Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363332653a3a2f34382d3438203d3e203136393039.roa
File: 326131343a373538343a363332653a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier: bItXNL3pIpvwL/NBMKqzALx378lrtA5vyXLl1hjhRFY=
Subject key identifier: 5A:56:FF:B3:61:92:F7:9A:69:99:1C:99:6B:4F:46:C0:AB:9A:69:1C
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 6F74FD94F958E13CA17E8B4A63A4BDDC65AD70B1
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363332653a3a2f34382d3438203d3e203136393039.roa
Signing time: Wed 21 May 2025 03:54:03 +0000
ROA not before: Wed 21 May 2025 03:49:03 +0000
ROA not after: Wed 20 May 2026 03:54:03 +0000
asID: 16909
IP address blocks: 2a14:7584:632e::/48 maxlen: 48
Validation: Failed, certificate revoked on Fri 23 May 2025 15:30:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6f:74:fd:94:f9:58:e1:3c:a1:7e:8b:4a:63:a4:bd:dc:65:ad:70:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: May 21 03:49:03 2025 GMT
Not After : May 20 03:54:03 2026 GMT
Subject: CN=5A56FFB36192F79A69991C996B4F46C0AB9A691C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:9e:ff:db:4e:7d:54:a4:a7:84:18:d6:c8:00:
d0:45:ca:a3:5b:c7:42:49:1c:80:61:5d:36:fc:b1:
20:36:ac:de:c7:ac:ad:c4:05:1c:00:0d:36:8f:fb:
e0:95:45:40:d5:8a:94:e4:0f:fb:5e:0b:84:1f:7e:
ba:f1:8b:4a:c9:d3:2a:11:29:0e:b9:49:67:87:15:
8c:65:13:ff:de:eb:d4:c4:79:4f:40:9b:00:00:59:
1d:3c:b5:be:5e:1c:59:12:cd:dd:54:40:c0:90:0f:
5d:88:40:1b:51:8b:3f:d7:fd:5a:12:0b:5e:a4:54:
f5:36:b3:6b:6f:a1:df:e1:47:03:53:96:de:2e:a1:
c4:6f:dc:29:87:78:ff:6a:ed:92:d3:9a:d6:4b:68:
a1:a6:82:4c:3c:13:62:28:78:f6:04:37:42:fb:54:
99:42:ca:3d:b5:13:3c:a1:2a:73:f6:ba:36:28:f6:
26:78:8e:4a:86:10:53:8b:da:d8:71:4e:ab:55:c4:
41:ba:8b:4d:57:6f:47:23:7d:cb:4d:89:2b:ed:56:
19:91:8b:ef:1a:4a:d6:c2:c8:f7:a0:9a:c8:72:41:
b1:e9:e5:1d:01:14:a3:9e:55:39:30:a1:6d:05:42:
bc:09:56:9e:ad:93:0e:9f:38:85:20:23:f4:c8:7b:
43:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:56:FF:B3:61:92:F7:9A:69:99:1C:99:6B:4F:46:C0:AB:9A:69:1C
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363332653a3a2f34382d3438203d3e203136393039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:632e::/48
Signature Algorithm: sha256WithRSAEncryption
0d:fd:ce:98:05:43:4a:77:86:2c:40:90:d5:4e:e4:2a:d9:a2:
e4:d3:94:9e:af:ad:bd:2b:b3:23:53:c1:7e:68:e7:24:76:2c:
81:d6:e9:36:f3:77:68:d9:d7:c3:0e:ce:34:2a:c5:bf:8c:4b:
65:53:1a:80:b8:09:4c:e9:f8:d7:1b:f6:e2:cc:17:a8:f6:7f:
b0:94:45:eb:7d:da:76:f9:33:2c:5d:2a:97:74:e2:d8:08:e9:
e5:c9:6f:9a:b8:c5:51:73:33:a3:7c:8e:49:c6:b1:24:41:cc:
47:c0:72:cc:6c:da:64:11:ee:73:11:38:e9:51:60:02:ae:d7:
46:13:c9:94:47:6f:a7:b2:c4:02:79:32:ae:54:93:44:2a:e0:
bf:9d:53:b4:08:b9:82:37:29:18:11:dc:55:fe:eb:1d:b2:ca:
89:de:dd:60:d9:60:38:ae:c7:65:cb:4b:a2:c8:6d:e7:0d:06:
22:40:4b:8c:ec:3f:40:26:d3:5f:84:04:73:b5:5c:21:84:8f:
2d:79:5c:fb:5a:31:ad:85:de:36:ab:b0:4b:9c:5c:29:23:8e:
70:e8:d6:fb:c4:c3:57:68:1b:e9:88:e9:30:7f:70:de:cc:5e:
40:e6:d9:93:4b:e4:03:62:ef:72:95:b7:8b:8f:bc:19:b8:d8:
39:86:12:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 06:36:46 2025 by rpki-client