Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363333363a3a2f34382d3438203d3e203136393039.roa
File: 326131343a373538343a363333363a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier: 1g0moGQ+nHRe8X6bLWVRznAi+eaxf8TTjHFjl58s0y0=
Subject key identifier: 89:49:83:E4:5A:53:8B:0C:64:F7:55:06:AD:8C:EF:20:16:25:E4:93
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 23D7E7EB47C5E9BEE3BFBB73805A211D7F64D9CB
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363333363a3a2f34382d3438203d3e203136393039.roa
Signing time: Wed 21 May 2025 16:00:02 +0000
ROA not before: Wed 21 May 2025 15:55:02 +0000
ROA not after: Wed 20 May 2026 16:00:02 +0000
asID: 16909
IP address blocks: 2a14:7584:6336::/48 maxlen: 48
Validation: Failed, certificate revoked on Sat 24 May 2025 15:48:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
23:d7:e7:eb:47:c5:e9:be:e3:bf:bb:73:80:5a:21:1d:7f:64:d9:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: May 21 15:55:02 2025 GMT
Not After : May 20 16:00:02 2026 GMT
Subject: CN=894983E45A538B0C64F75506AD8CEF201625E493
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:bf:56:e7:df:2b:06:1a:0a:d9:1e:88:9b:df:
76:09:9c:c7:b3:31:f5:fc:cd:56:17:e0:c2:c7:5c:
d0:24:b8:88:b7:1a:76:0c:ba:ee:0f:33:5e:da:03:
63:62:d8:2a:f8:a2:4f:ef:d7:c3:88:8d:0e:4f:b4:
8c:44:fc:1f:fa:86:ca:eb:f3:e5:47:9a:ea:58:2b:
64:20:9d:c3:d9:c1:03:aa:4e:d2:7e:37:c0:b2:b6:
af:8e:71:8e:37:3f:57:8e:9b:e9:00:4e:9a:0b:80:
17:35:87:2a:42:c1:48:af:4f:27:ed:d9:4e:31:dc:
e6:56:29:c6:13:16:3c:f0:e0:70:e9:68:13:18:9e:
0f:96:53:8e:b5:79:fc:34:9e:93:cd:3c:61:81:63:
f9:ae:7a:41:2e:f8:13:bf:23:78:e1:2a:83:a8:41:
36:22:63:bf:29:a7:11:fa:62:2a:3a:20:d2:1f:35:
a3:e1:2b:4f:48:02:c0:b3:64:d2:c2:42:6a:6b:16:
ba:95:87:0a:41:02:a0:11:38:b7:58:90:1b:94:cb:
29:10:cc:49:61:0c:86:b7:4b:3b:c4:b1:31:17:07:
f0:b8:a0:3f:68:68:ea:13:dd:af:2f:5e:43:45:ee:
88:c2:2e:8b:19:57:0b:6f:19:07:55:44:01:92:39:
ea:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:49:83:E4:5A:53:8B:0C:64:F7:55:06:AD:8C:EF:20:16:25:E4:93
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363333363a3a2f34382d3438203d3e203136393039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:6336::/48
Signature Algorithm: sha256WithRSAEncryption
61:87:e7:ee:e1:b4:f1:5a:a7:59:86:00:3c:6c:0f:9b:c1:f7:
08:9d:a5:78:7d:fe:ff:6d:0d:24:80:a7:cc:cc:07:ff:89:86:
d4:a3:22:5e:2a:8c:ee:de:93:5c:4f:2e:33:0e:b7:b7:57:ec:
ea:33:03:c5:ab:3e:00:d2:6a:b3:d0:42:5d:3b:f7:65:67:6c:
ff:13:a6:00:c3:b0:30:c4:ae:0f:62:99:f7:29:ae:66:71:7b:
97:b3:33:9d:08:36:5f:21:17:b9:7f:6d:c0:be:c6:31:6f:85:
ec:81:a3:d5:89:2d:b5:99:9a:16:8f:2f:23:33:26:ed:4e:5f:
c4:98:ea:aa:68:13:e9:99:fb:08:d1:98:12:0a:36:4c:30:28:
7e:49:10:c7:51:e5:62:d1:79:8c:19:2c:b4:84:3c:b1:b5:99:
79:d7:5b:6e:a5:ea:df:ef:86:88:63:a8:3b:fc:13:88:5d:14:
9c:ae:7d:5d:3e:9b:5c:e7:8b:ca:bd:a5:ec:51:0e:e3:9c:0d:
51:c2:e7:ba:3b:64:d0:ac:36:53:fe:65:8d:21:5a:7b:59:70:
15:e0:76:03:cc:9f:ec:e4:93:7e:e0:b5:f7:cd:88:0a:16:29:
aa:30:0c:3b:33:f6:99:22:04:2a:e9:b2:03:c3:fb:74:c1:36:
89:ae:e1:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 07:42:24 2025 by rpki-client