Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363336373a3a2f34382d3438203d3e203136393039.roa
File: 326131343a373538343a363336373a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier: Lu8mAQ9H3ZUXFR6qAJwJ5M2yTHGWAU+ytFPm6GeRAcY=
Subject key identifier: C8:4C:9B:57:14:C4:43:46:38:41:6B:46:64:E5:0F:86:9E:93:6C:05
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 3D5947A55E0308DC532D0CFA1504846719B697CB
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363336373a3a2f34382d3438203d3e203136393039.roa
Signing time: Fri 23 May 2025 15:36:02 +0000
ROA not before: Fri 23 May 2025 15:31:02 +0000
ROA not after: Fri 22 May 2026 15:36:02 +0000
asID: 16909
IP address blocks: 2a14:7584:6367::/48 maxlen: 48
Validation: Failed, certificate revoked on Sat 24 May 2025 16:30:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3d:59:47:a5:5e:03:08:dc:53:2d:0c:fa:15:04:84:67:19:b6:97:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: May 23 15:31:02 2025 GMT
Not After : May 22 15:36:02 2026 GMT
Subject: CN=C84C9B5714C4434638416B4664E50F869E936C05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:90:bb:a7:65:8c:89:0a:a2:79:79:fe:c4:36:
02:0d:60:99:dc:01:23:0a:95:2b:68:3b:e4:ae:aa:
13:1f:c5:42:19:0c:da:a0:9f:b9:8d:32:a0:1a:e0:
73:0b:12:a9:4b:e2:c7:ab:68:d4:b0:89:d2:fc:06:
6e:f8:b1:4c:3c:bf:c1:3e:8f:63:7d:48:22:46:49:
9a:99:15:01:ee:5e:62:9e:aa:2c:26:74:35:ad:6d:
35:1d:50:37:cd:2a:9c:dd:7b:6d:d5:28:19:3e:3c:
c6:ec:5d:5e:77:ad:22:af:2c:c1:a9:95:e8:94:1f:
98:a9:9b:fa:f0:ea:37:0d:9a:db:e4:1d:00:8e:aa:
ce:8b:c8:6f:0e:9e:c1:3f:19:b2:76:77:12:82:f6:
a3:6d:e9:9f:3f:6a:db:e6:76:14:a5:11:e3:bf:01:
1b:6c:aa:fc:83:bb:3f:78:8c:43:f0:4c:18:a5:42:
c8:eb:d5:bc:f3:1a:ed:2a:18:94:01:1a:ff:1e:59:
1a:0e:32:b8:2c:56:e1:b2:6b:c2:08:a0:47:40:24:
a6:87:69:5e:fb:f8:30:04:e0:6e:20:b5:b5:f4:83:
14:87:39:35:0b:ed:89:d2:b1:27:c1:f1:97:e4:99:
c7:86:5d:c9:32:8d:3f:e9:c8:7e:1d:6e:cb:3d:a0:
fe:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:4C:9B:57:14:C4:43:46:38:41:6B:46:64:E5:0F:86:9E:93:6C:05
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363336373a3a2f34382d3438203d3e203136393039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:6367::/48
Signature Algorithm: sha256WithRSAEncryption
06:5c:41:bb:84:fb:cc:20:b7:43:ba:73:0a:08:eb:14:d6:10:
da:9a:e9:e7:e6:37:3d:2d:12:fb:9f:0c:ab:88:2b:06:c4:9a:
19:fa:32:87:70:fa:08:53:57:1f:8e:37:14:e1:eb:87:61:04:
71:53:a6:c4:4d:0a:2f:f2:bc:b0:dd:4b:cf:95:f8:21:60:6e:
a2:08:d1:29:1f:2b:f0:fe:fc:cb:1a:6e:25:1b:31:86:4a:50:
99:03:94:80:8f:f2:1d:c0:c1:8d:68:25:c1:da:70:e1:9d:fb:
15:0c:40:3a:a7:66:22:b5:62:b9:32:10:3d:49:bc:44:c6:a2:
15:25:da:66:94:fa:e3:41:8a:22:44:c4:53:96:ee:a8:a8:4d:
93:d0:87:52:78:84:2b:8a:99:72:30:b1:6a:65:e3:ec:14:1a:
f9:a6:bc:c8:56:35:ad:ba:9c:07:e9:57:66:43:6b:b5:d1:47:
43:35:f8:4c:3c:e9:28:ed:58:23:c0:32:13:e8:09:68:32:4e:
d3:f9:be:00:33:30:b2:b0:22:1c:c7:79:51:51:6f:5e:cc:69:
37:fd:14:13:be:e4:6b:6d:95:6c:d2:7b:23:5c:d4:ca:83:6c:
87:73:e1:ac:e7:f8:8e:9d:10:59:eb:c2:00:48:ea:62:b4:4f:
f5:c5:19:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 06:34:39 2025 by rpki-client