Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363361323a3a2f34382d3438203d3e203136393039.roa
File: 326131343a373538343a363361323a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier: nEQ4aYoRQ4p1WGFvJ4SPMAj8FXvbUH6l67++YQwYFrg=
Subject key identifier: 4D:CA:CC:C9:45:9C:5D:57:64:18:D0:24:9D:6A:53:57:CA:3A:16:5D
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 14E6B4BBDC0446D75CB09144D63A4954F845D8DB
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363361323a3a2f34382d3438203d3e203136393039.roa
Signing time: Sat 31 May 2025 02:54:01 +0000
ROA not before: Sat 31 May 2025 02:49:01 +0000
ROA not after: Sat 30 May 2026 02:54:01 +0000
asID: 16909
IP address blocks: 2a14:7584:63a2::/48 maxlen: 48
Validation: Failed, certificate revoked on Sat 31 May 2025 17:16:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
14:e6:b4:bb:dc:04:46:d7:5c:b0:91:44:d6:3a:49:54:f8:45:d8:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: May 31 02:49:01 2025 GMT
Not After : May 30 02:54:01 2026 GMT
Subject: CN=4DCACCC9459C5D576418D0249D6A5357CA3A165D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:75:5e:1d:57:6e:75:44:9b:ac:43:c7:42:df:
d4:75:de:d6:a5:b9:c0:31:6f:05:a0:1b:6d:03:67:
15:cc:e7:bf:c9:b6:2b:c7:60:26:5d:6a:cf:fe:d9:
86:72:b3:7a:8c:de:91:04:56:e2:d1:cf:fc:1e:d1:
9b:1e:98:1f:9b:a8:25:d6:a5:23:c3:70:7e:29:a8:
f6:b3:76:fa:1b:7d:f0:f8:2f:62:56:b1:21:ff:66:
01:66:bd:c0:0c:10:b7:dc:37:af:03:e8:21:08:78:
94:72:06:83:56:ea:b6:ab:ca:38:9d:e0:ea:e5:ac:
68:ab:19:2c:fb:16:a8:86:2d:f6:6d:d3:22:ea:dc:
69:4b:3d:aa:a1:6b:e8:9b:ae:3f:09:c6:be:53:09:
50:d5:0c:1b:1e:c7:77:f6:6d:df:15:90:60:00:ea:
54:5a:c2:70:13:a7:68:45:b1:fc:87:36:82:f8:f1:
4a:6a:db:03:56:ab:53:a7:82:e3:af:be:f6:4d:c7:
3d:2e:89:77:ce:a9:c9:9d:fe:4d:04:f0:7a:51:4a:
05:67:f4:19:a9:8b:49:81:4f:a5:38:09:77:b9:62:
8c:d2:c0:44:41:0c:0b:8f:c0:d8:87:29:01:5d:be:
32:07:b8:04:4b:14:89:ec:77:6b:bc:42:4b:93:71:
79:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:CA:CC:C9:45:9C:5D:57:64:18:D0:24:9D:6A:53:57:CA:3A:16:5D
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363361323a3a2f34382d3438203d3e203136393039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:63a2::/48
Signature Algorithm: sha256WithRSAEncryption
09:f0:a6:a7:14:01:12:b5:a2:2d:3c:c5:cd:9d:fe:04:ce:b0:
83:a1:ec:50:24:b9:6a:78:d2:5d:95:b4:4c:06:8a:ae:2d:ae:
8d:14:83:f8:23:2c:85:64:81:5f:b2:41:b5:a1:24:7b:6e:91:
d1:d8:d1:1a:85:2d:e8:e8:1e:42:23:20:d2:fc:c9:c0:73:0a:
c1:bf:c7:3f:d1:05:ab:ff:55:ce:d9:00:b0:91:1c:b2:4a:d6:
30:e5:66:f3:58:e1:8f:f7:00:ab:72:ac:7c:49:f9:0c:b1:fc:
24:29:d7:88:e9:bc:b9:62:bd:52:1b:03:1e:9f:9d:1a:54:b4:
69:53:8d:ce:5d:a3:ca:59:3b:7a:0e:ea:75:d9:04:7a:81:7d:
02:71:5d:97:b3:fd:7c:18:d5:42:2a:16:13:b8:bc:18:59:a8:
4d:8d:c9:0c:b1:0d:a3:2e:f9:b8:65:dc:4d:0d:5a:7a:56:7a:
76:d0:ce:d8:bf:74:8d:b1:dc:de:c6:6a:29:25:0c:a4:25:89:
1f:5b:23:f6:86:12:cb:bf:18:2c:be:46:57:0b:1e:f4:1a:de:
be:97:b7:25:b7:97:40:7a:01:39:38:c2:0b:c0:77:9d:2f:0a:
b7:81:c1:0f:b8:27:cb:39:9c:42:67:5f:5c:97:95:4c:88:d3:
15:ca:69:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 01:06:37 2025 by rpki-client