Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363430323a3a2f34382d3438203d3e203136393039.roa
File: 326131343a373538343a363430323a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier: oVm/ZhwWh0jmTLQkBpIFn+sBgKDFmH0Q1z21rZFDxLQ=
Subject key identifier: 50:17:BA:7C:66:66:2A:8D:AD:6A:04:38:6C:65:22:0B:45:A0:04:47
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 0E11374F6CE953EA0981870CA132E5D3782E12FF
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363430323a3a2f34382d3438203d3e203136393039.roa
Signing time: Sun 25 May 2025 13:48:02 +0000
ROA not before: Sun 25 May 2025 13:43:02 +0000
ROA not after: Sun 24 May 2026 13:48:02 +0000
asID: 16909
IP address blocks: 2a14:7584:6402::/48 maxlen: 48
Validation: Failed, certificate revoked on Tue 27 May 2025 21:54:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0e:11:37:4f:6c:e9:53:ea:09:81:87:0c:a1:32:e5:d3:78:2e:12:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: May 25 13:43:02 2025 GMT
Not After : May 24 13:48:02 2026 GMT
Subject: CN=5017BA7C66662A8DAD6A04386C65220B45A00447
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:9d:37:39:91:06:f7:73:89:e4:11:29:51:b2:
cf:86:b9:19:ba:f0:d6:42:8c:0d:a8:fd:f5:6e:88:
1d:d5:26:13:ee:47:7a:3a:b5:3f:0f:04:41:fa:33:
6f:7c:16:af:9f:3d:61:9c:1c:91:28:d0:cc:70:68:
c8:f5:41:ac:c3:50:31:a7:9e:d8:ce:11:79:3a:05:
4c:4b:41:b4:68:ae:55:2f:1d:77:a5:50:22:75:48:
99:68:6d:36:34:c7:e8:10:3f:74:e8:f4:e4:23:a1:
11:be:42:44:e2:bb:82:0c:6c:a1:00:b8:52:c7:9b:
e1:44:86:61:b7:87:09:b2:45:83:e1:be:8c:34:f2:
0e:3a:ef:10:77:c3:76:04:8e:90:75:ae:3b:f0:96:
8b:b5:af:39:fd:de:d0:7d:14:3e:02:27:45:8a:8f:
01:5f:06:74:c0:f2:4c:d1:d4:4c:52:f6:78:6b:4b:
3f:fc:22:7a:cf:ba:fe:49:0d:04:bd:f4:d0:5b:24:
3a:48:be:48:f0:c0:3a:71:f3:64:02:ca:66:73:83:
d4:07:01:20:dd:49:e9:f9:85:6d:dc:26:c7:78:74:
24:9e:f5:eb:eb:cb:57:d8:f3:3e:6a:4a:ec:13:96:
67:8e:b9:20:1b:5f:b6:c3:be:33:24:c8:05:83:d6:
11:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:17:BA:7C:66:66:2A:8D:AD:6A:04:38:6C:65:22:0B:45:A0:04:47
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363430323a3a2f34382d3438203d3e203136393039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:6402::/48
Signature Algorithm: sha256WithRSAEncryption
41:46:69:fa:0a:31:c3:62:ce:19:a3:a1:b3:9e:d1:1f:a6:f1:
c0:df:07:9d:68:fa:5c:e1:40:26:48:80:4e:3a:b9:94:02:72:
b1:e0:8e:bc:a6:67:50:7e:92:53:09:48:fb:b8:66:11:e4:bd:
7e:7e:fa:9a:95:7a:d3:45:24:4b:83:df:b4:7b:e2:e4:aa:e7:
8d:2b:bf:f1:b6:b2:ff:b6:1b:28:06:64:4c:f1:16:ef:70:7f:
97:01:73:9d:cd:aa:d1:9a:c0:34:63:5c:af:cf:98:22:15:bb:
92:5c:56:8d:a6:0a:c6:1f:7e:ac:d6:fe:20:a0:99:b1:1b:46:
90:4c:2f:ce:3f:30:02:6a:d6:10:33:f1:5a:96:30:a4:b1:21:
f3:c1:96:0d:4e:64:da:1d:a9:68:0f:93:89:02:0f:2c:64:97:
27:98:cd:64:80:7a:74:6b:ad:a6:2c:31:db:9b:7a:a2:01:89:
79:ab:20:29:f9:3a:80:72:65:c1:0b:e5:7d:f8:0c:71:28:b5:
18:66:1d:a9:df:5e:e2:ae:a4:7a:33:f6:03:8d:32:f5:90:81:
07:82:bb:bc:3a:23:af:1e:25:e4:4c:22:7f:5d:7e:68:e6:15:
bd:4b:07:94:46:db:78:3b:ed:cb:81:99:0b:7c:c6:0b:38:33:
65:5d:ce:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 05:58:27 2025 by rpki-client