Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363335393a3a2f34382d3438203d3e203136393039.roa
File: 326131343a373538343a363335393a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier: Pcokz469WFlpNHSC/yu2WHJ6FAMJgmHfqiL8N8VZGv0=
Subject key identifier: 82:56:5B:BB:91:27:CA:C9:E4:BA:8E:72:C0:24:E5:4C:2F:DA:DC:E0
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 39DAB5F1A88DE05D6C138FD73A9A0C5781E71B0B
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363335393a3a2f34382d3438203d3e203136393039.roa
Signing time: Thu 22 May 2025 17:00:02 +0000
ROA not before: Thu 22 May 2025 16:55:02 +0000
ROA not after: Thu 21 May 2026 17:00:02 +0000
asID: 16909
IP address blocks: 2a14:7584:6359::/48 maxlen: 48
Validation: Failed, certificate revoked on Fri 23 May 2025 23:54:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
39:da:b5:f1:a8:8d:e0:5d:6c:13:8f:d7:3a:9a:0c:57:81:e7:1b:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: May 22 16:55:02 2025 GMT
Not After : May 21 17:00:02 2026 GMT
Subject: CN=82565BBB9127CAC9E4BA8E72C024E54C2FDADCE0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:ba:20:72:b4:87:62:fe:28:78:65:1d:92:cf:
aa:3c:a3:d6:e4:5c:1c:a4:b8:7f:04:ee:7a:5d:21:
45:ac:84:7d:dc:4e:76:ee:61:56:a2:43:ec:48:73:
b5:7e:29:ae:92:4a:4d:b9:d2:6a:5d:4f:3f:bf:d5:
f5:fc:ef:e0:6b:5b:30:3c:6d:07:1b:3a:1f:f8:49:
5c:f9:6d:5d:7b:e9:f7:12:b0:58:cb:cd:b5:7b:08:
c4:2f:1e:82:c1:c1:c8:41:f4:68:81:33:4f:c2:8b:
f7:9e:3e:05:25:9b:a0:66:ee:06:b6:94:06:76:b1:
65:63:6f:26:5b:a6:3c:6f:a1:ff:ef:22:c7:4a:d6:
47:95:a5:5d:e9:12:56:9f:81:eb:43:91:0b:07:3c:
d4:e4:97:a8:71:90:5a:ad:12:30:86:52:79:28:ac:
b4:7c:e4:13:39:42:da:f7:ac:2b:0e:10:84:e2:cc:
28:3d:90:f5:5b:7e:f0:bf:d8:7a:ec:d2:fc:c6:3a:
93:68:d0:1e:1a:b2:0c:7e:aa:df:8f:18:4f:61:bc:
b4:fd:9c:88:3a:6d:8a:09:87:b4:93:cf:e3:f1:b1:
4c:a3:77:c5:4f:f8:70:82:b3:78:7d:bf:c3:ea:0e:
92:64:b5:6d:a4:16:d4:ef:ee:90:4e:eb:61:d8:13:
30:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:56:5B:BB:91:27:CA:C9:E4:BA:8E:72:C0:24:E5:4C:2F:DA:DC:E0
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363335393a3a2f34382d3438203d3e203136393039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:6359::/48
Signature Algorithm: sha256WithRSAEncryption
64:a4:53:50:cd:84:8f:c3:f5:37:b8:49:0f:ff:6f:95:4e:0a:
dd:d5:df:ec:95:b0:82:7e:d5:33:16:ca:a3:98:15:c5:e2:12:
87:f1:28:4d:cd:9a:ef:4a:27:03:af:0d:45:bb:4c:ff:a0:08:
17:8a:3e:9b:42:d0:d3:f5:ab:b7:87:4e:b2:7d:56:26:d9:61:
b9:9a:7e:e4:4c:72:59:af:dd:f1:4b:92:ed:98:e7:27:6f:b6:
d7:bf:08:44:8a:e4:5f:aa:47:f1:97:25:ae:0a:c1:a8:0b:2e:
b9:06:41:09:a8:07:8c:c9:4e:a5:cf:88:3c:6f:45:d9:56:ce:
40:a0:ab:92:fe:d1:47:95:ec:b7:ae:36:ed:c7:eb:b4:40:0b:
e8:ee:5c:22:fe:6f:89:22:9e:2b:e9:65:0b:d1:4a:56:12:4a:
7e:f0:db:15:c4:e3:a9:76:75:96:5a:40:d9:66:7d:c7:e9:d4:
a2:e5:9d:bf:dc:e1:d7:ff:56:03:3c:69:99:ee:dd:e1:9f:0e:
59:56:3b:d8:48:74:83:f2:6c:fb:f1:b6:66:a8:0d:8d:b8:3a:
a5:65:0e:27:39:da:c1:0b:08:1b:33:31:2d:a3:ab:b8:cc:52:
3c:58:5c:87:34:e2:fb:6a:33:50:4f:6b:ec:bf:09:52:ce:37:
f4:95:f3:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 11:17:32 2025 by rpki-client