Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363436323a3a2f34382d3438203d3e203136393039.roa
File: 326131343a373538343a363436323a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier: 6LqaU+gMS+tBQnG96hZwnNmqu2WoB6fKiCb/dG8eV4s=
Subject key identifier: E8:B2:E9:12:E1:D5:50:96:A6:9A:22:F4:E9:11:79:08:E8:E9:7F:CE
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 27CAA23BE67CE8DC47B88F1D4998DC8D73F7F5CF
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363436323a3a2f34382d3438203d3e203136393039.roa
Signing time: Thu 29 May 2025 16:18:03 +0000
ROA not before: Thu 29 May 2025 16:13:03 +0000
ROA not after: Thu 28 May 2026 16:18:03 +0000
asID: 16909
IP address blocks: 2a14:7584:6462::/48 maxlen: 48
Validation: Failed, certificate revoked on Sat 31 May 2025 14:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
27:ca:a2:3b:e6:7c:e8:dc:47:b8:8f:1d:49:98:dc:8d:73:f7:f5:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: May 29 16:13:03 2025 GMT
Not After : May 28 16:18:03 2026 GMT
Subject: CN=E8B2E912E1D55096A69A22F4E9117908E8E97FCE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:d5:7d:b9:03:a9:c7:a3:02:ba:0c:61:7b:22:
f2:7a:db:bd:ac:40:d0:d3:5d:63:f4:bb:c6:d9:a1:
06:34:2d:86:17:aa:80:9e:4f:c4:f3:f9:4a:ed:eb:
74:60:d5:74:43:14:7c:15:29:8b:87:03:99:7f:8b:
7d:42:ff:08:a1:a4:a0:df:ef:61:a7:af:65:db:b9:
aa:d3:64:1d:b5:c1:39:80:3e:1c:2a:cc:6c:c8:49:
0e:01:c2:c6:6f:df:d0:10:df:79:fc:e5:87:0b:80:
da:48:cd:a7:61:b6:f0:28:af:d4:a9:c9:53:8e:91:
2a:1c:07:b4:d2:90:f8:e4:f4:e0:9d:ba:99:00:f5:
b8:bb:5d:ed:b1:47:70:70:14:41:50:8e:f2:bb:54:
7b:e4:78:f3:be:c5:e6:3c:3e:c4:40:63:d6:1b:d5:
86:64:b4:4c:9a:74:bb:9a:2d:43:d2:c9:21:9f:b5:
a8:6f:06:4b:9d:00:fd:26:8b:d8:49:fd:a3:10:d8:
34:6a:79:1f:29:ac:cc:77:76:13:f0:db:01:bf:d1:
2d:3d:6b:bf:57:f6:10:17:ec:20:5f:b0:74:76:5b:
9a:7e:a4:d9:7b:0d:a5:d6:c1:b2:a8:df:28:5c:fd:
98:8b:90:81:e1:ad:3d:f9:15:e4:88:d4:ee:c9:09:
c0:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:B2:E9:12:E1:D5:50:96:A6:9A:22:F4:E9:11:79:08:E8:E9:7F:CE
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363436323a3a2f34382d3438203d3e203136393039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:6462::/48
Signature Algorithm: sha256WithRSAEncryption
53:d9:01:b7:7e:7f:b2:e4:aa:d6:47:50:ec:cb:d7:44:fb:c0:
b9:23:50:90:76:39:01:7f:3b:25:65:11:f1:b7:51:9a:b5:3e:
80:c8:77:46:b2:1f:56:88:42:74:87:71:88:5a:d4:4c:ab:1f:
3d:d8:b6:fc:12:5e:b9:14:a1:67:22:d8:3d:9b:62:14:db:14:
82:44:ca:6b:21:a1:26:39:4d:b3:e3:13:58:db:69:9b:41:97:
c0:56:6d:91:8a:0f:66:78:d7:6f:c4:e6:8d:d4:04:4e:f0:ef:
96:3b:79:12:15:fd:dd:c3:b2:03:ce:c8:57:b1:64:91:50:3b:
cd:b0:7f:37:0b:90:7d:8a:b2:b1:01:d8:8f:5a:41:74:13:5e:
b1:da:5a:1a:69:cc:bb:83:8c:9b:e1:ee:c1:25:aa:b3:8a:f5:
6b:4a:8b:23:53:44:32:8c:ad:ca:eb:14:e0:7a:69:a9:43:13:
01:50:1a:db:e9:f3:34:d7:1d:fb:76:09:6a:ae:fd:80:e6:54:
d6:07:a5:47:77:b7:1b:be:ad:5d:5f:87:5b:2d:02:bb:dc:ad:
67:08:5d:b2:9b:a8:ed:5d:19:9e:af:c5:fd:cb:7b:6e:55:88:
26:78:65:54:ca:d3:79:3a:01:c0:d2:12:a1:48:bb:12:87:1a:
7e:f5:7c:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 06:20:04 2025 by rpki-client