Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363430613a3a2f34382d3438203d3e203136393039.roa
File: 326131343a373538343a363430613a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier: snHxLHmndVvPFJ5dNDGBVkn/btY0JcJhxAtVRPl0yCA=
Subject key identifier: 95:67:17:CF:CC:DB:41:6F:BE:13:24:76:42:FF:4B:5E:0A:C0:F1:3C
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 311F273CF4DEFABEE7A2228273B346F915502F27
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363430613a3a2f34382d3438203d3e203136393039.roa
Signing time: Sun 25 May 2025 13:54:02 +0000
ROA not before: Sun 25 May 2025 13:49:02 +0000
ROA not after: Sun 24 May 2026 13:54:02 +0000
asID: 16909
IP address blocks: 2a14:7584:640a::/48 maxlen: 48
Validation: Failed, certificate revoked on Tue 27 May 2025 22:18:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
31:1f:27:3c:f4:de:fa:be:e7:a2:22:82:73:b3:46:f9:15:50:2f:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: May 25 13:49:02 2025 GMT
Not After : May 24 13:54:02 2026 GMT
Subject: CN=956717CFCCDB416FBE13247642FF4B5E0AC0F13C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:9c:d0:60:06:1c:ab:c4:9e:78:27:01:cb:32:
74:8a:95:4f:d3:28:5b:f9:ee:08:f3:d7:05:8d:66:
92:09:9f:8b:c4:39:bf:6d:f4:87:a0:f0:c0:eb:99:
01:0e:a1:4c:b9:86:d4:2a:3e:1e:3c:a7:15:ac:c9:
f4:75:75:4a:19:09:0f:7d:16:6b:2f:42:89:d0:ea:
2b:96:69:ae:ec:53:59:2d:b3:93:31:1f:71:30:9c:
cc:40:44:c6:1b:7b:e5:aa:2a:f5:bf:8a:53:37:29:
8b:74:66:a2:d4:f4:76:d4:3a:5c:e6:4b:f9:31:6e:
35:11:fd:fc:28:cc:83:e6:e0:35:be:80:2b:3d:f1:
95:97:ab:55:00:23:07:fc:be:12:c0:88:90:26:54:
cb:d4:1d:ad:78:77:5d:11:9f:bf:4d:d0:ac:e9:e6:
7c:1a:e6:32:97:27:a2:e9:79:22:5a:90:2c:9a:63:
dc:3a:8a:c6:7b:a3:9c:54:cb:fd:da:20:74:d9:ac:
b2:9f:89:d1:b9:81:e5:48:a6:bc:a0:3e:37:d4:a6:
04:b8:1f:5a:e3:9d:49:43:fd:e2:04:1f:af:41:7c:
68:44:2f:66:91:b8:23:28:de:a3:5f:1c:95:b4:e3:
81:29:75:cf:02:14:9a:2d:a5:06:a2:1b:f2:62:dd:
87:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:67:17:CF:CC:DB:41:6F:BE:13:24:76:42:FF:4B:5E:0A:C0:F1:3C
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363430613a3a2f34382d3438203d3e203136393039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:640a::/48
Signature Algorithm: sha256WithRSAEncryption
97:fc:bb:15:28:5e:9d:3a:8b:60:e2:60:1a:01:43:82:37:9b:
f9:de:42:7c:9c:70:5d:78:0f:81:37:49:f3:b1:7e:7a:12:cf:
34:d4:8b:3d:47:a4:ac:d7:bb:61:66:4a:a7:af:fd:4e:c1:a1:
21:ef:92:8c:70:bd:c0:f1:56:ad:6a:8a:ff:09:7d:75:47:2b:
0f:ce:86:21:55:f8:ca:25:4b:5a:a2:38:81:63:58:c2:22:67:
d9:3a:3e:34:e9:9f:bf:94:8f:6f:50:21:14:5e:57:e8:6c:91:
24:b8:5e:67:41:13:fd:3c:be:23:be:ce:7d:3d:d0:b5:12:9f:
93:84:5d:65:2a:26:5a:70:a9:78:05:4b:7a:58:1c:d5:31:c5:
29:e0:1d:05:a3:fb:0b:f5:40:b7:93:7e:2e:6f:95:83:52:7a:
bc:a2:16:97:da:7e:51:ac:36:92:3e:fb:c3:e6:bb:02:04:50:
9b:16:af:f6:e1:6c:45:5d:f3:56:de:15:fd:8b:48:3b:08:f5:
8a:65:08:df:f3:47:5e:2c:0a:91:92:3e:96:45:dc:0f:c9:58:
75:03:da:44:0c:83:2e:b0:97:56:01:ae:62:db:81:46:5a:c6:
e6:df:4f:9c:e2:d2:ef:4f:75:9d:87:74:d7:1c:bc:5e:f8:fa:
fb:86:07:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 09:20:31 2025 by rpki-client