Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363261613a3a2f34382d3438203d3e203136393039.roa
File: 326131343a373538343a363261613a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier: 0hejjJ2HoEa8NmCZz5J9L8IWSaxnyIrwQVRvnDk/q/g=
Subject key identifier: 79:6E:DC:AD:B7:94:D1:0B:CC:A2:C4:B6:9C:42:66:F9:C5:E0:C7:9E
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 3122608D2169D212E3A23D848E11D8523ACD33C9
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363261613a3a2f34382d3438203d3e203136393039.roa
Signing time: Fri 16 May 2025 18:06:02 +0000
ROA not before: Fri 16 May 2025 18:01:02 +0000
ROA not after: Fri 15 May 2026 18:06:02 +0000
asID: 16909
IP address blocks: 2a14:7584:62aa::/48 maxlen: 48
Validation: Failed, certificate revoked on Sat 17 May 2025 15:48:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
31:22:60:8d:21:69:d2:12:e3:a2:3d:84:8e:11:d8:52:3a:cd:33:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: May 16 18:01:02 2025 GMT
Not After : May 15 18:06:02 2026 GMT
Subject: CN=796EDCADB794D10BCCA2C4B69C4266F9C5E0C79E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:6b:55:d7:86:ee:8b:be:db:40:d1:d0:c5:71:
6b:7d:4d:28:30:46:1c:fb:a4:31:a9:f3:39:9b:03:
be:21:e2:74:31:d1:77:96:4d:94:e2:bf:65:a6:98:
c3:8a:2c:f2:21:c9:24:29:74:94:80:b8:26:30:5d:
b3:36:7d:d1:a4:5a:c5:f4:29:aa:28:ba:99:bc:cd:
5f:2c:bd:c1:4f:5b:4b:10:11:40:cd:ff:f8:ad:f4:
10:05:46:26:f5:14:be:fc:8d:06:28:20:7a:8b:cf:
e0:62:f5:dc:d5:63:e0:eb:23:71:f2:75:30:8e:bb:
76:b4:51:33:2b:73:84:4a:18:d5:68:a6:c5:61:79:
7e:a5:81:f6:f0:1c:d2:48:4d:75:43:10:15:e7:53:
b8:c3:93:95:01:e2:c7:a3:7a:16:3b:46:79:b9:d3:
65:48:79:32:10:0a:67:b4:b4:59:d8:ec:6b:05:f5:
f9:64:08:2a:41:5d:3e:82:db:5f:bb:a3:5c:2c:c3:
ff:e0:4a:b7:5c:fe:67:8c:a2:63:dd:b7:ff:cf:bd:
0a:3e:b6:d3:f7:e5:df:30:46:00:8b:11:a9:0c:1f:
20:30:4c:48:44:bb:99:ee:07:69:b8:87:39:f6:04:
77:f5:67:9d:56:26:52:95:93:6f:cc:bb:8d:3d:3a:
82:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:6E:DC:AD:B7:94:D1:0B:CC:A2:C4:B6:9C:42:66:F9:C5:E0:C7:9E
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363261613a3a2f34382d3438203d3e203136393039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:62aa::/48
Signature Algorithm: sha256WithRSAEncryption
b6:59:46:af:59:5c:e8:4a:28:fe:be:83:0e:5a:ef:a8:e9:36:
e1:f4:47:7f:1c:01:2f:6b:10:12:88:68:a9:3c:2c:15:2f:c7:
fa:e0:e5:9b:dd:b7:d2:4b:d7:d3:6b:48:26:66:fd:4a:80:12:
2f:81:dc:12:73:6e:b9:f6:65:d9:39:15:19:da:0f:d7:a4:49:
77:81:f1:b2:fd:e7:5f:1c:ad:fa:86:4c:c4:6b:e8:aa:cc:88:
f0:46:4c:10:70:cc:ca:e7:6c:11:28:11:c6:71:be:d4:4b:8b:
4e:a2:84:6c:d6:6c:22:b7:c2:42:57:95:7e:3e:3d:cf:3d:24:
18:de:3d:9e:39:1d:04:5f:a4:c0:94:17:97:68:ca:ee:d7:66:
e9:84:78:e9:c6:30:90:5b:da:ad:5e:e6:5d:a0:86:d7:94:ef:
d0:43:ee:d6:95:17:a9:9a:9a:8d:ee:b3:15:fc:42:31:b6:fa:
8c:84:c0:ab:58:8e:58:42:db:da:07:fd:e5:e1:c7:4a:41:ca:
41:84:58:11:47:ca:0f:b8:a1:3f:21:90:cf:fd:a4:e1:fd:c9:
03:a0:57:3a:d6:68:77:2c:ac:7f:35:3e:f5:a5:9b:a6:33:02:
74:3c:bf:96:53:2b:05:e8:7b:f9:ff:1b:8e:02:cf:7d:46:09:
e8:e1:ee:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 07:25:16 2025 by rpki-client