Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363335623a3a2f34382d3438203d3e203136393039.roa
File: 326131343a373538343a363335623a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier: Tjb7QkCSyJg9g0Ms5RcdJq7MaqwRIqucF+GtLVdCeEk=
Subject key identifier: CA:BE:67:9E:56:E0:58:4B:C1:B8:3E:9B:61:D8:2B:5D:79:D8:F2:1C
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 3DDEB31F357CE60FFD17FDD66BEBF9F4FFC7D3B6
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363335623a3a2f34382d3438203d3e203136393039.roa
Signing time: Fri 23 May 2025 05:06:02 +0000
ROA not before: Fri 23 May 2025 05:01:02 +0000
ROA not after: Fri 22 May 2026 05:06:02 +0000
asID: 16909
IP address blocks: 2a14:7584:635b::/48 maxlen: 48
Validation: Failed, certificate revoked on Sat 24 May 2025 07:36:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3d:de:b3:1f:35:7c:e6:0f:fd:17:fd:d6:6b:eb:f9:f4:ff:c7:d3:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: May 23 05:01:02 2025 GMT
Not After : May 22 05:06:02 2026 GMT
Subject: CN=CABE679E56E0584BC1B83E9B61D82B5D79D8F21C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:22:c4:05:84:dd:e5:da:f4:a0:a7:5d:93:ac:
a3:63:01:00:ac:94:c2:c9:a9:87:35:cc:be:dc:21:
2e:64:53:62:5f:06:d0:1b:c7:9c:da:0f:7d:d1:ab:
e5:14:93:cb:31:a7:be:17:73:1e:b4:ca:ee:88:5c:
29:36:84:a4:e2:ec:bc:91:de:b7:c5:7a:16:44:ba:
2a:3a:83:50:f9:bc:39:b7:3c:ba:56:97:67:91:93:
b8:d6:70:1d:d5:18:5d:c0:63:63:cc:8c:35:ba:42:
66:41:58:2d:24:17:c1:ba:8e:03:c7:9e:63:d6:35:
df:7b:0e:0b:3f:b0:33:5c:d8:63:6e:51:de:dd:5e:
e8:1f:b3:5a:c5:0c:1d:7c:47:5b:b3:b3:a7:bc:4c:
ea:3e:06:ac:9c:9c:78:bc:4b:c7:fb:6b:fe:73:1e:
9e:55:50:e0:ab:df:08:3d:df:a1:ac:a0:d3:ab:98:
a0:52:15:d3:fd:7c:96:56:78:ee:77:3e:a6:f7:7e:
3b:87:79:4d:9b:18:0d:09:4a:8a:ab:55:2e:63:65:
d1:a5:c3:be:5e:e7:dc:29:33:07:b5:97:f9:5c:11:
c5:60:64:de:52:4b:1c:b5:78:86:9f:2a:d3:a9:e6:
93:63:c7:2f:c1:1a:48:39:5f:cc:60:5b:8b:9f:be:
e8:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:BE:67:9E:56:E0:58:4B:C1:B8:3E:9B:61:D8:2B:5D:79:D8:F2:1C
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363335623a3a2f34382d3438203d3e203136393039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:635b::/48
Signature Algorithm: sha256WithRSAEncryption
52:93:76:16:1c:27:cd:4f:2f:8a:32:87:0d:36:4c:81:f1:c4:
b9:74:3a:fd:38:b7:73:9a:61:dc:d8:f4:20:88:81:2a:5f:39:
78:c0:cb:42:23:0a:59:90:45:90:c4:43:d7:4f:8d:8a:16:02:
54:ef:cf:3e:3c:e2:57:3b:d0:08:e3:4c:c4:26:ce:93:8a:8b:
9e:10:66:b4:c8:af:58:04:40:5e:49:f1:46:5a:c0:28:2d:c0:
ed:f8:69:4c:d1:c9:8b:97:39:5f:ce:0c:6d:fc:3c:c1:67:df:
d8:44:61:6d:b4:99:22:8d:34:18:db:3b:4b:f1:42:a7:2f:74:
d7:95:1a:02:99:e1:15:3b:d3:17:dc:8c:79:de:29:49:77:f1:
e1:e8:9c:99:c5:3e:a7:9c:3b:6e:d1:2d:c8:c4:e5:79:15:6d:
55:9d:40:26:7c:61:8f:0c:8c:c1:02:a6:d0:44:d3:79:c7:96:
13:1b:20:3f:85:77:92:9d:4f:80:91:b4:40:1a:a6:d3:d4:b4:
3e:64:67:62:8e:49:59:e1:f2:51:f8:b7:32:b8:64:68:a2:8e:
d5:43:9e:c7:48:0e:b7:27:3f:78:c0:b3:c8:5c:f0:0a:e6:b1:
4f:1e:ac:71:f8:80:36:bf:49:97:4f:04:f5:ca:bd:73:91:8c:
c4:82:8e:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 06:11:06 2025 by rpki-client