Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363337343a3a2f34382d3438203d3e203136393039.roa
File: 326131343a373538343a363337343a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier: tkYmLl9VN/CSx5Vhp3+Y+VXuGELzImcJPdJmtFEL+JQ=
Subject key identifier: 98:68:53:87:E0:C9:4E:F2:2B:4C:2C:9B:9C:5E:F7:87:F1:72:48:D4
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 3895688C62D9465CBC201D87B18F910E8C7DFE1F
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363337343a3a2f34382d3438203d3e203136393039.roa
Signing time: Fri 23 May 2025 20:30:02 +0000
ROA not before: Fri 23 May 2025 20:25:02 +0000
ROA not after: Fri 22 May 2026 20:30:02 +0000
asID: 16909
IP address blocks: 2a14:7584:6374::/48 maxlen: 48
Validation: Failed, certificate revoked on Sun 25 May 2025 02:48:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
38:95:68:8c:62:d9:46:5c:bc:20:1d:87:b1:8f:91:0e:8c:7d:fe:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: May 23 20:25:02 2025 GMT
Not After : May 22 20:30:02 2026 GMT
Subject: CN=98685387E0C94EF22B4C2C9B9C5EF787F17248D4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:70:08:9f:3b:66:83:b4:4a:af:e6:0f:51:61:
d9:09:66:e8:65:f6:08:f8:26:6f:b4:0f:3d:83:3c:
c9:c8:b3:cd:30:76:78:08:5b:28:95:a5:a3:f6:f9:
64:4b:32:f6:92:f1:b0:5c:1e:9e:43:aa:aa:26:61:
99:45:3d:85:d8:a2:54:66:57:1f:e9:db:a5:71:4d:
c0:f2:a3:aa:22:9b:3a:e2:10:d3:35:76:14:52:c0:
6a:30:ba:28:54:69:f0:8d:0f:ca:da:bc:56:66:f4:
ba:1c:9d:fe:9c:08:45:60:43:2e:05:a0:fb:17:02:
9a:37:54:35:4b:b6:a8:ed:b0:31:57:d2:bb:53:96:
54:3e:c5:19:36:76:74:b2:d4:45:b2:2f:40:b4:d8:
30:93:7d:bf:c1:39:55:58:b9:70:57:2d:c7:3e:ca:
aa:15:65:fa:79:32:31:1a:84:43:af:99:f2:9e:ba:
39:dc:84:8d:b3:7c:18:93:37:b9:be:18:95:23:9c:
93:12:b6:ab:ab:f9:75:d7:73:18:c5:82:8d:fe:84:
dd:b4:1c:6e:8d:10:f0:42:fe:72:4a:5c:eb:7f:cb:
80:a8:29:89:45:02:80:9e:fb:eb:e7:e8:52:fd:65:
20:5a:2c:ea:66:4d:28:09:72:df:41:f9:e7:c8:f3:
e5:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:68:53:87:E0:C9:4E:F2:2B:4C:2C:9B:9C:5E:F7:87:F1:72:48:D4
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363337343a3a2f34382d3438203d3e203136393039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:6374::/48
Signature Algorithm: sha256WithRSAEncryption
b4:22:70:62:50:29:f4:f6:10:7c:ae:0c:12:af:e3:bc:7b:6a:
48:2c:05:03:40:62:fb:a8:9d:a4:36:ee:de:66:9f:ea:b2:4d:
44:6f:35:78:b3:e5:cd:e0:f2:50:86:20:18:c4:14:08:a1:b2:
35:f9:9a:76:f5:c1:e2:ca:8d:bd:2f:d7:06:96:79:5a:75:6b:
63:27:35:03:5b:99:42:75:96:0f:de:d3:c6:a7:bf:3c:5e:a1:
ce:68:f4:38:98:61:20:69:27:11:cf:c2:eb:80:6d:b1:12:84:
45:90:d6:e4:00:a9:b0:02:a7:92:71:b9:e7:fe:11:d0:72:bf:
cb:9e:51:93:b3:d0:d6:12:28:56:5d:47:73:85:18:04:32:a3:
64:8e:33:d7:fd:bc:d7:17:4b:34:d1:bf:3a:ad:15:db:cf:ba:
8f:26:cf:d0:c4:93:7a:6b:1e:51:36:60:90:1f:28:18:35:04:
c3:e4:07:02:3c:7a:b5:fb:3b:fa:20:5d:2b:12:9d:0e:0e:85:
bb:fd:01:f9:22:36:c9:6a:d0:e8:df:77:80:1a:33:0a:18:2e:
dc:12:b1:9f:cb:85:34:ab:0c:c3:97:5b:03:80:11:8c:d4:c8:
08:0c:62:7f:e2:66:31:14:e6:4f:bb:8b:9f:96:d4:5d:51:52:
bd:08:1d:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 06:27:16 2025 by rpki-client