Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363330373a3a2f34382d3438203d3e203136393039.roa
File: 326131343a373538343a363330373a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier: HOJZeNP1CWvQTMj6XtuOxLRANJi6YeOBP4pmZuVuMMk=
Subject key identifier: 5E:87:2F:EB:05:93:1E:1E:BD:7A:B7:13:9D:9E:89:0B:C9:37:A1:A1
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 463130742BEC63902A85B49E5C0C9013964C850E
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363330373a3a2f34382d3438203d3e203136393039.roa
Signing time: Mon 19 May 2025 19:00:01 +0000
ROA not before: Mon 19 May 2025 18:55:01 +0000
ROA not after: Mon 18 May 2026 19:00:01 +0000
asID: 16909
IP address blocks: 2a14:7584:6307::/48 maxlen: 48
Validation: Failed, certificate revoked on Thu 22 May 2025 03:48:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
46:31:30:74:2b:ec:63:90:2a:85:b4:9e:5c:0c:90:13:96:4c:85:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: May 19 18:55:01 2025 GMT
Not After : May 18 19:00:01 2026 GMT
Subject: CN=5E872FEB05931E1EBD7AB7139D9E890BC937A1A1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:98:83:84:95:34:90:e5:0c:85:77:a5:06:22:
ce:2a:a8:36:f7:c9:51:02:2a:e5:0b:bb:2d:47:13:
72:65:6f:17:f5:d2:85:d3:df:53:0a:86:e3:db:0b:
d8:43:f3:b6:d0:3c:b3:fd:5b:c4:fd:a9:f5:af:fe:
1a:2f:d2:85:92:4d:5d:72:c3:b5:56:a1:4b:79:48:
b3:bd:9d:55:b2:d6:71:77:eb:22:68:ef:74:b2:08:
d3:8b:f7:ed:9d:85:34:0e:d1:c4:d6:1f:86:3e:d5:
1b:69:14:18:53:f8:01:59:b1:99:98:9f:fb:6b:44:
c2:aa:2b:26:8e:87:15:d1:7f:91:a5:42:47:4b:74:
e7:45:f5:83:63:80:31:6c:a5:a2:7b:3b:fe:c0:3b:
91:48:9d:06:2a:2d:6d:8a:41:c4:cd:10:8c:ea:59:
b3:f9:46:9f:7c:89:62:52:e7:cd:3d:fc:6f:c2:e7:
aa:9c:8f:a7:6f:11:e1:b4:0c:3c:c6:04:af:19:74:
5e:01:7d:21:d9:a5:e5:50:22:d8:3b:79:c0:13:60:
48:8f:ed:f3:76:ea:cd:5c:dc:4a:3f:f1:eb:99:a4:
7f:bb:9f:63:58:75:8a:65:9c:0a:90:b2:c6:75:fe:
f6:5c:18:25:50:e0:45:7a:a5:3a:38:84:7e:dd:cb:
28:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:87:2F:EB:05:93:1E:1E:BD:7A:B7:13:9D:9E:89:0B:C9:37:A1:A1
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363330373a3a2f34382d3438203d3e203136393039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:6307::/48
Signature Algorithm: sha256WithRSAEncryption
a6:9a:b6:e3:5b:17:c1:e5:db:e9:45:af:2e:c3:df:a5:c9:bf:
75:0a:40:6d:a8:e6:a1:46:83:00:61:a3:9c:52:7f:61:84:96:
04:9c:5f:e6:2d:e5:62:cf:61:68:bf:b7:e7:5a:bf:4e:55:2c:
37:23:53:bc:e1:03:66:7f:1e:7c:69:42:e2:92:2e:3a:6b:69:
d4:be:c7:e2:f3:83:0b:c9:39:82:1c:b3:35:fa:30:cd:40:45:
97:07:c6:20:68:32:3e:57:d0:d2:0d:24:53:4e:df:6a:2e:57:
dd:6d:2b:60:82:c0:76:e3:42:99:f2:b5:96:e2:0b:ef:de:a5:
8e:3e:63:10:67:0a:53:46:f3:1a:ac:aa:59:20:c3:97:a7:df:
a5:f4:ca:7a:90:aa:41:81:71:e9:bf:c0:0e:28:a6:4c:bc:a4:
28:1c:e9:e8:74:aa:f8:a0:b5:af:dc:18:64:92:f6:91:87:2e:
22:96:a7:39:59:5f:68:76:8f:b0:68:84:ba:cf:0f:54:1d:5c:
13:bd:3c:92:e3:ad:1d:d1:24:f8:f1:99:c2:85:cb:de:aa:a3:
c7:b8:50:91:f2:d2:10:39:b2:8a:12:e7:20:dc:1e:4f:82:05:
2a:96:ca:12:6f:7c:44:27:56:a5:62:55:cc:e6:be:17:df:43:
04:23:b5:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 14:36:57 2025 by rpki-client