Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363261653a3a2f34382d3438203d3e203136393039.roa
File: 326131343a373538343a363261653a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier: i5ZvQhXuFBaX3xoh5SiQImfeKgzoBJgDHp3qF9Z4ytU=
Subject key identifier: 97:6C:8F:D4:8E:AA:DA:5C:2D:A3:99:52:41:D2:FD:1C:EA:8B:F0:7A
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 14245AC98F4C4EB1D7469F581F615E8CEC55FED4
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363261653a3a2f34382d3438203d3e203136393039.roa
Signing time: Sat 17 May 2025 00:24:02 +0000
ROA not before: Sat 17 May 2025 00:19:02 +0000
ROA not after: Sat 16 May 2026 00:24:02 +0000
asID: 16909
IP address blocks: 2a14:7584:62ae::/48 maxlen: 48
Validation: Failed, certificate revoked on Sun 18 May 2025 11:12:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
14:24:5a:c9:8f:4c:4e:b1:d7:46:9f:58:1f:61:5e:8c:ec:55:fe:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: May 17 00:19:02 2025 GMT
Not After : May 16 00:24:02 2026 GMT
Subject: CN=976C8FD48EAADA5C2DA3995241D2FD1CEA8BF07A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:71:8b:f5:8b:4a:26:e7:64:b2:8f:d5:99:a0:
cb:28:21:ef:be:86:fe:a3:bf:74:44:81:91:e7:af:
5a:eb:1d:11:62:94:9a:fe:fe:3d:ef:1a:37:0a:3d:
36:27:4a:ea:fb:a3:61:3b:9d:bf:8e:92:c9:dc:56:
98:62:e8:00:8a:48:fc:d6:c1:fd:6d:c3:02:bf:be:
3c:58:d9:39:d0:d8:9d:c7:70:1a:08:31:d3:e6:2a:
57:b4:d4:7a:e0:55:57:79:59:ec:a4:93:d6:fe:07:
54:59:1e:1b:20:08:69:13:6b:5c:89:2e:66:f5:bd:
56:f9:3c:3b:80:ee:5f:ce:85:b0:0a:cb:e8:fd:a5:
46:4a:31:cb:49:98:d8:b3:54:15:d6:75:1c:6c:36:
35:32:40:d3:fd:bb:a2:80:8b:95:b4:76:fd:1f:a4:
fd:a2:e5:3c:cc:ca:88:ee:7f:bd:0f:3e:b4:34:dd:
bf:62:f0:be:d2:d8:a7:bf:aa:11:3b:f0:93:58:24:
ea:a2:ea:8c:bc:e3:e8:91:c5:b4:2f:8c:75:39:ea:
67:bb:7a:90:ab:93:95:5d:17:2c:3e:bf:76:d3:0f:
95:60:f3:f0:b8:da:2a:b0:28:42:5e:48:84:95:23:
92:b2:b0:fe:80:b7:9b:2e:24:0e:83:bc:37:0d:56:
b4:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:6C:8F:D4:8E:AA:DA:5C:2D:A3:99:52:41:D2:FD:1C:EA:8B:F0:7A
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363261653a3a2f34382d3438203d3e203136393039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:62ae::/48
Signature Algorithm: sha256WithRSAEncryption
b0:39:d1:3d:49:53:19:72:7a:82:4d:8a:97:c4:ec:00:e8:6c:
a6:9b:65:bd:fe:78:56:fb:dc:40:f8:45:f7:04:cc:9f:2d:2a:
d8:56:03:07:f5:78:eb:24:60:c0:6a:eb:af:9b:f1:77:4d:50:
dd:19:41:14:d7:a1:b4:80:9b:4b:68:37:57:88:b9:5d:1e:52:
c7:27:5a:44:76:19:0c:10:e5:2b:08:fa:4b:5b:cb:30:95:bc:
ac:2b:00:09:0f:6a:ca:e7:cf:d8:91:a6:ae:6b:b9:d1:71:ca:
c3:db:03:4d:95:05:30:f6:30:a1:1f:7d:22:1d:d9:40:3c:d9:
bc:8c:60:b4:f5:65:94:a9:7e:13:98:4c:75:41:07:81:58:1a:
b5:8e:cb:26:d2:4b:e1:da:59:d9:82:57:b4:08:b3:96:78:e3:
77:68:ce:39:9c:94:d7:88:b8:60:25:e4:50:69:63:0b:d9:f0:
72:94:db:60:f4:ad:45:66:63:35:23:12:42:4c:25:ee:c4:f1:
6f:61:59:c3:b4:3e:46:ea:fa:f5:c1:20:b7:fd:9e:c2:a3:64:
11:cc:d6:af:12:9c:f2:9c:3a:a9:31:aa:3c:d0:e4:e7:0c:4b:
34:a7:fe:ad:17:6a:af:1c:7c:b3:e7:e2:0c:ac:6a:31:14:d9:
6c:5a:b5:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 06:42:38 2025 by rpki-client