Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363334623a3a2f34382d3438203d3e203136393039.roa
File: 326131343a373538343a363334623a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier: 0XAW7gHxkfRMz7tv7+dDijvQkNdA6uod2wFhsIa6wCc=
Subject key identifier: D4:F3:BD:0B:8F:BF:4B:D4:D5:70:F5:42:39:61:2B:3A:45:3F:E0:0D
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 5D38FB1F88DBD2A4C83B31C776CA96E20DAA0A1B
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363334623a3a2f34382d3438203d3e203136393039.roa
Signing time: Thu 22 May 2025 15:12:01 +0000
ROA not before: Thu 22 May 2025 15:07:01 +0000
ROA not after: Thu 21 May 2026 15:12:01 +0000
asID: 16909
IP address blocks: 2a14:7584:634b::/48 maxlen: 48
Validation: Failed, certificate revoked on Sat 24 May 2025 16:06:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5d:38:fb:1f:88:db:d2:a4:c8:3b:31:c7:76:ca:96:e2:0d:aa:0a:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: May 22 15:07:01 2025 GMT
Not After : May 21 15:12:01 2026 GMT
Subject: CN=D4F3BD0B8FBF4BD4D570F54239612B3A453FE00D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:f2:9b:9d:7e:de:37:d2:57:48:3c:00:e4:89:
c2:e1:48:47:ba:d5:dc:33:47:0d:66:11:c1:95:0f:
f0:22:e9:17:62:68:49:c1:8d:9c:db:d9:e7:12:ad:
56:01:41:45:cc:35:b9:b2:4a:d5:4b:02:46:13:77:
5f:7d:91:a9:45:23:ec:49:a6:40:37:72:f7:c3:dc:
2f:48:79:08:f8:e6:3e:03:45:36:22:bc:cd:85:dd:
8c:62:cc:2b:5c:a0:46:cb:12:b6:bf:cb:6e:01:a0:
0e:a9:1a:49:33:f2:60:22:a4:fe:9e:e5:68:1b:9e:
67:94:8d:db:ba:68:17:cd:92:6d:95:d9:67:e2:58:
d9:47:19:f0:51:79:e3:e1:5c:78:2a:17:b5:27:31:
0e:3a:f2:bd:8a:09:af:b5:03:ab:11:b4:37:4d:9b:
96:9b:72:c7:53:a4:a5:0f:35:7d:06:99:c3:52:83:
ae:86:8a:7d:66:d0:f2:80:42:d4:06:51:2b:08:67:
47:cd:15:b2:0c:04:21:c6:2b:be:75:7a:68:04:e5:
2d:01:81:5e:9f:34:19:a9:cd:e9:96:63:8a:1e:f7:
63:56:7e:b2:bb:02:53:48:df:25:fb:16:95:71:a8:
2f:76:5d:11:14:fa:1f:78:bf:ec:8d:ef:49:4d:a2:
93:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:F3:BD:0B:8F:BF:4B:D4:D5:70:F5:42:39:61:2B:3A:45:3F:E0:0D
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363334623a3a2f34382d3438203d3e203136393039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:634b::/48
Signature Algorithm: sha256WithRSAEncryption
a9:0f:db:94:68:cd:76:b8:b4:75:a9:13:9a:18:e4:d0:eb:9b:
25:fd:69:7a:89:65:ac:5d:4e:9d:b7:57:17:a1:3b:bd:2d:20:
1f:49:0d:fa:c3:5f:4f:31:a1:b1:98:c5:1c:d4:c4:82:14:df:
57:1c:7f:32:94:b6:20:c4:33:bc:c9:60:0a:91:9f:84:08:87:
76:58:0d:6d:53:4f:06:ce:88:a8:26:f5:d4:3b:73:f8:b8:9c:
e6:79:93:3b:ca:d1:02:61:74:f5:fb:67:19:2a:a3:25:f4:81:
55:82:17:21:b5:e3:40:a5:40:58:44:71:98:73:d4:94:69:fb:
3c:dc:37:1f:82:84:f2:d0:2f:0b:a9:65:34:1b:d9:f1:b4:31:
bd:1c:f3:eb:17:b9:c7:7f:4e:0d:59:7f:e4:00:8b:5b:0a:8d:
4c:58:e4:21:88:55:9b:9b:0b:36:e3:6f:0d:6f:6c:e9:71:4b:
07:1c:4a:a2:24:16:6d:d3:3e:7c:43:4d:29:9e:bf:a9:fb:31:
ed:63:47:78:be:cd:61:cc:e2:eb:c9:1d:05:9c:0d:de:a5:e2:
d2:0e:42:b0:d2:19:73:de:e4:93:a1:df:30:91:5b:bd:9e:86:
95:b0:43:0f:bb:94:17:7b:83:0e:2c:42:96:84:57:7c:8f:46:
b0:eb:f7:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 06:29:07 2025 by rpki-client