Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363330633a3a2f34382d3438203d3e203136393039.roa
File: 326131343a373538343a363330633a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier: dSj0TSF9EqVi4ctez/fj2WXMuqZEpGUwltkarJCaqU0=
Subject key identifier: 8B:18:AA:0D:BB:21:48:0F:18:C6:B8:FB:28:0E:A6:13:6C:E8:29:E4
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 32A42749AD70B2A7352DFC58B8CC0EE2546B9EDE
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363330633a3a2f34382d3438203d3e203136393039.roa
Signing time: Mon 19 May 2025 20:54:02 +0000
ROA not before: Mon 19 May 2025 20:49:02 +0000
ROA not after: Mon 18 May 2026 20:54:02 +0000
asID: 16909
IP address blocks: 2a14:7584:630c::/48 maxlen: 48
Validation: Failed, certificate revoked on Tue 20 May 2025 15:30:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
32:a4:27:49:ad:70:b2:a7:35:2d:fc:58:b8:cc:0e:e2:54:6b:9e:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: May 19 20:49:02 2025 GMT
Not After : May 18 20:54:02 2026 GMT
Subject: CN=8B18AA0DBB21480F18C6B8FB280EA6136CE829E4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:b6:00:39:08:2a:4a:e2:20:dc:16:3d:a0:f1:
37:60:e8:fe:f7:dc:36:66:6d:e4:00:34:89:d6:e5:
35:47:6a:b5:25:48:e6:f8:52:ef:fb:2f:e8:86:91:
cc:42:fd:08:ab:93:fb:cf:97:e7:cf:a7:47:3c:bc:
70:6f:c8:f6:21:97:0d:c2:de:45:a0:20:23:4d:e8:
88:7b:ba:05:dd:e2:25:e9:02:f1:e1:d6:e6:61:3a:
a0:67:4d:6c:8b:70:13:de:4e:49:36:01:84:2f:81:
29:b6:7a:33:f6:f2:fe:88:b8:25:b3:cd:7e:02:d8:
87:fb:3b:4f:ae:68:94:1a:76:13:b9:cb:10:31:ba:
9e:cd:ca:c4:67:65:e4:98:d7:70:ae:7b:73:e9:6e:
f2:b5:91:7f:31:31:63:7c:06:97:b3:5d:30:54:1d:
5a:ba:6d:ef:71:d2:f3:d3:eb:6b:1c:5d:18:80:dd:
41:be:d8:02:70:cd:78:97:54:60:68:15:14:97:2f:
02:e8:7f:89:b5:d5:e0:aa:29:54:e1:8b:2f:95:7d:
bc:6b:25:7d:10:0f:ee:f7:13:1c:3c:af:12:6e:5a:
27:80:c2:46:84:40:54:6c:c5:a4:28:b9:c1:79:1b:
47:3f:f0:42:58:5f:ba:3c:86:bb:65:51:17:c8:90:
0c:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:18:AA:0D:BB:21:48:0F:18:C6:B8:FB:28:0E:A6:13:6C:E8:29:E4
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363330633a3a2f34382d3438203d3e203136393039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:630c::/48
Signature Algorithm: sha256WithRSAEncryption
b0:46:00:e2:5b:1c:08:a9:1f:43:f2:ea:63:b2:dd:01:e0:32:
ca:3e:18:d7:d0:b6:b8:5f:6d:10:ef:b5:98:10:f7:d8:ac:53:
fd:17:33:42:bd:c2:d9:9b:a9:6a:50:f8:82:be:6d:97:37:9c:
11:68:53:48:07:46:5f:9d:42:7d:69:f3:f4:01:d3:d0:11:66:
4e:b3:1c:d4:05:28:ac:51:e0:80:0b:ab:a8:59:9a:4a:2d:e8:
55:6d:ab:0a:f3:08:9c:98:33:c7:8e:8a:70:62:4e:99:7e:3c:
a6:8d:4f:19:f8:b2:7d:47:c3:a9:80:39:b4:e4:b9:72:63:07:
c9:9d:e7:86:24:96:aa:2d:f1:21:57:c7:b4:3b:8d:24:bc:fd:
28:85:36:b0:39:2f:69:3b:6c:5e:21:2d:ec:4d:78:2b:25:d0:
90:b3:02:6a:db:53:e7:4f:a5:a9:44:81:77:a0:fe:d8:43:59:
11:90:61:59:9f:0a:e7:57:75:59:e5:0c:76:3e:1d:4c:fb:3f:
0b:7f:8f:1e:9c:fa:db:62:f5:44:2d:bb:49:ff:9d:af:3f:3b:
60:12:2a:3a:98:e4:77:d9:4f:cf:67:1c:40:81:53:a6:1f:75:
73:08:b6:2c:a0:2f:06:2a:50:ce:b9:60:a7:bb:ca:d3:9e:ab:
d8:de:ce:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 06:25:23 2025 by rpki-client