Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363865343a3a2f34382d3438203d3e203136393039.roa
File: 326131343a373538343a363865343a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier: RP1LZSeSEui7NnMK1xgEnFYJ5T8BvlEF2zuVea86bYE=
Subject key identifier: 0E:87:D6:E1:B1:96:47:22:D5:84:7E:2A:EB:12:17:A1:53:65:50:33
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 374D39D6A91DD38192F61686F0AA03AC0CB3FCF9
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363865343a3a2f34382d3438203d3e203136393039.roa
Signing time: Sun 25 May 2025 02:54:01 +0000
ROA not before: Sun 25 May 2025 02:49:01 +0000
ROA not after: Sun 24 May 2026 02:54:01 +0000
asID: 16909
IP address blocks: 2a14:7584:68e4::/48 maxlen: 48
Validation: Failed, certificate revoked on Mon 26 May 2025 19:54:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
37:4d:39:d6:a9:1d:d3:81:92:f6:16:86:f0:aa:03:ac:0c:b3:fc:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: May 25 02:49:01 2025 GMT
Not After : May 24 02:54:01 2026 GMT
Subject: CN=0E87D6E1B1964722D5847E2AEB1217A153655033
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:8a:87:e5:79:0c:40:c1:91:74:3f:3e:d3:df:
41:78:da:7a:91:d9:1e:c3:1f:46:1b:8b:a3:79:8b:
62:2d:ed:18:26:16:f8:88:bc:fc:89:0a:79:9d:69:
2c:09:bc:11:97:38:f3:5d:2c:cf:30:83:75:32:eb:
b9:42:86:90:a9:a7:09:2f:6f:44:1a:7f:93:19:a0:
98:67:46:2a:1d:74:59:8d:9d:4c:e9:b9:a7:a2:7a:
3e:13:77:3c:fc:2d:d3:fa:7d:db:f7:e4:36:32:11:
e9:5d:bb:41:e8:53:52:95:e0:b4:c9:76:89:82:dd:
63:e2:ad:49:9a:91:b9:f3:57:59:da:ea:cf:72:73:
b8:34:76:45:a7:84:e7:60:44:ae:b0:9e:dc:f4:28:
3c:77:34:c6:a2:eb:c4:47:a7:45:15:f4:9d:50:f9:
8f:39:fd:5c:9e:f8:be:4d:9f:f9:e3:ad:7f:90:d6:
ae:60:1c:7a:55:e2:87:a6:7e:8c:41:f4:44:14:fb:
a8:c1:01:20:a1:37:2a:5f:5c:89:ab:9f:f2:d5:18:
93:63:4b:aa:79:18:58:36:73:51:36:7a:ea:7b:e3:
a0:a8:d5:99:6e:55:51:80:ec:41:3f:4f:bb:40:80:
0b:00:57:64:1f:22:7e:55:d2:7b:cd:8b:6e:51:3c:
b3:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:87:D6:E1:B1:96:47:22:D5:84:7E:2A:EB:12:17:A1:53:65:50:33
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363865343a3a2f34382d3438203d3e203136393039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:68e4::/48
Signature Algorithm: sha256WithRSAEncryption
91:75:f9:1d:35:65:f4:8d:38:da:13:da:e9:aa:2d:ab:70:f1:
61:a7:af:8a:77:92:79:ff:c7:e4:73:ed:14:cd:47:a7:98:04:
54:39:e1:ef:a1:15:e5:03:50:1e:57:19:a6:d8:3c:ed:60:89:
32:d8:fa:fc:80:3a:49:a2:37:a8:8c:37:4a:26:ec:e9:fa:7b:
e1:4e:66:88:02:50:2e:83:97:fe:57:f4:e1:af:d0:82:75:98:
10:a6:98:70:7c:c3:e0:0d:13:4f:8c:0a:48:54:c4:54:05:a0:
be:35:37:fb:4f:02:55:3c:74:bd:9a:d2:4f:e4:f2:50:29:35:
3c:d9:67:f1:70:c8:db:c4:8e:f1:dc:d3:80:d4:3f:f7:43:49:
75:23:d3:b7:0f:e3:86:f9:64:43:c1:ba:e3:ee:96:5b:f9:be:
bb:82:d1:f5:87:6d:af:36:2f:47:80:7c:ce:0a:07:da:3e:58:
ac:ce:b2:26:fe:3c:2e:1b:ce:41:90:37:ad:08:56:6d:27:db:
c4:9b:f5:b5:ab:72:86:f1:8f:cb:96:6a:47:99:bb:ad:8c:4d:
27:47:3d:fd:aa:9f:6f:90:f5:13:77:b8:ae:a7:60:75:25:4a:
b6:04:8f:09:4c:1a:79:e2:98:74:19:72:97:c3:27:15:11:41:
d0:32:45:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 07:45:39 2025 by rpki-client