Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363434643a3a2f34382d3438203d3e203136393039.roa
File: 326131343a373538343a363434643a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier: X3+OfuV8Pu39c2mwYZnXl51lSH1bPg7To5nlHNW3Sxw=
Subject key identifier: 7D:67:E9:75:3D:1C:8B:A3:18:89:D0:BE:6F:91:09:2E:0A:36:04:E7
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 659E955D42EC7145742D46C3EB4BE4D4012D5B31
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363434643a3a2f34382d3438203d3e203136393039.roa
Signing time: Sat 24 May 2025 18:00:02 +0000
ROA not before: Sat 24 May 2025 17:55:02 +0000
ROA not after: Sat 23 May 2026 18:00:02 +0000
asID: 16909
IP address blocks: 2a14:7584:644d::/48 maxlen: 48
Validation: Failed, certificate revoked on Sun 25 May 2025 13:47:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
65:9e:95:5d:42:ec:71:45:74:2d:46:c3:eb:4b:e4:d4:01:2d:5b:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: May 24 17:55:02 2025 GMT
Not After : May 23 18:00:02 2026 GMT
Subject: CN=7D67E9753D1C8BA31889D0BE6F91092E0A3604E7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:45:ed:3f:53:58:06:3a:f9:99:f7:1e:9b:e7:
f5:35:cf:e2:67:59:14:19:8f:a1:f5:a4:47:f1:8f:
57:16:b4:c8:04:1b:94:1c:6e:70:74:ec:32:7f:af:
18:6c:cd:ca:93:8b:77:0a:38:7c:2a:2a:8b:7e:d3:
f0:be:21:1f:f1:07:da:b6:66:cc:70:29:c2:f2:a8:
c9:68:6d:d3:b8:6c:bd:da:10:a7:7a:e8:8b:1b:a1:
cb:15:0d:99:43:f1:3e:75:0b:68:78:76:14:4d:37:
74:95:82:b3:de:fe:32:81:84:fc:b2:a4:fc:79:12:
90:5c:2c:47:f5:08:92:84:b9:5b:6d:ad:cc:4a:98:
aa:bb:f3:2d:71:d6:9c:94:50:80:72:24:34:0f:e8:
49:d9:7b:da:ca:81:b5:d6:90:4b:5c:43:e7:5e:23:
e1:55:0d:4c:2b:46:2a:11:a1:c4:32:7a:49:91:d2:
e6:92:0e:1d:fe:91:69:76:6b:e5:da:ac:8d:f1:be:
34:66:5d:25:4f:48:09:75:28:65:ba:88:d8:e9:86:
ac:e3:4e:2e:9d:62:7e:b5:6e:49:16:56:f4:aa:bd:
41:51:57:6b:3d:24:a5:97:6a:63:bc:c1:ca:88:3a:
f8:62:51:79:37:41:35:29:31:e4:02:b1:1a:eb:3f:
c0:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:67:E9:75:3D:1C:8B:A3:18:89:D0:BE:6F:91:09:2E:0A:36:04:E7
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363434643a3a2f34382d3438203d3e203136393039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:644d::/48
Signature Algorithm: sha256WithRSAEncryption
36:64:c6:85:95:62:1b:88:f5:67:15:b6:14:22:8a:1e:83:ba:
a2:02:95:fa:d2:33:4e:d1:b0:de:f7:04:99:a8:d6:db:06:35:
ed:bd:b5:c5:ed:1c:0d:fc:5c:02:e2:78:c9:4c:6e:00:cb:2d:
e0:b6:f4:2b:b4:fb:54:38:11:c9:13:38:b1:7c:fe:28:12:5a:
4d:a1:ae:e7:11:fa:f2:0c:1b:6b:c4:83:0d:c6:f5:2d:ad:0e:
ca:6b:f9:3f:ec:13:8c:50:b4:2f:ea:94:30:aa:5c:f4:4c:17:
2f:2b:5c:61:ea:00:ed:26:e5:38:27:83:5b:c6:db:3d:3f:db:
2d:62:3b:02:70:a6:0e:52:18:a4:e6:04:27:ef:27:aa:5f:23:
63:27:91:c6:82:34:5f:37:66:06:89:03:ce:68:90:56:ee:c9:
fc:81:29:14:99:21:45:c3:83:54:ab:3a:8d:f0:98:4b:f2:16:
b3:6b:cb:d2:3f:86:cd:8e:30:0c:26:58:dc:8d:49:15:c8:59:
e7:2e:74:ad:58:e0:16:2b:54:51:dd:63:3b:a5:17:e1:1a:d1:
49:2f:da:5a:63:74:e3:11:a6:84:0f:9d:e1:ff:6b:84:65:57:
ec:41:8d:6c:41:23:89:18:56:d2:f9:78:36:ac:b9:07:66:2c:
2a:26:47:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 04:31:28 2025 by rpki-client