Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363330653a3a2f34382d3438203d3e203136393039.roa
File: 326131343a373538343a363330653a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier: KfgHZ9TwToR/cqLKwK+53OpHUzYQs2iiL8AxoSWog/I=
Subject key identifier: 42:B9:FF:63:2B:31:72:A4:1D:D7:D7:E1:36:61:A1:1C:35:F5:10:45
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 4E8D630E2602B0C4A52ED50729BED3F9E57268AD
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363330653a3a2f34382d3438203d3e203136393039.roa
Signing time: Mon 19 May 2025 20:54:02 +0000
ROA not before: Mon 19 May 2025 20:49:02 +0000
ROA not after: Mon 18 May 2026 20:54:02 +0000
asID: 16909
IP address blocks: 2a14:7584:630e::/48 maxlen: 48
Validation: Failed, certificate revoked on Thu 22 May 2025 16:54:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4e:8d:63:0e:26:02:b0:c4:a5:2e:d5:07:29:be:d3:f9:e5:72:68:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: May 19 20:49:02 2025 GMT
Not After : May 18 20:54:02 2026 GMT
Subject: CN=42B9FF632B3172A41DD7D7E13661A11C35F51045
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:d1:66:cc:92:2f:a4:94:53:db:61:d0:cc:71:
3c:7d:98:64:4b:a1:dd:6a:8d:fd:47:9e:18:82:47:
05:99:7c:01:d6:d3:7b:b5:6c:8c:b7:c4:e7:2f:e8:
43:85:02:7c:e8:fd:9f:49:0a:74:65:da:df:88:10:
d6:5d:b9:d3:5f:2f:0e:b3:bf:65:86:e0:a7:17:0e:
79:98:ff:a1:6c:f8:f7:b2:47:ec:ae:46:f6:74:c0:
8b:dc:bd:01:d5:91:49:ba:2b:54:7e:7a:f0:80:e8:
45:2f:b0:5e:13:46:7e:8d:49:33:d1:22:d4:75:96:
82:ab:5a:ba:a3:68:a3:d5:dc:d4:ed:68:28:01:b3:
9c:d9:3c:1b:0b:42:f4:d4:8d:dd:2a:3a:ad:c8:53:
9a:0b:c3:ea:a4:28:87:3b:7d:12:23:59:49:b7:1b:
99:a9:bb:8c:24:0e:5d:27:61:39:2d:46:76:cd:48:
25:72:06:38:12:1d:93:20:ec:a9:fb:b1:c3:cd:29:
2d:48:59:4e:63:99:b9:fa:ab:94:2b:72:a7:8c:99:
1c:ea:90:42:cf:4d:28:e2:99:f9:71:99:fb:68:dc:
31:04:5b:a3:ef:ae:79:16:f2:5b:3b:a3:6a:cd:a1:
06:2b:ff:9d:69:fd:05:f0:f6:d4:de:fa:5f:34:fc:
89:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:B9:FF:63:2B:31:72:A4:1D:D7:D7:E1:36:61:A1:1C:35:F5:10:45
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363330653a3a2f34382d3438203d3e203136393039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:630e::/48
Signature Algorithm: sha256WithRSAEncryption
af:33:0c:d7:58:18:63:58:39:53:17:5e:df:b6:10:3e:ac:5d:
27:df:d8:dc:87:0c:f3:20:30:4f:aa:3c:00:f3:55:30:75:3e:
e4:30:dc:4e:6e:09:3e:fa:d0:9a:c9:ed:4c:21:c2:e4:f0:bd:
86:10:e1:b6:e8:aa:b8:2d:fd:39:92:31:66:e1:5f:55:55:4c:
3f:13:77:2b:32:42:cb:f3:ce:cd:af:2a:5d:ea:c8:1a:dc:40:
b6:be:19:0e:4c:7f:dc:ba:6b:84:59:ea:33:05:5b:72:f2:13:
47:e7:0e:82:27:23:fa:7d:27:be:fc:d4:49:99:d4:08:a7:5d:
6f:41:82:04:21:92:09:d2:0a:8e:51:ce:4e:c8:17:fb:81:77:
f8:61:b7:8e:1b:f5:7d:1a:1f:0a:31:b6:f5:b3:26:e7:c7:34:
d7:51:bf:7f:2d:fe:eb:bb:63:8f:72:25:ad:a9:d7:c3:0a:6f:
db:aa:51:f3:92:15:ec:75:54:3f:ec:f4:a8:fe:4c:dc:31:d9:
38:0e:78:46:c0:ab:7a:63:b5:f8:49:2d:18:a2:8d:a2:ac:c9:
8d:25:70:73:5e:fb:c1:fa:da:2e:43:95:0d:2e:bc:d9:db:26:
d9:01:cd:b9:20:af:81:a5:1a:1f:4d:80:38:3b:8f:cb:73:b3:
59:b6:c5:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 06:21:17 2025 by rpki-client