Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363264313a3a2f34382d3438203d3e203136393039.roa
File: 326131343a373538343a363264313a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier: Q52PYVXYfgqKs3X56hVdwIR+CwDwiLEa/vYYJTGng4Y=
Subject key identifier: CE:C2:D2:36:B2:8F:5C:65:75:FD:73:70:C9:0D:2A:62:95:9C:F4:D0
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 305CF951E3D1D9222728BBAB8345021F3E1CBDF8
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363264313a3a2f34382d3438203d3e203136393039.roa
Signing time: Sat 17 May 2025 23:48:02 +0000
ROA not before: Sat 17 May 2025 23:43:02 +0000
ROA not after: Sat 16 May 2026 23:48:02 +0000
asID: 16909
IP address blocks: 2a14:7584:62d1::/48 maxlen: 48
Validation: Failed, certificate revoked on Mon 19 May 2025 20:30:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
30:5c:f9:51:e3:d1:d9:22:27:28:bb:ab:83:45:02:1f:3e:1c:bd:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: May 17 23:43:02 2025 GMT
Not After : May 16 23:48:02 2026 GMT
Subject: CN=CEC2D236B28F5C6575FD7370C90D2A62959CF4D0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:36:c3:27:f5:84:f5:06:90:2c:a2:75:7d:81:
85:bc:89:63:c8:4c:cb:79:5d:ed:dc:06:da:bb:e3:
86:80:69:cb:17:48:38:1b:e9:3a:e8:9b:40:8b:9a:
d6:bb:e2:73:a4:0a:07:99:96:00:42:e9:4f:df:80:
f8:49:31:3a:cb:73:03:97:85:b6:30:07:46:2d:1d:
f9:0e:68:49:f9:49:4c:da:35:c1:c8:14:1d:f1:6d:
57:e7:d5:8a:9c:c1:91:53:35:1f:8d:e1:db:32:9d:
8d:ed:78:87:9d:df:6e:b5:a3:ce:6b:d0:10:1f:92:
48:d7:99:2d:54:e5:6b:38:07:78:45:bd:3b:4d:e2:
17:38:77:bf:c0:1b:f4:a7:d5:05:c0:89:de:b8:4b:
e9:7f:5f:19:40:33:f5:69:5a:dc:51:d7:ae:77:9a:
12:6f:4d:56:88:13:71:17:a3:9f:22:27:da:e0:4e:
03:43:d5:8a:20:15:2f:05:87:f3:e4:25:48:b1:c5:
af:4e:aa:4f:bb:17:d6:93:53:ad:c1:7d:7a:62:cd:
a3:55:3b:05:a4:fd:3d:5f:7b:ec:e9:1e:a1:0c:99:
8f:9e:f3:82:92:b9:b6:98:90:f0:c0:66:c4:ca:aa:
ce:ac:90:8d:71:43:d1:7e:c6:4a:06:0e:bd:c2:72:
38:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:C2:D2:36:B2:8F:5C:65:75:FD:73:70:C9:0D:2A:62:95:9C:F4:D0
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363264313a3a2f34382d3438203d3e203136393039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:62d1::/48
Signature Algorithm: sha256WithRSAEncryption
0b:f4:25:fb:40:56:48:08:04:4f:37:d3:2a:95:69:6f:e6:a4:
9e:17:70:9e:a2:0b:13:e6:4d:c4:5c:c9:a7:09:e9:f1:dd:96:
cd:b7:be:63:3c:a6:25:a0:0c:19:27:82:50:f1:31:33:0f:e6:
bc:35:87:b6:9a:b2:4b:d1:a0:b3:d7:49:29:ab:73:1c:2c:60:
29:7c:ba:f0:10:74:b5:23:e1:18:02:a9:5b:c9:f9:26:4d:f3:
3e:46:36:ed:b6:86:2d:fa:08:a4:d4:17:56:f1:70:3f:22:a5:
38:c6:cd:3f:6e:ba:30:6e:1b:31:62:c8:61:c4:b8:b8:3b:0b:
cf:50:ce:4a:c3:e0:05:52:a0:74:fc:8d:a5:13:fa:23:cb:2b:
4d:c2:2d:9d:c3:7d:ef:1c:eb:d8:75:4a:47:4d:8f:11:00:93:
c4:08:73:80:f4:cb:6a:7b:8b:98:53:28:57:89:00:66:b3:a3:
78:f4:9b:d4:ac:58:15:00:24:b8:b8:4e:79:09:02:c5:63:22:
d4:7f:8d:51:17:ba:2c:ba:29:1c:54:13:18:3c:d2:e2:16:53:
0c:5d:c1:79:0e:b5:7e:13:c7:41:16:ae:e1:07:e2:9f:d7:df:
a7:82:07:18:61:b1:9d:50:31:05:93:cc:f8:1f:06:60:75:1a:
7b:47:5f:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 23:34:13 2025 by rpki-client