Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363933343a3a2f34382d3438203d3e203136393039.roa
File: 326131343a373538343a363933343a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier: nyTWAItUMxxpIjPC8yO3T6/xXH18I001DREM3XhG5lk=
Subject key identifier: CD:98:A1:FD:ED:AA:E2:E0:66:33:6A:1E:42:38:69:FE:57:EA:6F:E9
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 05923327B008D0455D983E5D22A1D22E43448128
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363933343a3a2f34382d3438203d3e203136393039.roa
Signing time: Sat 24 May 2025 18:12:02 +0000
ROA not before: Sat 24 May 2025 18:07:02 +0000
ROA not after: Sat 23 May 2026 18:12:02 +0000
asID: 16909
IP address blocks: 2a14:7584:6934::/48 maxlen: 48
Validation: Failed, certificate revoked on Sun 25 May 2025 06:06:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
05:92:33:27:b0:08:d0:45:5d:98:3e:5d:22:a1:d2:2e:43:44:81:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: May 24 18:07:02 2025 GMT
Not After : May 23 18:12:02 2026 GMT
Subject: CN=CD98A1FDEDAAE2E066336A1E423869FE57EA6FE9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:1e:0e:2e:b5:ab:69:d5:60:7c:fa:df:9a:86:
66:67:ef:6b:e3:6e:29:b9:12:a0:88:8a:cb:5c:df:
bd:56:8f:c8:18:fb:3b:eb:b7:ec:bb:be:c7:1b:1d:
f7:30:80:a3:8a:77:18:eb:b8:1c:4e:d0:6f:46:f4:
ca:f0:75:41:e5:e8:7a:ab:b7:60:17:5b:5a:db:c5:
8f:38:ea:c9:b2:36:8d:f8:86:83:38:b6:5a:6d:48:
5e:08:c1:0f:06:e5:07:7c:1c:56:d7:8f:a6:12:bc:
88:13:28:99:ba:8a:a7:b8:e6:69:b2:6d:dc:e1:83:
33:76:cc:26:d1:87:52:bb:43:09:02:7b:4b:39:76:
2e:b9:6c:1f:ad:fe:28:9f:6e:ca:34:98:a9:e1:1d:
e9:ae:51:26:c0:08:61:0f:e9:af:3d:89:a5:3c:9c:
bc:be:72:48:f8:66:6d:89:a5:88:65:e0:00:43:6c:
77:ea:c0:ad:f0:11:69:38:d7:44:a6:45:a8:ad:1c:
72:3c:21:bb:7e:4c:2d:2c:32:dd:23:90:e8:cd:4f:
83:bd:c4:b3:60:a4:4b:05:02:62:56:99:3f:34:db:
5c:f2:6b:d9:a5:09:fc:d3:03:13:ff:dd:2d:99:35:
ab:1f:8c:2f:e1:77:b8:2d:31:24:23:60:8e:31:2d:
f4:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:98:A1:FD:ED:AA:E2:E0:66:33:6A:1E:42:38:69:FE:57:EA:6F:E9
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363933343a3a2f34382d3438203d3e203136393039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:6934::/48
Signature Algorithm: sha256WithRSAEncryption
b4:08:a9:d4:f3:96:d3:b0:2d:f7:a7:9f:17:fb:4a:1f:83:df:
7d:9c:d6:03:0f:3b:18:cb:b0:92:61:67:fa:7d:05:66:28:2e:
62:be:37:22:f8:19:1b:df:53:e0:5f:5d:82:ef:47:6b:cf:8f:
2a:86:cf:41:a7:7c:d8:3f:4b:65:2a:47:c3:d0:87:02:8a:af:
2d:f7:0f:c1:ac:16:ee:be:3c:af:bf:a3:c3:92:bb:15:fe:29:
a5:a1:26:90:20:1b:ca:29:a7:4a:97:0b:20:cb:5c:ef:1a:06:
9f:b0:85:35:55:93:65:b6:d8:23:15:35:d8:e7:4a:a1:fd:84:
34:c8:e7:cd:c1:57:b8:40:41:e8:b6:49:f9:b9:4f:b1:c5:da:
2f:75:cd:f8:ca:a9:d4:19:f4:84:99:cd:93:8b:75:36:b0:0b:
69:54:1f:d5:57:f1:60:42:99:77:f8:2e:06:7d:e3:1c:ef:03:
ed:3a:db:8c:0b:21:3a:4a:97:ce:c4:64:31:35:c3:2d:d7:b7:
09:e3:3c:73:73:ca:4e:35:c4:37:67:45:9c:28:8e:51:e5:d0:
b0:85:ad:45:cf:87:e2:78:94:08:ff:19:95:29:a6:c0:94:50:
ad:2a:8b:f4:df:72:86:7b:c2:6e:5a:38:36:d2:68:5b:fd:22:
25:4e:82:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 06:14:40 2025 by rpki-client