Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363265313a3a2f34382d3438203d3e203136393039.roa
File: 326131343a373538343a363265313a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier: UkWuNlI5OMcXgQVnkAkJh2DKftFQz5Nu5ANHeqwUsRg=
Subject key identifier: D3:B4:6E:93:C9:A8:A1:BB:B7:AE:D7:41:3E:38:FD:32:97:DE:4F:97
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 2769DB79CF67CF399EA8FC1B11FF0AC03F372358
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363265313a3a2f34382d3438203d3e203136393039.roa
Signing time: Sun 18 May 2025 11:18:03 +0000
ROA not before: Sun 18 May 2025 11:13:03 +0000
ROA not after: Sun 17 May 2026 11:18:03 +0000
asID: 16909
IP address blocks: 2a14:7584:62e1::/48 maxlen: 48
Validation: Failed, certificate revoked on Mon 19 May 2025 20:54:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
27:69:db:79:cf:67:cf:39:9e:a8:fc:1b:11:ff:0a:c0:3f:37:23:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: May 18 11:13:03 2025 GMT
Not After : May 17 11:18:03 2026 GMT
Subject: CN=D3B46E93C9A8A1BBB7AED7413E38FD3297DE4F97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:c4:62:19:f0:33:8f:37:8f:ea:41:34:9b:83:
02:77:c5:3b:6f:3f:7d:6e:3c:e2:f5:b9:f5:81:6d:
39:22:6a:4f:49:ca:13:23:9c:49:34:02:fc:33:a1:
d9:8d:c9:4c:fb:60:22:c6:ce:a8:0e:5e:64:48:3b:
2d:d2:30:59:b4:ed:78:0f:9c:bf:ec:c0:59:9a:11:
f0:43:22:52:36:b9:fc:2d:35:44:a7:26:0c:de:83:
97:e2:a2:da:c6:26:02:67:99:f3:fe:90:c3:c0:5f:
d4:38:c1:b7:a7:d4:97:64:36:a6:df:6c:69:23:06:
ba:59:ba:e9:fe:6d:d2:48:a8:88:42:1f:83:6f:47:
0e:d8:ed:c0:5b:43:66:1c:2b:cd:24:e1:ba:b8:ac:
4b:24:4c:a5:86:f6:b7:dc:62:9b:59:61:60:6d:cf:
30:6d:96:2b:d9:3f:33:df:eb:94:1a:1c:68:82:5c:
e2:d6:15:b6:c5:4c:5e:f6:fe:0c:af:68:90:c7:39:
c7:94:94:34:d1:78:df:fd:2d:ca:7d:03:d4:fa:65:
bb:ec:ae:24:37:80:7e:08:94:4a:22:66:7f:61:ee:
05:ef:36:cc:4e:04:77:5c:1e:ba:a9:1c:9a:79:7c:
1c:27:f0:30:09:18:85:09:4e:0e:60:e9:08:1f:3f:
09:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:B4:6E:93:C9:A8:A1:BB:B7:AE:D7:41:3E:38:FD:32:97:DE:4F:97
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363265313a3a2f34382d3438203d3e203136393039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:62e1::/48
Signature Algorithm: sha256WithRSAEncryption
57:6d:5d:84:11:b6:02:b3:b2:d3:2f:e4:2b:f7:6f:34:5b:12:
ad:d3:3c:8a:06:d3:ef:d6:50:39:33:3f:d0:c8:e5:a6:52:e8:
72:17:d6:c3:6e:8a:41:a1:2e:4a:bc:69:7c:6d:9c:6a:16:78:
c7:c8:26:f6:9c:37:c1:95:b3:1b:51:88:00:5a:67:ff:5e:5d:
e9:2c:df:fe:07:eb:c4:89:79:2a:00:93:e6:96:eb:a0:96:df:
30:86:50:b7:e3:e5:07:de:18:54:55:ad:17:bb:38:e6:80:4a:
60:9b:d4:51:73:dc:05:8d:60:d9:d3:d9:93:32:3d:7c:20:2a:
00:d8:ff:a9:25:1d:e2:1d:ff:fa:1d:80:d8:2f:27:f5:3e:70:
39:96:de:19:99:ab:fb:ce:a2:39:fd:98:f7:1d:01:f2:6a:e6:
2c:39:c8:76:21:3c:05:69:c2:10:4c:03:2e:9d:0b:10:88:42:
ce:b8:fe:94:78:e5:3c:9f:55:6b:74:14:a6:7c:60:f6:18:12:
ff:5c:ad:4b:bb:3f:a1:d7:0a:d7:82:ba:65:65:ab:63:f0:c6:
71:51:23:22:65:29:3d:ea:0e:0b:c7:c6:84:03:05:99:10:8e:
0f:35:e3:1a:9b:eb:a2:c9:c1:57:f4:74:0a:a8:48:d9:fa:53:
77:25:51:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 05:00:19 2025 by rpki-client