Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363332643a3a2f34382d3438203d3e203136393039.roa
File: 326131343a373538343a363332643a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier: /dyRwT5mplwg/8vP4xl1MEFSvKSjZdIwkreEUyVpgQU=
Subject key identifier: 09:46:32:19:E7:93:C6:08:45:73:0A:4B:9B:FB:21:F0:A6:AE:89:74
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 332B5301B79487F5B9F413DA9D509FAE3484D384
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363332643a3a2f34382d3438203d3e203136393039.roa
Signing time: Wed 21 May 2025 03:54:03 +0000
ROA not before: Wed 21 May 2025 03:49:03 +0000
ROA not after: Wed 20 May 2026 03:54:03 +0000
asID: 16909
IP address blocks: 2a14:7584:632d::/48 maxlen: 48
Validation: Failed, certificate revoked on Fri 23 May 2025 16:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
33:2b:53:01:b7:94:87:f5:b9:f4:13:da:9d:50:9f:ae:34:84:d3:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: May 21 03:49:03 2025 GMT
Not After : May 20 03:54:03 2026 GMT
Subject: CN=09463219E793C60845730A4B9BFB21F0A6AE8974
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:75:eb:15:e9:e2:89:6f:fa:a1:7b:73:51:f7:
b8:fd:ea:3d:33:c8:f4:79:6e:58:14:1d:3b:7e:81:
35:bb:15:e7:53:97:8b:c1:29:e5:91:47:50:6f:d8:
05:5d:7c:58:c8:6a:e9:1d:a2:a4:f5:fc:a0:17:42:
5c:87:15:3a:d6:94:3a:2c:36:2f:c4:2e:21:de:32:
cd:08:cf:98:2d:bb:0c:cc:c7:1c:63:00:2c:3a:b3:
10:fc:eb:fe:1c:10:70:b4:e7:c3:c4:b0:35:32:2a:
3c:9b:c4:83:68:92:b2:ef:12:68:18:48:43:07:d4:
15:6b:07:fc:09:f0:81:5c:aa:f0:ee:42:b8:10:86:
7c:a8:b3:0f:7d:b1:e9:d2:de:ad:6a:f1:34:65:ce:
5d:90:1b:f1:84:61:a9:b7:58:ae:3c:25:00:28:0c:
7b:f6:f7:6e:a8:45:2c:66:15:f1:37:4a:41:c6:48:
3b:0f:7b:a1:94:c3:95:ce:03:12:af:04:8a:5e:73:
7f:6f:0b:cb:bb:69:ab:93:f4:39:fe:b3:e1:70:9a:
c6:e2:4b:50:d6:67:ff:79:3c:99:77:84:60:45:e6:
74:ca:f3:89:63:df:3a:6e:c2:8c:00:55:68:d4:9d:
97:86:b4:22:f8:1f:d0:67:c6:7f:50:12:d3:8a:4b:
ca:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:46:32:19:E7:93:C6:08:45:73:0A:4B:9B:FB:21:F0:A6:AE:89:74
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363332643a3a2f34382d3438203d3e203136393039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:632d::/48
Signature Algorithm: sha256WithRSAEncryption
8e:68:f3:f0:73:47:e3:04:74:a8:8d:25:35:9b:2e:fe:b7:8a:
d6:f4:9d:95:05:92:a1:23:88:2d:5c:ca:89:24:05:09:6d:39:
1a:d3:a8:ef:c6:ee:fe:76:35:d3:cd:d0:73:12:cb:c8:66:1a:
4c:fb:42:9e:0a:d6:28:12:85:d5:0b:31:b6:38:3a:b2:bd:4f:
48:fb:9f:e9:ba:f2:37:44:7d:44:f4:83:33:23:d5:ce:17:ff:
ac:1a:d6:b1:c5:d3:57:4c:e8:8a:ec:50:96:02:a2:6e:bd:dd:
80:b3:31:63:61:77:4c:5c:5f:b3:2a:bd:d4:d7:3d:e2:ec:52:
88:2b:a7:4b:92:1f:a4:62:4d:d2:b8:57:33:a4:3a:3e:fa:6e:
90:76:9e:ab:96:53:e2:73:c9:07:2a:c4:d4:bb:fa:0d:a7:27:
71:e8:4a:b7:fa:b4:5d:93:ae:63:f1:2b:9c:e1:08:42:7d:55:
83:1b:86:90:0a:ec:88:8c:0b:32:c2:e3:b1:d1:3a:07:78:87:
e1:ee:1b:f9:66:47:55:e4:f3:42:af:8f:67:d3:f1:65:e6:59:
46:88:c3:17:08:12:80:92:32:63:a4:6b:36:df:d3:b0:ee:b8:
93:ee:0c:a1:ed:c6:31:88:bf:5b:33:c1:06:8c:33:1d:9f:61:
39:2e:80:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 07:21:02 2025 by rpki-client