Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363332363a3a2f34382d3438203d3e203136393039.roa
File: 326131343a373538343a363332363a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier: E7O6kcxhk8w64oCz+VoZmU5gFww4m9lBiS1m++ssoWc=
Subject key identifier: 94:EC:C4:10:C4:D3:C9:FA:5A:A9:56:E6:82:3C:10:4E:1C:C1:22:50
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 4351F189E0D4A8F59D984C490FB93FEC9A139B7E
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363332363a3a2f34382d3438203d3e203136393039.roa
Signing time: Tue 20 May 2025 18:12:01 +0000
ROA not before: Tue 20 May 2025 18:07:01 +0000
ROA not after: Tue 19 May 2026 18:12:01 +0000
asID: 16909
IP address blocks: 2a14:7584:6326::/48 maxlen: 48
Validation: Failed, certificate revoked on Fri 23 May 2025 02:54:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
43:51:f1:89:e0:d4:a8:f5:9d:98:4c:49:0f:b9:3f:ec:9a:13:9b:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: May 20 18:07:01 2025 GMT
Not After : May 19 18:12:01 2026 GMT
Subject: CN=94ECC410C4D3C9FA5AA956E6823C104E1CC12250
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:c5:75:43:6b:57:49:08:95:68:d5:a3:96:69:
ce:b3:60:23:a0:1d:18:39:20:0f:43:8a:8d:43:7b:
f3:20:ed:c1:24:8c:54:b7:5a:57:dd:e5:94:31:9b:
4c:48:27:dd:6b:0a:4f:0c:17:3e:38:29:3a:9b:43:
c3:bc:5e:39:18:7a:d3:50:5e:d0:74:57:50:10:ff:
2f:3a:26:19:53:7e:33:d3:b1:15:db:a0:43:83:f6:
8d:61:40:7c:e6:c7:63:2c:6a:71:9a:e2:0d:48:d1:
7a:38:08:44:30:f8:9d:99:ee:d8:db:bf:ad:c8:1d:
c1:78:4f:9e:70:ac:9a:5a:e5:24:72:a7:2d:4e:c1:
ab:e4:7f:ac:03:fa:84:04:c7:8d:55:ca:6a:2d:81:
5a:ea:28:48:13:79:60:2f:04:c1:ec:f6:33:2b:d0:
a4:ee:1b:6f:1e:05:d2:8d:7a:98:65:6d:08:ce:c9:
1a:b3:11:31:5f:52:c1:7d:36:7b:db:c9:fe:71:a5:
83:1b:de:85:e6:60:5c:55:35:ad:bb:2a:89:1e:92:
4a:ad:75:dc:f5:92:c7:4a:40:46:67:53:8d:cb:82:
3f:49:b9:53:c2:6e:17:88:77:7c:25:bf:9d:a4:ac:
a5:af:db:d8:a8:6d:7c:be:21:aa:43:2f:d8:50:bf:
3c:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:EC:C4:10:C4:D3:C9:FA:5A:A9:56:E6:82:3C:10:4E:1C:C1:22:50
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363332363a3a2f34382d3438203d3e203136393039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:6326::/48
Signature Algorithm: sha256WithRSAEncryption
5c:8d:74:52:1e:7f:e3:5a:26:85:41:6a:17:49:4b:44:b8:06:
7f:d9:8f:95:c3:7e:be:0f:2f:e7:ba:39:38:0b:6e:ea:e0:e8:
d8:95:2f:37:81:ed:91:65:39:4e:7b:a7:6e:0a:06:c5:30:96:
19:d8:80:f4:02:b0:19:63:75:ec:15:84:76:6a:5b:d0:ef:4e:
7b:a0:78:ee:23:2b:fa:38:e2:f1:44:6c:82:1e:1c:5e:10:c6:
64:45:2a:ea:02:c5:07:25:fd:d8:b3:3a:11:89:3f:6e:5f:44:
40:29:83:06:b1:12:bb:d5:0b:40:04:f0:32:7c:41:42:e7:a7:
83:d9:2a:89:00:6b:5d:ef:da:a3:f6:18:2b:d3:06:5c:f8:1b:
f8:4d:58:75:3f:a4:9a:76:16:87:92:ae:92:7b:fc:bf:28:49:
4e:48:9f:9d:ef:44:3e:e8:8c:a1:97:0b:e5:96:1a:43:47:72:
d0:0d:1c:af:19:89:a3:b2:06:18:68:c0:df:bd:92:7f:56:df:
c5:0d:47:a7:18:8e:4a:b9:d2:f8:e8:9b:58:8e:e3:5c:d5:01:
a6:b3:0f:8c:e6:af:8b:25:7c:e1:ca:61:2b:76:27:57:1b:9d:
14:3b:c4:0b:99:66:42:b5:93:b6:c9:f7:a8:5b:2e:8c:d4:65:
ef:e2:6b:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 06:30:20 2025 by rpki-client