Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363330663a3a2f34382d3438203d3e203136393039.roa
File: 326131343a373538343a363330663a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier: 04zu1GJtwy39L0pquHrAravg75ulN7ALoLgFo4KZteE=
Subject key identifier: C7:23:A4:B6:40:1D:03:8D:4B:7D:C9:88:CC:D9:86:34:65:AB:3B:9E
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 567F9044407888EA7FB2E04302BD5AF933EB4C1B
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363330663a3a2f34382d3438203d3e203136393039.roa
Signing time: Mon 19 May 2025 20:54:02 +0000
ROA not before: Mon 19 May 2025 20:49:02 +0000
ROA not after: Mon 18 May 2026 20:54:02 +0000
asID: 16909
IP address blocks: 2a14:7584:630f::/48 maxlen: 48
Validation: Failed, certificate revoked on Thu 22 May 2025 14:48:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
56:7f:90:44:40:78:88:ea:7f:b2:e0:43:02:bd:5a:f9:33:eb:4c:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: May 19 20:49:02 2025 GMT
Not After : May 18 20:54:02 2026 GMT
Subject: CN=C723A4B6401D038D4B7DC988CCD9863465AB3B9E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:56:94:4c:61:b1:29:2b:97:13:be:25:6a:1a:
28:c2:01:d6:f5:13:ce:f3:83:4c:67:e2:ba:7c:62:
9f:30:06:c6:9c:97:eb:0f:76:cd:c8:9b:29:be:b0:
23:5d:ca:61:d5:75:e0:99:80:d7:74:96:4c:8c:53:
0f:dc:c8:06:5d:d2:47:2b:ae:47:6f:2e:32:4d:dd:
ef:98:32:16:32:f0:8a:e7:74:2b:f9:ac:b9:2e:24:
bc:8d:44:dd:94:ac:e0:e3:b4:ca:d5:6f:d5:1d:07:
4f:69:4a:83:f9:79:bd:36:b1:aa:ca:9f:1b:e5:19:
ee:bd:cf:49:dc:56:16:73:19:06:01:78:35:38:35:
9c:92:7b:de:81:b4:ac:9f:93:bd:b0:9a:c5:0f:b6:
2e:ac:94:41:6d:87:2f:39:3f:6a:95:66:74:7e:61:
9f:e5:de:68:5a:37:d3:c6:9d:20:4f:68:f9:8f:d3:
d6:72:93:6f:3a:a2:8f:2f:0c:fc:22:0c:5d:2e:77:
5c:99:e1:fb:fc:25:2e:0b:d8:aa:fd:5b:b9:44:22:
bb:1f:39:0b:b5:d4:38:3f:db:27:aa:22:20:9e:6b:
32:ed:98:16:8a:d1:f2:d2:fd:e9:47:11:77:8b:09:
72:76:88:ba:2b:fd:12:46:a9:20:03:18:86:02:48:
f3:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:23:A4:B6:40:1D:03:8D:4B:7D:C9:88:CC:D9:86:34:65:AB:3B:9E
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363330663a3a2f34382d3438203d3e203136393039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:630f::/48
Signature Algorithm: sha256WithRSAEncryption
0a:39:78:e1:13:97:11:fe:f3:bd:15:75:92:13:cb:f0:f9:88:
fd:b4:7c:66:ea:4c:77:ee:ee:01:49:c8:a8:ed:09:e4:32:9a:
f3:81:22:76:c4:9c:8c:3e:a6:97:eb:80:b7:a9:dc:c1:58:ac:
ae:9a:e8:af:4b:24:dd:b8:c2:8f:61:36:cc:6f:e8:77:93:df:
93:ea:da:8d:54:9c:6f:de:ea:f3:72:f6:75:4c:47:54:f2:3e:
0d:d8:87:5d:3b:2c:6c:36:29:8a:b4:95:78:a3:63:31:63:c7:
1f:98:ea:85:0f:5d:1e:4a:a1:4b:fc:72:26:b8:4d:98:c1:10:
27:88:99:56:0e:9a:63:5b:cb:a9:33:c2:43:f5:3a:d1:4e:24:
d8:c5:aa:74:5e:3c:92:b2:97:2e:31:5a:40:63:76:82:7f:1d:
be:fe:5a:dd:2f:71:b0:8f:12:22:58:b9:c7:3e:44:74:10:57:
af:0b:71:93:36:d4:9a:3e:5a:d5:75:7d:c3:dc:72:89:ea:d2:
2f:07:13:51:2c:3f:79:0f:ce:3c:c0:6c:90:a0:43:11:f8:0b:
c0:89:52:ee:5f:51:44:68:a4:fa:9c:73:2c:aa:39:79:af:55:
2a:2d:b8:fa:2e:60:4d:64:dc:66:91:a3:d0:c3:a5:57:1a:19:
7c:b1:ed:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 06:42:27 2025 by rpki-client