Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363262383a3a2f34382d3438203d3e203136393039.roa
File: 326131343a373538343a363262383a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier: ExhxWUizdYRBSXJPOTWYF2MybEEZib18URG+CBBy9u8=
Subject key identifier: F1:32:36:C1:F7:D9:DB:3D:3F:17:45:EE:B9:AD:D1:60:5D:1A:17:DF
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 45C303B07547ED4393E716084D4B5AFB343A7AC7
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363262383a3a2f34382d3438203d3e203136393039.roa
Signing time: Sat 17 May 2025 02:36:02 +0000
ROA not before: Sat 17 May 2025 02:31:02 +0000
ROA not after: Sat 16 May 2026 02:36:02 +0000
asID: 16909
IP address blocks: 2a14:7584:62b8::/48 maxlen: 48
Validation: Failed, certificate revoked on Sun 18 May 2025 23:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
45:c3:03:b0:75:47:ed:43:93:e7:16:08:4d:4b:5a:fb:34:3a:7a:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: May 17 02:31:02 2025 GMT
Not After : May 16 02:36:02 2026 GMT
Subject: CN=F13236C1F7D9DB3D3F1745EEB9ADD1605D1A17DF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:14:77:03:80:54:88:e6:69:b0:d9:6f:de:99:
b2:e9:a1:39:fd:e3:d9:c7:11:a3:bd:e5:7f:9b:fe:
ed:24:fe:c0:a9:73:d3:db:cc:39:c7:08:a1:0f:f4:
02:78:8a:44:87:cb:76:00:b5:86:43:33:01:1f:5f:
89:dd:97:7d:fd:26:cd:3d:16:01:40:58:07:36:8d:
79:cf:cc:cd:08:bd:12:45:3f:34:c7:28:49:3f:d1:
ae:77:3e:64:bf:0c:d7:3c:9a:48:2b:ef:94:8d:74:
7d:f0:10:52:ad:94:2f:e0:f4:11:65:1a:ad:0e:32:
c4:c9:8f:d7:12:e0:7b:d1:b4:e4:23:2d:89:fb:49:
17:db:cc:59:37:36:41:01:00:d5:3f:d1:4f:b6:f7:
4c:1c:da:28:28:51:fe:7b:6e:a4:32:58:99:64:e7:
0b:f8:27:6a:ec:ee:52:07:d3:56:c3:11:54:f8:6a:
70:d9:09:16:16:1d:d3:ec:c6:4c:9d:c0:81:3f:30:
9b:95:8f:7a:9d:96:a2:8e:dc:06:7e:72:31:46:13:
26:83:b6:56:0e:d7:ec:c2:06:2b:13:7f:cd:6f:a3:
84:8f:98:a0:ec:ab:93:78:71:e0:b8:f1:cc:fc:ce:
9c:01:ab:74:b9:b9:f2:c2:43:dc:8d:34:94:a8:81:
d0:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:32:36:C1:F7:D9:DB:3D:3F:17:45:EE:B9:AD:D1:60:5D:1A:17:DF
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363262383a3a2f34382d3438203d3e203136393039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:62b8::/48
Signature Algorithm: sha256WithRSAEncryption
7d:b9:29:0d:6e:8a:03:5a:a3:04:52:15:bc:9e:bb:05:68:60:
90:a7:1e:80:93:76:4d:f3:02:e2:84:86:11:0a:3c:42:bb:83:
c3:e0:4f:73:a3:a8:0e:09:3e:55:4b:a0:2d:82:02:64:ed:52:
47:a5:0d:b8:7c:0e:aa:66:91:cb:64:95:49:37:8a:31:31:51:
1f:0c:0e:d0:e3:79:8a:35:7f:4a:10:47:70:e9:81:d2:e5:c2:
36:b8:88:ef:10:d8:29:03:6a:8a:2f:8d:6e:e8:60:59:2e:6c:
c6:4d:4e:6e:96:70:f7:24:f4:29:93:a1:85:da:3b:02:da:8b:
a3:6a:e3:a4:31:c8:ad:bb:53:d6:23:d9:f2:65:4d:2f:b1:30:
75:39:28:f4:de:14:2f:9d:4b:64:bc:f6:55:4f:13:52:dd:2c:
a0:86:81:08:6c:85:82:f8:dd:1b:6a:b2:23:11:ad:b8:4a:dd:
e3:0b:9d:e7:ac:b5:cc:ea:1a:1c:79:9e:5b:3b:33:6c:d1:8a:
d5:97:5e:dd:41:b2:81:25:e8:19:86:4f:5a:d4:68:bf:91:97:
e4:a6:db:79:0e:94:a9:8c:b1:96:46:e5:7b:1a:29:98:71:9a:
d0:e3:78:56:48:0c:bb:85:83:f8:1f:63:de:f0:e3:5c:c1:46:
7c:01:d0:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 20:24:49 2025 by rpki-client