Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363266643a3a2f34382d3438203d3e203136393039.roa
File: 326131343a373538343a363266643a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier: jQsKVJXcmLeLoM49+YjOvld0RoQiTiH9Lq/96LPxjwI=
Subject key identifier: C5:63:6C:07:19:13:CD:5A:17:CB:D4:69:E8:96:EC:B9:48:C9:EB:AA
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 5B3639B02F1E9BC357C800D017ED5B194B56A11B
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363266643a3a2f34382d3438203d3e203136393039.roa
Signing time: Mon 19 May 2025 06:54:03 +0000
ROA not before: Mon 19 May 2025 06:49:03 +0000
ROA not after: Mon 18 May 2026 06:54:03 +0000
asID: 16909
IP address blocks: 2a14:7584:62fd::/48 maxlen: 48
Validation: Failed, certificate revoked on Tue 20 May 2025 15:18:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5b:36:39:b0:2f:1e:9b:c3:57:c8:00:d0:17:ed:5b:19:4b:56:a1:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: May 19 06:49:03 2025 GMT
Not After : May 18 06:54:03 2026 GMT
Subject: CN=C5636C071913CD5A17CBD469E896ECB948C9EBAA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:83:79:6c:ca:21:22:15:ef:d6:4b:8b:c0:e9:
e5:a8:c4:d2:ee:8b:71:0d:21:7d:0a:cd:87:67:f2:
97:83:4b:b4:3e:a4:81:84:b6:4e:2d:09:bf:dd:65:
af:b9:c7:f2:02:97:eb:7e:c1:b2:f5:a3:b5:03:a9:
96:cb:73:ef:4b:f4:31:c6:a1:ed:da:dd:6a:74:2a:
26:e6:1b:f3:51:91:9c:43:10:d7:4a:1e:91:98:78:
6e:04:b0:13:d2:3c:e8:6f:69:e2:e8:8a:4a:d4:40:
92:5f:ae:c3:e5:5a:10:aa:88:4d:43:23:b9:37:d4:
db:5e:1d:b8:2b:fa:b1:17:e2:1a:f3:b3:3d:6a:5d:
ac:46:db:16:34:24:e7:01:6d:bc:af:52:95:c6:5b:
ba:66:37:d7:cc:a2:7f:17:af:ba:16:1c:a9:72:16:
cc:7e:01:38:93:f1:c6:64:de:14:aa:20:fd:59:86:
d9:f5:95:fa:51:9b:fe:42:07:5a:2c:ec:88:ee:1d:
77:bd:46:d9:dd:75:90:15:9b:72:22:30:87:4a:37:
e9:55:24:22:3b:b7:da:df:ec:37:9a:95:b4:0d:3c:
73:b0:27:24:ff:9b:9c:60:30:cf:91:d8:e2:4a:d6:
e9:28:19:5e:4d:3c:36:22:cb:ec:83:51:ff:4c:fb:
56:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:63:6C:07:19:13:CD:5A:17:CB:D4:69:E8:96:EC:B9:48:C9:EB:AA
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363266643a3a2f34382d3438203d3e203136393039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:62fd::/48
Signature Algorithm: sha256WithRSAEncryption
89:86:78:26:d9:3d:6d:0a:7b:b6:e6:69:9d:7c:32:72:ac:66:
24:24:23:ee:96:d3:ca:dc:ac:e0:a7:c2:50:d9:3f:88:b0:60:
d7:9d:c0:f9:5b:b4:26:02:c9:f2:56:41:60:6b:14:e3:bd:e4:
8b:25:5f:f4:1b:b6:23:a4:1d:61:a8:f0:89:54:d6:2a:83:9e:
0e:37:ac:ab:f1:8c:3d:f7:64:41:00:c5:02:6d:66:22:bc:b0:
63:fb:78:68:c0:3e:3e:7c:39:8d:47:bd:96:15:07:19:6e:40:
fb:b1:07:a2:8a:3e:f0:e3:79:f1:e3:fa:44:21:bc:eb:dc:a9:
b4:f4:b6:28:ca:d3:10:a4:ad:fa:4d:14:48:45:45:ed:5c:69:
00:3d:65:b6:d1:87:29:88:57:4b:c7:51:f3:25:9f:61:40:d6:
f8:65:6e:e6:6f:96:31:84:6c:f1:ad:7a:f6:34:a5:79:93:db:
ca:8b:72:f5:6d:1f:64:77:ca:c4:a6:07:70:96:1d:e3:54:ee:
9e:0a:2e:fb:79:b5:1c:ea:53:2c:9f:4a:76:95:93:2d:b0:09:
c3:ae:76:0e:d1:50:91:b3:35:69:21:2d:82:c9:b4:d4:ff:d4:
d6:76:b2:18:9a:e6:ef:85:a6:70:f1:0b:9b:df:2d:23:77:7d:
c1:33:c8:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 06:13:04 2025 by rpki-client