Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363335373a3a2f34382d3438203d3e203136393039.roa
File: 326131343a373538343a363335373a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier: cgInpMBpgm+dPXO2Gz9A2JCQkMsuBUv6w1oKrkrepgk=
Subject key identifier: 09:B4:C4:ED:01:8E:BE:52:CB:44:C5:9D:7A:AD:6D:C3:D6:CC:6E:85
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 22ED322B70314070DBEEDC6C576F18B4A588CA08
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363335373a3a2f34382d3438203d3e203136393039.roa
Signing time: Thu 22 May 2025 17:00:01 +0000
ROA not before: Thu 22 May 2025 16:55:01 +0000
ROA not after: Thu 21 May 2026 17:00:01 +0000
asID: 16909
IP address blocks: 2a14:7584:6357::/48 maxlen: 48
Validation: Failed, certificate revoked on Fri 23 May 2025 20:36:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
22:ed:32:2b:70:31:40:70:db:ee:dc:6c:57:6f:18:b4:a5:88:ca:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: May 22 16:55:01 2025 GMT
Not After : May 21 17:00:01 2026 GMT
Subject: CN=09B4C4ED018EBE52CB44C59D7AAD6DC3D6CC6E85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:4d:ad:52:30:f6:9c:06:a7:9e:56:37:85:af:
3a:82:25:9c:d8:26:fc:f2:66:e1:8e:61:a8:f1:b2:
ab:9d:a0:51:fc:02:b7:34:93:f4:5c:f9:9e:7b:32:
6f:5f:15:09:5e:8d:4a:e6:b8:19:1a:c1:dc:73:65:
4f:f4:07:85:60:5a:54:b2:39:a7:e6:b1:f0:b1:a5:
0f:fb:d1:d5:6c:3d:30:0c:35:4b:88:8b:95:df:a0:
0a:be:29:39:91:6e:be:fa:5e:af:9d:f0:07:d8:36:
47:b8:77:8e:09:0c:f3:35:44:6f:f9:93:2f:2b:be:
d2:a9:a6:44:65:b4:80:f1:36:44:18:65:46:19:e9:
41:21:9c:0a:07:26:72:f2:12:91:68:88:df:06:7c:
85:b5:ef:2f:9a:c1:ea:05:5d:e6:29:53:7d:7f:51:
59:a9:50:62:cd:05:7a:08:cd:b5:20:2e:3a:96:49:
e5:c6:bf:46:ab:d9:a5:aa:7d:dc:06:d8:85:68:c2:
b5:cd:a9:e4:61:42:59:a3:07:07:45:c1:15:00:00:
91:c6:4c:2f:40:f0:11:80:e5:7a:02:94:ed:81:af:
bd:9c:22:31:2a:b0:9f:2f:3f:33:ab:f9:f7:4e:7a:
d6:39:3f:d4:ac:68:c1:eb:34:8f:69:e9:e1:79:3b:
04:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:B4:C4:ED:01:8E:BE:52:CB:44:C5:9D:7A:AD:6D:C3:D6:CC:6E:85
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363335373a3a2f34382d3438203d3e203136393039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:6357::/48
Signature Algorithm: sha256WithRSAEncryption
83:54:2b:4f:50:e2:bf:38:2a:91:52:8b:66:3b:fa:10:2e:c0:
6e:76:54:b1:37:a1:a6:c4:4a:51:4a:1b:69:6d:3e:84:a6:08:
08:18:ea:fa:1e:83:e3:5a:3d:46:0a:39:c8:b4:b4:5e:9c:e8:
f8:f7:16:0d:2a:5a:92:d0:47:48:0b:66:87:d4:21:8f:ee:d4:
83:f4:20:b1:d5:43:6a:54:b4:19:39:e1:33:7c:83:92:2e:88:
26:b9:00:75:a0:38:f5:f5:ab:a6:3c:b6:46:0b:ab:48:52:66:
d8:8e:2d:0d:4d:c3:eb:6e:30:08:ca:f8:88:03:e3:c0:40:13:
78:93:30:e3:fd:b2:2d:10:8a:57:a5:83:49:46:c5:11:37:7b:
f2:c2:8c:44:e5:44:98:12:f7:a7:6b:af:dc:f4:fd:16:a6:76:
a6:39:a1:c2:64:7f:be:68:7b:a5:b3:98:13:e7:16:97:ed:bd:
0d:b1:5f:78:fe:3a:26:8b:de:b0:93:f8:aa:b0:77:79:30:ba:
02:aa:f1:c6:69:3a:06:f6:58:03:79:68:a1:d2:84:1d:8b:64:
9c:08:1b:98:3c:31:76:63:20:ff:4f:d9:62:03:18:fc:f6:e5:
32:4a:26:61:32:0a:79:17:9c:fa:91:7a:07:25:6f:86:bf:68:
ba:5e:88:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 13:34:17 2025 by rpki-client