Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363333383a3a2f34382d3438203d3e203136393039.roa
File: 326131343a373538343a363333383a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier: 1UsP83Xxq1G6rOWltUMRvgz94ZysQNe88gWW66eyOag=
Subject key identifier: 09:06:71:06:7C:59:E5:38:4A:D2:57:97:F1:06:69:9C:86:47:27:0D
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 44F1943B82477576775D66D95BAA259DB2E35C41
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363333383a3a2f34382d3438203d3e203136393039.roa
Signing time: Wed 21 May 2025 18:12:02 +0000
ROA not before: Wed 21 May 2025 18:07:02 +0000
ROA not after: Wed 20 May 2026 18:12:02 +0000
asID: 16909
IP address blocks: 2a14:7584:6338::/48 maxlen: 48
Validation: Failed, certificate revoked on Fri 23 May 2025 20:18:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
44:f1:94:3b:82:47:75:76:77:5d:66:d9:5b:aa:25:9d:b2:e3:5c:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: May 21 18:07:02 2025 GMT
Not After : May 20 18:12:02 2026 GMT
Subject: CN=090671067C59E5384AD25797F106699C8647270D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:eb:da:1b:25:0f:b2:7c:24:00:84:5d:85:c1:
fc:e4:99:39:6d:e9:28:b5:a7:30:88:b9:fb:c6:44:
e4:80:10:3c:4f:e8:8c:20:5d:e5:6e:44:b1:47:cb:
4b:bd:d0:80:84:23:58:59:ee:a2:70:8b:4a:45:25:
20:e6:39:a8:11:a5:d9:74:1a:1f:56:9f:a1:6d:fd:
0c:83:22:66:c2:85:90:d5:9b:31:e1:e9:5c:e5:00:
ae:bc:97:59:eb:9f:11:eb:90:1c:a3:93:5f:a9:20:
08:01:55:c8:e1:f0:05:ea:d4:1c:83:8e:c3:4e:a7:
4e:71:6c:03:71:0b:cf:42:ea:79:e3:4f:f6:b1:68:
02:16:cb:fd:40:50:72:30:77:d8:39:97:b8:fb:51:
c2:98:5d:f2:63:6d:29:f2:f4:d5:8d:2c:23:6e:e6:
23:b9:57:01:9d:b1:1a:34:a2:76:9e:e5:7d:92:8d:
7e:ce:81:c4:38:b4:66:33:7f:73:68:e0:56:92:a7:
44:51:ef:0a:54:23:64:e7:fb:f2:e3:2b:7e:a4:08:
d7:0a:f3:36:07:28:14:bc:1f:0b:9e:71:1d:a4:4d:
41:72:71:8f:ad:19:6e:7b:1f:03:8a:60:5c:33:b0:
bd:41:c8:55:98:58:1d:ed:8b:9b:77:41:6e:ec:e3:
08:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:06:71:06:7C:59:E5:38:4A:D2:57:97:F1:06:69:9C:86:47:27:0D
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363333383a3a2f34382d3438203d3e203136393039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:6338::/48
Signature Algorithm: sha256WithRSAEncryption
91:51:66:15:df:74:3f:d2:30:e2:15:59:90:3f:01:59:08:ae:
59:f7:17:df:44:f2:49:be:6b:d0:2a:0d:55:2e:d4:85:15:b1:
7f:a7:71:1a:7a:0f:09:82:6a:d6:f6:40:41:a2:6a:97:ce:e3:
76:42:35:85:0f:1f:55:8d:8c:ce:75:8c:58:bb:c4:f7:f3:fd:
84:7d:bd:ec:93:bb:0c:d7:e8:79:f5:ef:5d:3c:1e:e8:7d:f9:
c7:bd:9c:29:a0:8a:7c:95:51:1f:eb:19:2d:28:28:fa:fe:96:
0f:eb:7a:c0:ba:1a:9d:3d:bd:69:11:04:d2:9b:48:52:61:ee:
07:0e:be:a5:17:a1:13:3a:fd:de:05:7f:13:e1:79:c9:21:0d:
d0:fe:4e:a7:59:3d:33:e3:a5:de:eb:8e:14:f9:01:50:da:65:
92:26:b1:16:e7:58:4c:62:36:e1:b7:84:9a:c8:a5:fa:6f:c8:
fe:b6:c3:ac:57:ac:d6:80:5c:9b:3d:96:46:11:97:91:02:59:
63:63:5c:43:a8:98:7d:e3:53:68:25:b4:4d:80:58:de:26:8f:
4d:89:a5:0d:29:91:a1:08:b2:0d:09:bc:d2:94:39:ce:53:3b:
e5:c4:60:8d:76:fe:6b:f8:bf:bc:5d:61:d4:9b:ca:61:fd:92:
c4:37:8f:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 06:33:58 2025 by rpki-client