Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363265613a3a2f34382d3438203d3e203136393039.roa
File: 326131343a373538343a363265613a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier: kpyeXYd2A5fONR7lXc+qqhBn0Sl5m5IaWTKNXt0aqVc=
Subject key identifier: BE:31:1D:1D:92:93:B0:38:0D:11:7D:FC:AC:1D:BF:3E:BF:74:DC:15
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 02C1A82BD56C79838E228DFB6B853B68FF38C5F3
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363265613a3a2f34382d3438203d3e203136393039.roa
Signing time: Sun 18 May 2025 22:54:02 +0000
ROA not before: Sun 18 May 2025 22:49:02 +0000
ROA not after: Sun 17 May 2026 22:54:02 +0000
asID: 16909
IP address blocks: 2a14:7584:62ea::/48 maxlen: 48
Validation: Failed, certificate revoked on Mon 19 May 2025 18:54:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
02:c1:a8:2b:d5:6c:79:83:8e:22:8d:fb:6b:85:3b:68:ff:38:c5:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: May 18 22:49:02 2025 GMT
Not After : May 17 22:54:02 2026 GMT
Subject: CN=BE311D1D9293B0380D117DFCAC1DBF3EBF74DC15
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:4a:2d:c8:f7:2b:0a:13:54:49:63:14:2c:c5:
0d:77:71:fe:fb:27:fc:d8:2a:ca:db:e7:7e:ae:ff:
03:39:37:3b:0d:95:db:f9:5c:f3:2e:be:fe:bf:15:
43:5e:5d:ca:5b:f0:af:3d:d2:5c:09:94:95:59:f4:
e9:02:03:67:bd:18:8d:26:74:c4:91:3b:f2:e7:3e:
79:5d:a0:20:34:40:9c:36:ce:0e:21:0d:81:3b:cb:
16:df:4d:bc:a3:35:c6:04:bc:71:22:a2:a9:8e:46:
48:a3:42:d4:6a:48:32:ed:01:71:0b:14:4c:0b:ae:
95:d3:74:4d:d2:f9:94:fa:b5:80:6b:b2:33:b4:6f:
d6:86:4a:db:5d:54:a8:15:54:d8:d8:58:1b:47:7b:
f7:7a:47:20:44:81:03:4b:48:fd:b1:74:1d:81:e2:
0c:11:08:2d:23:a6:82:de:75:c4:ac:c2:7f:0a:09:
97:98:c2:4a:72:bf:35:6c:9d:28:69:67:ae:45:ac:
39:c4:72:ff:56:4e:16:ca:f9:41:f3:97:f8:c5:6a:
d1:dc:bd:83:a6:0b:bb:5d:d0:99:e5:bc:47:74:4e:
71:8c:ed:1a:77:28:22:a6:44:a3:43:0d:46:d1:13:
dd:5a:da:20:99:c5:95:8d:ff:82:eb:fd:2e:bc:aa:
b5:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:31:1D:1D:92:93:B0:38:0D:11:7D:FC:AC:1D:BF:3E:BF:74:DC:15
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363265613a3a2f34382d3438203d3e203136393039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:62ea::/48
Signature Algorithm: sha256WithRSAEncryption
03:d2:bf:be:70:02:1a:a0:7b:68:7f:46:8e:e6:42:31:3e:f3:
2b:cf:8a:02:88:67:f0:15:58:7a:19:20:56:53:31:54:df:ec:
48:aa:5d:38:b2:8d:ba:72:b7:3c:f1:31:68:be:a1:9a:2d:e0:
63:2e:ab:29:0c:78:63:0c:86:4c:c5:83:ad:96:18:06:d1:4a:
e3:4a:c4:41:5a:35:f1:51:d1:2e:2e:5e:6d:a4:98:13:a2:0e:
c8:00:4c:61:2c:3d:e1:e4:eb:42:e8:6c:48:fe:9c:c0:58:7e:
da:46:59:e4:b5:17:71:a9:67:91:cf:0b:f2:ba:d5:44:56:28:
85:87:40:b6:c0:6c:df:b1:22:0e:e4:78:4b:c3:f1:8f:fe:20:
78:d7:f5:ec:49:a4:17:05:21:23:ff:58:c3:dc:56:5a:e8:fa:
84:29:ce:18:2d:65:6c:52:b2:cd:a6:3e:b7:43:fe:6f:3d:96:
65:80:d1:9a:c7:df:e5:7c:84:ff:1a:ea:e9:fb:c0:42:fe:a8:
d0:ea:75:60:74:d5:dc:14:a7:dd:72:38:e5:85:4d:30:f4:cf:
78:7b:45:2c:74:6b:bb:8f:a7:00:30:a3:0e:5b:55:fd:e3:13:
e2:6a:1e:4b:0a:11:22:f5:0c:4a:10:6a:eb:b2:91:88:35:12:
cc:66:73:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 06:23:53 2025 by rpki-client