Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363334313a3a2f34382d3438203d3e203136393039.roa
File: 326131343a373538343a363334313a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier: 2YnMVRl5aBC2eTHE3Ie81o86zlz/cFEaBb0Yifr5cV0=
Subject key identifier: 01:9A:53:7A:43:B7:D7:C9:7F:6E:9A:47:E7:B6:EF:82:91:DC:B2:A8
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 391D0D66FE9240F0084F33B4383CC932713F5C5E
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363334313a3a2f34382d3438203d3e203136393039.roa
Signing time: Thu 22 May 2025 03:54:02 +0000
ROA not before: Thu 22 May 2025 03:49:02 +0000
ROA not after: Thu 21 May 2026 03:54:02 +0000
asID: 16909
IP address blocks: 2a14:7584:6341::/48 maxlen: 48
Validation: Failed, certificate revoked on Fri 23 May 2025 20:24:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
39:1d:0d:66:fe:92:40:f0:08:4f:33:b4:38:3c:c9:32:71:3f:5c:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: May 22 03:49:02 2025 GMT
Not After : May 21 03:54:02 2026 GMT
Subject: CN=019A537A43B7D7C97F6E9A47E7B6EF8291DCB2A8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:88:6f:de:d2:a5:cb:70:98:38:06:37:13:14:
a9:15:b9:89:64:20:fc:f0:40:fa:bf:54:c6:9f:37:
ab:9a:40:44:69:8d:75:19:94:97:ed:3b:46:36:89:
7d:8d:a1:0b:11:2a:24:da:b9:c2:5d:a4:a0:e1:ff:
52:3f:3b:a9:a9:73:a8:47:ff:44:3b:94:48:83:98:
f9:33:d4:51:4b:b8:91:ff:73:fd:bb:a6:cd:4f:00:
70:00:2f:0f:65:b8:95:c0:6d:de:69:89:6d:b2:9b:
bf:51:a7:91:17:38:94:b7:e2:69:b8:d7:1f:7b:2c:
5a:bc:79:4a:2f:fb:21:0a:d9:55:56:41:e5:39:77:
36:12:a0:a5:e8:b1:eb:3b:5b:3d:46:83:a5:06:a7:
27:79:e6:a9:21:81:64:95:e5:88:c2:42:e4:26:4e:
2e:cc:38:e9:53:c0:56:ea:39:17:34:ed:54:15:14:
01:b5:c8:4a:6d:fd:b4:0b:b7:bd:8e:47:33:22:e8:
23:f5:a5:fe:b1:9b:23:68:c1:d9:57:9b:d7:b2:78:
b0:56:36:4e:1b:68:b9:03:53:c3:6c:6a:1c:72:f1:
30:13:97:f5:db:cf:f2:69:57:7e:cb:a2:7f:af:d9:
22:1e:8d:38:b2:36:d1:33:a7:b7:29:2f:c8:61:e7:
67:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:9A:53:7A:43:B7:D7:C9:7F:6E:9A:47:E7:B6:EF:82:91:DC:B2:A8
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363334313a3a2f34382d3438203d3e203136393039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:6341::/48
Signature Algorithm: sha256WithRSAEncryption
52:10:1a:76:64:91:f7:9f:ec:aa:15:f7:db:a3:20:37:8e:01:
69:c4:a6:e0:08:1d:9e:b7:a9:10:cb:62:70:fd:05:32:68:af:
21:99:58:43:71:91:50:0c:2e:4a:73:7b:0e:f2:79:f6:1d:af:
fc:ff:3b:ff:a5:bc:67:db:37:b0:f9:f5:a8:af:19:5a:a2:80:
d7:43:ce:96:c2:20:f2:71:e8:7c:b0:c9:4d:f7:f9:3d:f0:3a:
4a:9c:a4:c0:94:a3:a4:b0:f0:42:d3:b4:0b:8f:8d:1b:41:82:
c5:eb:de:f5:de:87:1e:fc:b1:92:f4:e0:f2:3b:13:c9:64:22:
ef:24:cc:1f:a2:ba:1b:a0:10:49:d8:c8:ce:ad:94:9b:54:69:
f5:e2:6b:d1:c6:7f:e8:da:d6:6e:2a:fa:70:77:ab:4d:38:fd:
a7:cd:e9:34:86:f5:b1:6a:ab:49:43:60:b5:e2:39:b3:9d:12:
5c:5a:20:5a:a3:15:59:3e:56:33:85:6a:f7:69:8b:d3:0b:25:
0d:b8:39:49:00:46:52:75:91:6b:94:8c:fb:f7:b3:e6:79:d5:
f4:67:15:87:41:12:ca:34:61:cd:63:7b:60:53:9d:77:af:a7:
59:22:04:3b:57:ad:65:da:1e:db:0d:46:00:a6:21:7b:e9:d2:
42:63:b3:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 06:19:10 2025 by rpki-client