Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363331633a3a2f34382d3438203d3e203136393039.roa
File: 326131343a373538343a363331633a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier: YefZnFNVbYdLyGCiE/86RFEdNfhte/8YlWgUiPuf0NE=
Subject key identifier: F9:DF:1D:E3:97:35:6B:F3:30:BE:C2:CC:6A:52:11:B0:6F:21:CF:66
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 502755B1F7FFF980EF1AD5471A451E57B297E873
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363331633a3a2f34382d3438203d3e203136393039.roa
Signing time: Tue 20 May 2025 07:24:02 +0000
ROA not before: Tue 20 May 2025 07:19:02 +0000
ROA not after: Tue 19 May 2026 07:24:02 +0000
asID: 16909
IP address blocks: 2a14:7584:631c::/48 maxlen: 48
Validation: Failed, certificate revoked on Thu 22 May 2025 15:12:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
50:27:55:b1:f7:ff:f9:80:ef:1a:d5:47:1a:45:1e:57:b2:97:e8:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: May 20 07:19:02 2025 GMT
Not After : May 19 07:24:02 2026 GMT
Subject: CN=F9DF1DE397356BF330BEC2CC6A5211B06F21CF66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:92:76:af:8a:ca:44:50:94:bb:ea:a2:15:4a:
f2:67:5d:83:22:b4:e4:3c:62:4c:d6:be:b3:12:95:
89:ea:57:aa:d5:7b:b2:d5:e5:7e:82:33:4e:29:78:
ef:d0:d7:7d:0e:af:9d:a8:8d:db:3a:ab:ab:44:b2:
ce:aa:95:0c:80:f0:2c:39:d3:2c:4c:5b:53:a0:1e:
d3:f7:fb:0c:fa:f7:0f:0f:88:4d:f2:41:26:b2:d1:
4b:dc:74:5d:f0:ce:5f:02:d1:ec:03:26:93:99:de:
f7:44:c8:e0:86:9e:a4:06:98:fc:d0:36:31:8a:c1:
38:83:fb:e0:97:74:a0:5f:20:7d:f8:d7:e5:48:51:
91:0d:66:d6:1e:f8:62:ec:ec:a1:1a:8e:95:fb:27:
1c:0d:07:fc:ce:1d:91:b3:ff:f7:b3:12:27:01:e2:
04:c4:c8:4a:5a:97:41:b4:33:f9:1b:ce:ea:67:94:
9e:c3:15:65:bd:34:34:a0:af:36:7b:9f:fc:b2:93:
27:e9:b4:88:6f:ca:db:15:41:f0:f8:d8:ec:2f:55:
96:c7:b7:17:32:cf:78:86:93:b1:0d:a4:54:39:49:
d4:d1:47:b3:94:02:fb:88:56:f1:79:d2:79:88:cf:
b5:d4:42:c8:f1:7f:d1:44:ec:ea:e0:95:c0:02:30:
c6:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:DF:1D:E3:97:35:6B:F3:30:BE:C2:CC:6A:52:11:B0:6F:21:CF:66
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363331633a3a2f34382d3438203d3e203136393039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:631c::/48
Signature Algorithm: sha256WithRSAEncryption
ae:a2:af:12:9e:0c:ae:78:dd:3c:18:d3:54:7e:e4:1b:67:af:
b0:61:72:6d:0e:97:d4:2e:5b:3b:7f:a6:8d:39:86:af:b1:c3:
2b:92:c6:8e:e0:55:ea:dc:f9:6a:d7:0a:04:87:db:73:af:d9:
49:d7:f9:13:5a:11:dc:c6:6d:c1:47:00:dd:5a:82:ef:2b:07:
39:00:1b:c8:8f:68:71:df:82:3f:dc:f9:25:5b:1f:11:54:4b:
3c:64:fd:25:5f:9d:16:82:28:cb:c3:5a:bc:8c:c4:40:16:7c:
dc:f3:c0:93:77:7c:ac:5a:65:18:9b:1e:a9:54:19:f5:b9:ed:
7d:4d:1c:55:c0:c8:4d:7b:80:4a:bf:eb:c6:94:6c:aa:f3:3a:
6d:fd:a7:a9:64:c4:39:15:ce:27:14:0c:d1:e8:12:c2:70:e9:
ce:ef:ab:2b:2a:8d:9d:e3:fa:89:0b:6d:d6:11:46:8f:0c:6c:
3e:bd:6c:dd:d8:6a:be:e1:2b:0e:7b:2f:99:50:71:f1:03:1a:
2d:30:5f:93:51:5e:23:47:95:47:61:40:7c:7c:3d:1a:a7:2f:
f1:80:e3:6d:be:78:4d:67:fb:51:57:79:58:69:59:89:79:a4:
b7:51:b5:da:4d:a3:4a:94:96:c4:ce:15:53:06:db:93:49:cc:
15:91:56:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 07:29:35 2025 by rpki-client