Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363863393a3a2f34382d3438203d3e203136393039.roa
File: 326131343a373538343a363863393a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier: QHdiRO4+5j9mt8SE08WjfP7fb0BSZcrYSiWVU/gn4iw=
Subject key identifier: 82:10:53:97:BF:D6:67:D0:58:2B:72:A7:DD:97:7E:E1:77:49:C4:2F
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 4EED470D499057623EEBCC913882C4DCC608F9A3
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363863393a3a2f34382d3438203d3e203136393039.roa
Signing time: Tue 27 May 2025 22:30:02 +0000
ROA not before: Tue 27 May 2025 22:25:02 +0000
ROA not after: Tue 26 May 2026 22:30:02 +0000
asID: 16909
IP address blocks: 2a14:7584:68c9::/48 maxlen: 48
Validation: Failed, certificate revoked on Sat 31 May 2025 02:51:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4e:ed:47:0d:49:90:57:62:3e:eb:cc:91:38:82:c4:dc:c6:08:f9:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: May 27 22:25:02 2025 GMT
Not After : May 26 22:30:02 2026 GMT
Subject: CN=82105397BFD667D0582B72A7DD977EE17749C42F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:64:1d:b5:7f:58:46:78:f6:e9:94:05:93:64:
93:87:05:c7:13:e0:a5:f0:1f:b5:0d:2f:6e:bd:03:
2a:5b:02:d4:f6:81:e0:d5:61:4a:31:8b:cd:36:3e:
2a:95:37:24:72:d7:2c:28:5d:dd:a5:93:0f:bc:b4:
fb:94:d8:37:5f:fb:c1:0e:31:fc:a4:dc:8d:58:33:
3f:41:9d:1a:a5:0a:3a:f4:45:c1:3d:46:1a:5b:69:
62:1d:f4:0e:5f:95:bc:60:79:26:52:a5:27:3f:4b:
af:03:b0:8e:c3:27:66:08:e9:3b:f4:14:4c:14:77:
81:b7:02:9c:11:f2:1f:03:a8:0c:29:07:fa:ca:a7:
14:55:26:e8:b0:79:19:70:92:d4:e5:fd:19:24:88:
fb:ff:6c:a6:e6:33:f3:6a:c7:b9:27:ab:13:b3:bb:
13:c7:9e:07:a8:4b:2c:67:63:a2:1d:75:6d:eb:d2:
e2:15:d3:3c:7c:26:6e:e0:66:40:a0:43:d3:59:e7:
ca:72:33:88:22:f9:ba:8e:97:4c:d5:84:45:ca:5e:
d2:de:7b:30:34:8d:ce:ae:cd:be:75:95:7c:dd:ed:
c7:b2:83:81:6c:e6:a4:cc:e9:60:06:38:72:c2:51:
cf:28:a0:bd:af:1e:44:3d:54:6f:68:38:b0:76:89:
d8:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:10:53:97:BF:D6:67:D0:58:2B:72:A7:DD:97:7E:E1:77:49:C4:2F
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363863393a3a2f34382d3438203d3e203136393039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:68c9::/48
Signature Algorithm: sha256WithRSAEncryption
8e:14:38:c3:a2:11:84:7b:60:ad:cd:bd:15:48:8e:b5:ef:bf:
d4:fc:df:a4:57:6d:90:d9:19:85:1c:db:26:d9:96:10:a3:93:
49:ac:a4:a7:89:1a:de:2b:91:3b:f1:3c:8c:d2:ad:c4:bb:fe:
49:68:d8:41:2a:13:c4:37:a3:9a:b2:b9:a0:75:b7:c1:bf:c8:
29:37:75:e0:ef:a8:1e:db:28:73:c1:89:2f:fd:5b:7a:11:d5:
06:f8:f7:26:58:7a:7e:2b:32:69:b6:7d:d7:bd:4d:ef:6b:86:
b0:7f:a4:ac:81:9a:1f:a1:68:2b:2f:14:28:5b:dc:33:87:0c:
88:15:87:68:2c:6d:76:f5:a0:90:da:ad:a2:3b:b5:ab:3f:ef:
80:cf:d3:40:eb:fe:81:13:a4:73:1f:46:7f:a5:0b:b4:9c:2a:
21:34:1a:d6:60:76:05:5d:f5:11:ea:0e:0a:cc:80:0f:ba:b6:
5e:48:5d:05:0b:02:76:49:1e:5b:45:13:97:92:e8:14:2b:ca:
ac:c6:5f:1c:2c:47:c6:cd:39:73:66:22:54:28:98:c8:b5:7f:
01:e6:9c:61:3e:c2:a8:03:31:8e:78:ba:54:aa:17:9f:a3:57:
a7:48:d8:c6:89:65:9c:fb:c9:94:fb:51:87:02:02:81:77:58:
6c:d7:46:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 07:29:56 2025 by rpki-client