Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363261383a3a2f34382d3438203d3e203136393039.roa
File: 326131343a373538343a363261383a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier: gC8GvO9aRMWY1tVYYoXw7oSsXgCz6M2MMCUAWzJauio=
Subject key identifier: 98:A2:2A:74:D5:5E:86:4D:36:50:32:A9:B0:84:21:36:BD:92:D9:EF
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 2F570876CE92797786A11B72804FFCACED57EF28
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363261383a3a2f34382d3438203d3e203136393039.roa
Signing time: Fri 16 May 2025 18:06:02 +0000
ROA not before: Fri 16 May 2025 18:01:02 +0000
ROA not after: Fri 15 May 2026 18:06:02 +0000
asID: 16909
IP address blocks: 2a14:7584:62a8::/48 maxlen: 48
Validation: Failed, certificate revoked on Sat 17 May 2025 23:48:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2f:57:08:76:ce:92:79:77:86:a1:1b:72:80:4f:fc:ac:ed:57:ef:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: May 16 18:01:02 2025 GMT
Not After : May 15 18:06:02 2026 GMT
Subject: CN=98A22A74D55E864D365032A9B0842136BD92D9EF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:92:22:eb:a4:a9:87:73:c8:c8:b0:30:0e:f9:
55:40:c9:71:31:58:38:05:2f:22:e5:ad:cc:c5:5b:
db:5f:07:ea:11:81:ca:20:bd:5b:ce:66:d1:f2:68:
a5:cd:5a:4f:49:98:75:85:25:83:3a:13:87:3e:b9:
78:d4:71:2e:de:52:86:53:f5:88:6a:f3:e5:e9:f3:
91:9c:b5:4c:5d:e4:42:ab:c5:db:a0:26:36:6c:03:
2d:f7:14:56:50:2f:19:0e:9e:01:f2:ec:6b:20:06:
0d:ad:19:6a:f3:83:cb:ef:1a:a8:0c:ae:83:5a:85:
70:18:2f:ac:ee:ba:96:f4:ba:6d:d2:1a:82:bd:d3:
4d:6c:4b:3f:dd:a5:65:3b:1e:9f:0d:2e:3b:f6:63:
89:c0:cf:02:e6:c8:47:a9:df:8b:e7:3d:02:d2:fa:
07:6c:f1:b7:fc:89:fb:6e:22:79:0b:06:c1:2a:fa:
e3:39:3b:bc:bc:e6:52:81:8a:c6:20:ef:bf:a6:ea:
f7:c1:ef:e8:b7:8b:a6:0b:fd:f8:4d:b1:ce:04:5d:
c1:93:0e:f1:4d:48:33:6b:c8:46:91:31:b7:20:7b:
26:72:12:d6:d8:76:f5:83:f5:cd:cf:31:14:47:ce:
97:23:25:fb:ee:de:37:cd:f5:78:c8:2a:9e:48:90:
2d:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:A2:2A:74:D5:5E:86:4D:36:50:32:A9:B0:84:21:36:BD:92:D9:EF
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363261383a3a2f34382d3438203d3e203136393039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:62a8::/48
Signature Algorithm: sha256WithRSAEncryption
98:26:5d:89:61:72:4b:b2:0c:92:18:49:4c:cd:1b:36:d5:8c:
5d:93:27:93:cc:1f:06:3e:0a:73:96:68:dc:1f:24:7b:5c:f6:
9c:df:6b:c7:9c:76:0f:ed:11:99:e7:43:23:cf:6c:60:e9:23:
92:6d:6e:02:6e:5a:18:16:98:fc:b1:5c:69:af:67:77:1a:09:
13:ab:df:64:3a:3d:9c:67:3f:e9:9c:2a:d2:cd:e4:94:fe:e1:
2d:4f:17:d0:aa:c4:65:e1:6a:05:8a:89:19:8e:12:02:f1:e4:
a6:8c:50:eb:49:78:0f:05:32:be:15:51:7c:2b:92:e7:73:a4:
2d:95:e3:7d:ab:fa:e8:d3:ac:14:3e:40:1a:87:17:a2:e1:f3:
ae:23:19:4b:e3:23:8f:f3:03:1f:84:cc:9f:11:0d:f4:19:49:
9d:72:be:37:b3:9f:20:c5:ac:63:2d:f8:90:fc:53:4e:ef:46:
8f:fc:c8:95:fc:e9:86:0c:b2:c5:63:e6:ad:41:69:36:3b:8a:
54:50:9b:7e:44:83:cb:09:9a:7e:df:af:89:dd:49:e5:5e:8f:
10:d5:da:00:ef:7a:8b:dc:cc:03:1f:4a:65:59:f7:42:d4:47:
1e:33:a4:b3:b8:be:0d:8a:7e:b2:8b:ca:60:96:d4:b3:97:e6:
4c:2a:c9:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 06:38:37 2025 by rpki-client