Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363334343a3a2f34382d3438203d3e203136393039.roa
File: 326131343a373538343a363334343a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier: kipE9md2rf8QSmtLpfq6LVuCn8WQ7Lw8pI7gU9TZpOY=
Subject key identifier: F1:14:C4:AD:87:BF:E5:5C:04:42:EC:47:A5:06:80:9A:93:14:06:93
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 586342EF0484C13D31302DBAAF6DBE8EBE9A0724
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363334343a3a2f34382d3438203d3e203136393039.roa
Signing time: Thu 22 May 2025 06:48:02 +0000
ROA not before: Thu 22 May 2025 06:43:02 +0000
ROA not after: Thu 21 May 2026 06:48:02 +0000
asID: 16909
IP address blocks: 2a14:7584:6344::/48 maxlen: 48
Validation: Failed, certificate revoked on Fri 23 May 2025 20:32:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
58:63:42:ef:04:84:c1:3d:31:30:2d:ba:af:6d:be:8e:be:9a:07:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: May 22 06:43:02 2025 GMT
Not After : May 21 06:48:02 2026 GMT
Subject: CN=F114C4AD87BFE55C0442EC47A506809A93140693
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:51:2b:65:5e:9c:1e:f6:27:7b:e6:2a:b6:76:
30:42:03:dc:d6:99:2f:ca:83:69:c9:73:87:e7:f3:
98:cc:74:f3:af:37:9f:8f:8b:53:c0:57:b6:d5:4f:
ba:ac:03:aa:66:53:e4:cf:70:bd:55:d1:b6:f6:39:
7f:10:88:ea:19:f7:a4:14:26:fc:3a:54:bf:20:7b:
17:3d:2f:f5:4a:d9:a1:20:d4:39:74:41:2e:a9:aa:
bc:d3:6f:6b:e4:47:5b:fd:0f:26:76:0d:f2:93:1b:
42:de:50:f8:4a:4c:9f:e8:15:71:ca:7f:11:b4:29:
14:f2:a8:86:60:5f:ef:7c:98:5b:70:4e:c3:d9:12:
7d:31:dc:43:12:53:68:b5:9e:a0:1a:fd:55:94:1c:
10:70:62:c6:97:75:9e:9b:af:e6:ab:53:42:e0:55:
d3:fb:1c:85:c3:d9:bc:bd:83:66:fd:60:60:64:f5:
cc:48:38:e3:62:06:99:2a:dc:61:85:bf:6a:84:8a:
b0:6c:ff:96:b3:18:a4:e8:0b:e5:f9:db:b5:99:c7:
ea:8e:98:2e:a5:2d:6f:04:f4:72:9e:ff:66:d7:30:
32:6b:f0:53:07:fc:67:0b:59:68:3d:dd:98:57:08:
27:d0:7f:eb:4a:52:56:26:6c:ad:5e:f4:fe:1d:00:
39:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:14:C4:AD:87:BF:E5:5C:04:42:EC:47:A5:06:80:9A:93:14:06:93
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363334343a3a2f34382d3438203d3e203136393039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:6344::/48
Signature Algorithm: sha256WithRSAEncryption
a2:94:d7:75:70:b7:87:90:0a:50:e0:df:e3:ac:33:6b:81:60:
be:30:d6:a0:b7:16:89:f4:8d:aa:ff:c9:d5:23:97:93:03:82:
9e:ef:46:fb:c1:ef:01:72:c7:15:1a:f0:c5:3e:cd:66:88:fd:
eb:0a:da:9c:d2:72:f0:0e:b6:fb:2a:3e:7a:30:50:db:f7:58:
51:95:08:05:87:b5:ef:c2:43:4a:d2:99:f3:1f:a9:93:01:6f:
29:cc:91:7f:3a:21:c3:39:3a:0b:ad:06:9f:ae:31:03:58:fb:
1c:93:81:0a:6c:07:d4:cc:0c:85:63:72:87:08:4a:45:47:54:
d3:1c:7f:1f:99:b7:16:aa:f6:d9:0a:3b:f0:db:62:12:61:79:
98:eb:69:5b:80:b3:79:f3:53:9d:31:5d:ef:8b:46:9c:1b:d9:
ac:c1:74:1e:5c:e3:39:56:dd:a4:80:6e:dc:80:50:69:a9:0d:
be:6b:f0:26:89:ac:ee:f1:fa:e4:15:ca:9e:74:c1:fb:4c:a4:
53:f9:ff:c4:08:48:53:a3:7b:b1:92:8b:36:54:a9:87:f7:81:
71:5f:c2:bb:ba:64:2f:06:04:cb:cf:a3:3c:e9:b4:05:46:97:
8c:eb:2a:54:0e:60:60:bf:f9:1b:d5:8d:61:d0:bd:cd:88:fe:
12:d4:42:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 06:13:36 2025 by rpki-client