Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363861373a3a2f34382d3438203d3e203136393039.roa
File: 326131343a373538343a363861373a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier: G2t24GGmnBWcXQAV3+WWhEaplD/JErrWN5YiCcxYT5A=
Subject key identifier: 1F:BB:D0:69:7B:F9:82:BC:65:A5:C3:17:A2:40:88:17:2A:AE:C6:81
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 7A3AA09051E86E57E70C729B057AC1CDFE77C3CC
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363861373a3a2f34382d3438203d3e203136393039.roa
Signing time: Sat 24 May 2025 16:48:02 +0000
ROA not before: Sat 24 May 2025 16:43:02 +0000
ROA not after: Sat 23 May 2026 16:48:02 +0000
asID: 16909
IP address blocks: 2a14:7584:68a7::/48 maxlen: 48
Validation: Failed, certificate revoked on Sun 25 May 2025 03:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7a:3a:a0:90:51:e8:6e:57:e7:0c:72:9b:05:7a:c1:cd:fe:77:c3:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: May 24 16:43:02 2025 GMT
Not After : May 23 16:48:02 2026 GMT
Subject: CN=1FBBD0697BF982BC65A5C317A24088172AAEC681
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:34:4f:e5:43:31:21:bf:dd:e1:de:cf:24:3b:
60:53:ba:3a:c8:fe:c6:60:28:49:ad:59:b2:6f:1e:
d8:2e:5d:df:04:5b:ff:a6:8d:83:fe:50:a7:7f:d8:
1d:29:68:1e:38:0d:4b:a4:d7:8c:30:6f:fd:04:84:
0b:99:28:29:ee:01:00:68:44:f9:4d:1f:60:cb:8b:
d8:d1:7c:5e:b7:1a:d8:28:cf:6d:f8:48:4f:ce:82:
16:63:d6:02:64:64:6d:e7:f5:db:16:b2:de:bf:02:
76:9f:4b:e9:46:3a:4b:52:e9:53:af:00:50:ba:aa:
9e:8f:34:d1:4b:1f:d3:df:00:45:b8:3a:a6:f7:cc:
05:95:27:a2:eb:1d:a2:13:26:e2:17:51:c6:26:31:
f8:8c:de:26:57:b7:75:16:e1:24:59:b4:7f:9c:98:
3d:8e:d2:f3:9e:47:cc:f8:15:75:92:58:f8:51:8b:
c4:21:30:2d:35:6f:ba:62:47:3f:4e:6e:2f:46:83:
49:25:d0:13:0f:f6:8d:7a:16:19:e8:1b:60:5e:2a:
c3:18:fa:d1:f1:d8:1e:35:27:8e:72:96:54:b6:8c:
db:e5:ff:ee:74:2d:bf:30:49:03:cd:91:a5:a9:eb:
e7:4b:01:90:ae:a7:3b:61:78:fc:1c:d5:a1:f3:19:
87:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:BB:D0:69:7B:F9:82:BC:65:A5:C3:17:A2:40:88:17:2A:AE:C6:81
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363861373a3a2f34382d3438203d3e203136393039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:68a7::/48
Signature Algorithm: sha256WithRSAEncryption
2c:0a:9c:54:26:1e:a3:8b:74:ef:4c:bd:09:f9:5e:8e:5e:7c:
63:da:25:f6:16:9d:b4:df:13:d2:48:ea:5d:17:8d:a9:f9:fe:
56:97:9d:fb:77:71:70:fd:a6:29:ba:8f:c4:d6:fd:e3:1f:fe:
76:1c:94:05:ce:1a:5e:17:8d:10:b1:9e:3c:f3:1a:6f:91:4f:
48:b1:35:8b:ae:10:0f:c3:a5:89:3f:8e:f2:a6:e3:f3:3b:5a:
7b:69:85:d6:f2:5b:67:da:69:35:37:c6:83:61:78:81:0a:0b:
ad:a6:91:3f:dc:7d:3e:61:8b:e6:c9:41:ed:f3:0b:69:28:3f:
b7:bf:f6:de:2a:1b:b7:9c:a2:f5:1d:1b:4a:d0:3f:ac:09:c4:
c0:a5:ef:94:b6:88:2e:6e:da:78:a0:62:2d:9b:f4:01:38:e5:
cf:da:1e:5b:1c:76:f4:96:a0:59:1d:47:f4:33:54:82:df:d4:
2e:b4:a3:32:6b:3e:bc:b9:c7:41:d7:78:82:c8:32:8f:d7:1c:
bf:28:e2:5b:8f:e1:68:56:41:3a:6e:03:4a:50:1f:fd:a5:4a:
1d:c4:a6:ad:5d:49:3f:df:83:6a:5c:1f:dd:88:5f:42:22:60:
f6:dd:e4:a7:27:3f:37:a9:1a:2c:34:fd:1f:cd:26:be:1c:9b:
31:53:4a:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 07:19:58 2025 by rpki-client