Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363336653a3a2f34382d3438203d3e203136393039.roa
File: 326131343a373538343a363336653a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier: W4wOTxSgOllCs+oAX5ruD2dZ0AF0uwWZKxhpkX0/Rjw=
Subject key identifier: 42:A9:DC:9C:3F:72:88:9F:E3:5C:5B:C4:70:AA:D5:BF:27:15:D2:91
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 0271329A38A4885B6F2D39E497E0C23963F1ECA6
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363336653a3a2f34382d3438203d3e203136393039.roa
Signing time: Fri 23 May 2025 18:00:02 +0000
ROA not before: Fri 23 May 2025 17:55:02 +0000
ROA not after: Fri 22 May 2026 18:00:02 +0000
asID: 16909
IP address blocks: 2a14:7584:636e::/48 maxlen: 48
Validation: Failed, certificate revoked on Sat 24 May 2025 23:24:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
02:71:32:9a:38:a4:88:5b:6f:2d:39:e4:97:e0:c2:39:63:f1:ec:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: May 23 17:55:02 2025 GMT
Not After : May 22 18:00:02 2026 GMT
Subject: CN=42A9DC9C3F72889FE35C5BC470AAD5BF2715D291
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:05:af:61:c8:9e:ed:33:a4:57:7f:3f:0f:d1:
af:87:e6:bb:46:47:c8:45:6b:7a:5f:b6:93:a9:c0:
14:ee:18:25:b8:0e:40:30:1f:e2:bd:6d:42:aa:00:
4c:fd:21:e3:06:00:7f:bc:e4:0c:54:f6:c3:57:6e:
5a:d1:da:1b:63:18:7f:f9:ae:81:0d:2d:2c:5e:55:
d2:78:31:0e:87:5f:d4:f7:fb:9c:f2:60:2d:54:bd:
da:af:09:42:a5:26:ef:0b:e6:6d:74:b5:5f:72:57:
95:7b:a2:6b:20:2b:22:51:48:99:22:d3:d3:ad:4d:
2a:08:c1:90:4e:3f:98:6a:88:69:50:73:9a:dc:ed:
a4:c8:18:d7:4c:36:5c:df:25:d6:9d:37:32:e0:36:
fa:6c:95:a4:87:04:ed:2d:22:f6:4f:3e:00:4e:a0:
6f:32:48:aa:3b:e1:fe:c0:b3:dd:ae:c0:b0:40:26:
26:42:1f:93:e3:2e:12:48:0e:36:73:74:66:73:79:
24:8a:96:08:d9:5a:df:5a:1a:64:6d:68:46:c8:45:
fc:ec:cf:e2:2c:0f:62:69:19:08:c8:9c:f4:d9:ec:
92:5f:4a:19:81:b7:c2:5b:e1:05:63:3d:eb:d7:f0:
86:34:d7:ef:30:ef:a8:9d:85:d3:6d:25:cc:36:7f:
a5:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:A9:DC:9C:3F:72:88:9F:E3:5C:5B:C4:70:AA:D5:BF:27:15:D2:91
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363336653a3a2f34382d3438203d3e203136393039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:636e::/48
Signature Algorithm: sha256WithRSAEncryption
3d:93:89:30:cc:93:4f:2f:37:be:47:0d:42:56:41:f7:4c:6a:
07:c1:74:af:dd:c8:f2:90:f8:01:a6:d6:ab:a3:0f:02:38:cb:
89:49:32:55:4d:75:4d:0d:2f:a9:d4:cd:5e:4c:5c:1f:ac:be:
84:3c:a1:c4:ad:6b:46:18:d3:e3:9d:30:17:c2:84:18:eb:d9:
73:d0:f3:bc:bc:02:e4:1e:73:a7:ae:91:91:86:32:34:1b:ea:
c7:e7:1f:79:36:79:ab:c5:6e:02:89:6b:98:0d:bb:64:6a:e5:
5a:d0:91:80:1e:1c:13:90:86:76:c4:2d:f9:1c:81:01:87:6d:
58:19:7c:9c:f2:49:f1:37:9c:d8:10:39:e2:51:30:14:8c:4d:
80:2f:1b:d6:c5:34:c7:80:f8:46:6f:a6:67:2e:52:9d:20:03:
6f:65:d5:c0:e3:f4:75:e7:d9:00:95:11:ab:ad:3f:fb:6d:48:
37:06:69:c7:81:15:4a:6f:32:01:0b:ce:de:88:7f:f6:4e:7c:
6b:14:98:15:24:12:8f:43:3b:06:90:c0:32:9a:80:dd:bf:ed:
76:95:0a:ef:27:19:96:1f:0a:41:78:fd:9b:f6:a8:78:ff:2b:
4e:a4:05:8e:09:7d:ea:5f:c6:ce:b2:ec:1b:f0:aa:71:f5:24:
38:30:60:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 03:14:08 2025 by rpki-client