Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363336333a3a2f34382d3438203d3e203136393039.roa
File: 326131343a373538343a363336333a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier: mVNlCykCMhur3zPc7nmcTGrrEVRZxsjYHCgWNCzZb8E=
Subject key identifier: 17:19:1D:1F:A3:3C:11:CC:ED:36:69:8B:B2:81:C2:30:BF:A8:F9:14
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 16BC8564C35125A69EAE98F49D885E7A4543672D
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363336333a3a2f34382d3438203d3e203136393039.roa
Signing time: Fri 23 May 2025 08:00:02 +0000
ROA not before: Fri 23 May 2025 07:55:02 +0000
ROA not after: Fri 22 May 2026 08:00:02 +0000
asID: 16909
IP address blocks: 2a14:7584:6363::/48 maxlen: 48
Validation: Failed, certificate revoked on Sat 24 May 2025 16:18:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
16:bc:85:64:c3:51:25:a6:9e:ae:98:f4:9d:88:5e:7a:45:43:67:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: May 23 07:55:02 2025 GMT
Not After : May 22 08:00:02 2026 GMT
Subject: CN=17191D1FA33C11CCED36698BB281C230BFA8F914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:df:e1:42:c6:fe:95:be:32:0f:77:e8:8a:b0:
00:36:97:1b:a6:48:0c:88:b7:b9:67:e6:0f:fb:6c:
fb:a1:92:f3:af:42:9d:5f:49:aa:4d:6c:2c:75:6b:
6e:9e:57:c0:e7:b4:28:81:70:4f:72:a8:3b:55:5d:
0e:e1:2a:57:a1:70:46:06:30:67:7d:7b:13:11:e2:
69:7d:6b:87:11:22:97:93:63:9a:b3:70:8d:2a:15:
c9:06:b8:22:3c:25:e1:03:6e:7c:fb:a3:3f:d2:8b:
62:21:52:6e:d2:8f:32:0c:25:e3:05:13:2b:03:e4:
f8:01:f1:d3:a4:b5:e8:be:7e:38:90:24:9c:2e:d6:
9f:38:ea:64:40:81:27:cd:a3:2f:9f:53:ba:28:8d:
97:62:38:fc:64:ec:47:81:1d:d9:b5:51:87:05:91:
f9:b4:0f:89:81:69:7e:a2:4b:3a:c9:68:a3:17:81:
70:38:b4:81:a1:3a:37:f1:9a:c9:96:15:83:0d:04:
80:6a:3b:7f:7c:2a:06:16:4b:d8:21:ec:3c:97:1c:
dc:f3:b1:c5:26:d1:4d:08:be:9d:a3:e0:e6:7b:d5:
6c:b4:02:8f:34:bd:93:1e:9d:f2:67:5d:89:b5:a0:
c4:39:d9:3c:06:82:23:7e:fb:82:1c:e5:1e:d1:35:
b0:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:19:1D:1F:A3:3C:11:CC:ED:36:69:8B:B2:81:C2:30:BF:A8:F9:14
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363336333a3a2f34382d3438203d3e203136393039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:6363::/48
Signature Algorithm: sha256WithRSAEncryption
43:9f:f2:d7:a0:b8:9c:7e:1f:81:4b:a0:ee:67:8c:13:fb:06:
cc:3a:57:e0:aa:01:da:56:6f:c0:8a:a9:86:a7:dc:b0:96:6b:
65:1c:3a:90:6f:f2:a7:81:79:a5:37:c1:10:ff:59:1b:da:5b:
69:33:76:38:ad:68:44:e2:cf:eb:f8:ba:25:ab:48:49:38:fd:
92:51:cb:d3:a5:1c:74:66:b8:8f:a4:92:47:40:8f:34:c0:28:
c9:37:73:65:72:91:12:ce:60:b8:99:cb:f8:d2:00:c0:77:da:
78:f9:f3:75:b6:28:4a:ea:fa:ce:56:66:6d:5a:a4:57:cc:88:
e7:3c:2c:33:c6:4c:19:91:04:e1:bd:db:71:4a:8b:a7:ab:16:
7d:13:be:f2:65:a0:9b:d1:c0:06:ef:72:5c:67:81:78:80:66:
30:ec:05:b6:c7:76:90:43:80:9b:d7:b5:a7:6b:5c:9b:71:3b:
e2:8d:ad:06:f8:6d:8b:d0:f4:a7:25:de:c5:59:94:2b:32:55:
cd:e8:f5:59:9b:1c:8b:6e:d8:cc:e6:de:19:60:ab:22:dd:0d:
9a:ca:32:bf:59:60:59:7b:4c:21:6e:b2:4f:17:8b:e2:5e:ff:
0c:bf:e6:76:60:b8:df:78:2d:d0:34:d0:8f:08:aa:9f:22:32:
4f:4d:84:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 14:37:51 2025 by rpki-client