Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363330643a3a2f34382d3438203d3e203136393039.roa
File: 326131343a373538343a363330643a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier: /PZpS7iDSzY/hb6ea7O/mRhyNcrzeVZRDZ8oEFfouWQ=
Subject key identifier: 45:F6:9B:A7:74:06:7B:0C:96:3B:80:F6:02:F2:BD:BD:C0:1E:C7:D8
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 0A7B53A74D512BB503399F80A1FE3515B17E8F3F
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363330643a3a2f34382d3438203d3e203136393039.roa
Signing time: Mon 19 May 2025 20:54:02 +0000
ROA not before: Mon 19 May 2025 20:49:02 +0000
ROA not after: Mon 18 May 2026 20:54:02 +0000
asID: 16909
IP address blocks: 2a14:7584:630d::/48 maxlen: 48
Validation: Failed, certificate revoked on Thu 22 May 2025 16:54:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0a:7b:53:a7:4d:51:2b:b5:03:39:9f:80:a1:fe:35:15:b1:7e:8f:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: May 19 20:49:02 2025 GMT
Not After : May 18 20:54:02 2026 GMT
Subject: CN=45F69BA774067B0C963B80F602F2BDBDC01EC7D8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:20:f3:58:6f:e7:d9:2f:79:ad:ca:19:64:a4:
8c:47:de:6c:37:94:a5:ab:25:e6:e4:58:9a:15:f9:
df:4a:87:09:44:e2:6e:39:d5:42:dc:a4:8d:62:ac:
d1:6b:ba:8f:b2:89:5a:94:95:a3:5e:90:ac:8a:ed:
33:7e:d7:fa:72:36:5d:53:ed:fb:79:72:49:7c:ea:
b9:e5:6f:ab:c3:c2:3e:3d:16:16:70:24:fd:55:3f:
b0:92:8e:41:7e:f4:da:34:b2:f8:bc:50:8a:af:aa:
6c:89:7b:9c:b2:c2:34:d1:3a:41:0a:15:f0:98:12:
68:c2:ca:04:0d:f5:f9:5e:25:cf:da:e2:de:aa:d6:
36:7f:9d:56:f4:cd:41:7a:f1:07:c2:3a:35:bc:75:
7d:fd:7a:e5:08:81:c7:0e:c0:c7:b2:e1:a0:a4:f2:
b7:d8:f0:be:4d:af:86:b8:cc:a1:fb:d4:63:a1:55:
d5:54:fa:cc:44:ce:7c:5c:f7:3c:0a:e3:ca:9a:34:
e1:72:c2:30:78:bc:0f:04:9d:56:88:c6:c7:1d:c9:
20:44:5d:0f:f5:89:fd:ab:93:5c:2e:f1:3a:d8:3f:
8c:dc:1f:87:98:d8:fa:ea:9a:4a:8f:f3:e8:b1:a5:
31:c8:e3:47:78:4f:e9:5a:0a:0f:97:e4:b2:58:2a:
6e:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:F6:9B:A7:74:06:7B:0C:96:3B:80:F6:02:F2:BD:BD:C0:1E:C7:D8
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363330643a3a2f34382d3438203d3e203136393039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:630d::/48
Signature Algorithm: sha256WithRSAEncryption
42:05:16:0c:b8:bd:3f:b3:d4:d8:ce:83:94:4b:df:a4:b9:ce:
d4:07:f3:37:48:34:24:d8:80:31:76:1c:1c:07:cf:53:d8:06:
11:ea:c6:67:10:90:c0:b0:34:e7:bc:ab:9d:8d:90:a7:4f:c4:
0f:bd:3c:a3:be:01:1a:7a:7d:45:f7:47:05:96:22:ff:5e:76:
cb:41:96:81:e9:a7:a3:66:e1:ee:aa:ab:56:50:d6:08:ce:5f:
ce:22:8d:ad:38:a9:55:72:20:d3:ff:65:51:de:cf:e5:da:34:
a5:c2:b7:f7:d8:8b:3a:bd:61:a9:03:9b:0f:c7:55:7a:a4:fd:
85:e5:d3:47:1d:81:e2:f1:df:03:97:30:8d:7b:20:17:0b:8a:
d3:27:32:87:ec:a1:e4:c5:ba:a1:b9:15:cd:26:9a:ce:ec:1a:
a0:83:d4:90:92:f3:4f:79:ad:dc:41:69:1d:4d:ee:d5:6e:a1:
28:af:4c:67:2e:87:5d:e5:d9:fb:4d:2e:54:22:5c:e5:c3:fd:
e5:79:67:6d:46:e0:70:1c:dc:4e:9a:27:f8:aa:6b:99:a0:c7:
f6:6c:16:53:c4:6e:9c:5e:54:74:53:96:69:6c:de:fa:2f:ae:
8d:3f:63:d1:29:08:16:72:5a:07:79:32:36:d4:33:38:b7:49:
c6:1b:b4:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 06:19:11 2025 by rpki-client