpki-client