Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363334383a3a2f34382d3438203d3e203136393039.roa
File: 326131343a373538343a363334383a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier: t4WI9RCByKVR8r+1LL7gLmm85c8yNt4Npfym9VPQwV8=
Subject key identifier: 40:1E:C5:95:AE:71:81:33:18:56:FA:D0:BF:BE:C6:3D:2D:A7:E7:4D
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 3D16B25D4442AEE7861BD534032FD03A10F2CF42
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363334383a3a2f34382d3438203d3e203136393039.roa
Signing time: Thu 22 May 2025 14:54:01 +0000
ROA not before: Thu 22 May 2025 14:49:01 +0000
ROA not after: Thu 21 May 2026 14:54:01 +0000
asID: 16909
IP address blocks: 2a14:7584:6348::/48 maxlen: 48
Validation: Failed, certificate revoked on Sat 24 May 2025 16:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3d:16:b2:5d:44:42:ae:e7:86:1b:d5:34:03:2f:d0:3a:10:f2:cf:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: May 22 14:49:01 2025 GMT
Not After : May 21 14:54:01 2026 GMT
Subject: CN=401EC595AE7181331856FAD0BFBEC63D2DA7E74D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:ee:29:8d:c1:ec:6d:c2:ae:70:5a:af:7b:97:
ca:e3:24:53:76:e2:7b:e4:5b:d5:31:49:41:f2:bc:
95:5e:ad:0d:78:a2:b6:b2:ab:d7:b4:1a:a8:ef:22:
ce:9a:69:6b:fd:54:e8:e2:9a:21:1c:ac:47:55:61:
c1:1e:d8:93:54:fa:27:b6:04:cd:37:6f:31:c1:d9:
65:ea:7e:68:60:04:d0:85:be:50:dc:62:73:1b:e9:
e1:9b:30:f7:47:5e:43:fc:ae:5f:12:4a:6b:b0:59:
a7:f1:68:12:a5:07:a1:ca:64:97:54:fa:de:fe:6a:
74:bd:e1:6d:a9:78:53:42:d8:b0:10:c5:82:6f:67:
08:cf:2f:47:a8:0f:24:a7:78:5f:2d:6b:62:2b:38:
30:2e:ec:79:96:5b:c3:24:3b:fe:f8:ca:af:0c:c9:
d1:44:8d:3a:75:d8:28:16:49:b1:aa:04:b5:03:28:
8f:e0:b4:c2:47:a3:5a:85:e5:2c:04:b8:63:de:77:
91:15:19:cd:35:cd:42:05:fa:df:6a:a5:49:34:a3:
e6:d7:43:f4:06:f4:46:9e:91:f1:6a:57:b7:be:b8:
ad:09:41:0a:c2:c9:40:66:43:46:d1:ad:67:8b:ad:
a9:d5:df:35:08:bd:58:bd:23:a4:95:e6:92:1a:22:
f9:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:1E:C5:95:AE:71:81:33:18:56:FA:D0:BF:BE:C6:3D:2D:A7:E7:4D
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363334383a3a2f34382d3438203d3e203136393039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:6348::/48
Signature Algorithm: sha256WithRSAEncryption
69:0d:93:50:dd:aa:b5:9b:ce:ef:5c:ae:79:4a:f0:85:53:11:
c2:5d:14:e5:8c:3d:19:6b:2c:c8:cc:58:40:a6:91:56:ed:39:
8b:af:f2:05:35:87:ba:82:77:1a:ab:13:45:87:fb:8a:36:1e:
f7:ae:84:97:e6:d0:14:d0:2c:8a:9f:bd:3f:97:58:6b:5a:a4:
41:a8:ce:eb:81:75:61:c5:e5:3d:68:59:78:fa:5e:c1:af:b4:
ea:1e:e4:43:14:5e:70:10:29:b2:7e:82:d5:33:30:cd:e0:3c:
b4:b3:f2:62:31:a2:cd:97:d6:75:e3:b7:2f:4f:5a:ea:0e:c6:
38:96:b0:80:69:c4:51:be:2c:e2:19:92:74:f7:2d:34:73:63:
77:60:c6:91:8c:40:62:60:33:6a:31:a2:55:d7:e9:b4:bd:d7:
9d:1c:52:37:87:1d:11:4d:03:0b:4c:08:ec:f9:17:6e:5f:23:
f7:ae:33:ea:1b:6f:c9:a2:bc:ae:29:d0:0e:eb:18:4d:f6:2c:
ac:2c:86:32:cb:5b:7a:c5:8b:10:74:0e:a7:d6:06:ac:f0:4b:
66:eb:d9:9c:50:a8:9c:64:e6:c7:fa:2d:2e:13:81:12:71:12:
e2:b5:ba:ba:4e:bc:11:19:63:4e:3e:2f:ea:7e:7f:80:e7:d2:
18:d6:20:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 11:03:49 2025 by rpki-client