Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363934663a3a2f34382d3438203d3e203136393039.roa
File: 326131343a373538343a363934663a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier: 5w+Eah6UNU4FGCV7FegJrDp+wtDolc42MFYeT8pwjNM=
Subject key identifier: 98:3D:9C:39:27:7F:DD:E6:FE:F4:78:C7:12:76:01:36:89:69:E9:08
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 62AE59C8F17BD79C3DB8D09681976FE6EAB13ABE
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363934663a3a2f34382d3438203d3e203136393039.roa
Signing time: Sat 31 May 2025 13:57:39 +0000
ROA not before: Sat 31 May 2025 13:52:39 +0000
ROA not after: Sat 30 May 2026 13:57:39 +0000
asID: 16909
IP address blocks: 2a14:7584:694f::/48 maxlen: 48
Validation: Failed, certificate revoked on Sat 31 May 2025 17:16:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
62:ae:59:c8:f1:7b:d7:9c:3d:b8:d0:96:81:97:6f:e6:ea:b1:3a:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: May 31 13:52:39 2025 GMT
Not After : May 30 13:57:39 2026 GMT
Subject: CN=983D9C39277FDDE6FEF478C7127601368969E908
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:c0:5b:e2:03:0f:63:96:00:77:12:ab:7a:02:
c1:14:25:6e:97:82:a7:66:a8:33:91:78:64:72:c8:
7f:c9:e8:d3:35:5e:23:a4:a0:35:4c:f7:25:a8:39:
ef:cd:2f:d0:a5:b6:14:67:7b:e3:97:f4:53:0f:df:
d4:4a:66:94:54:53:e1:b8:f1:82:07:e4:40:81:23:
03:42:54:1f:99:50:55:be:0a:49:0c:19:bf:a4:6f:
7a:73:c2:69:65:cd:02:f9:d6:09:cd:90:42:1e:e6:
84:5a:f0:bd:3b:e7:94:c8:58:9e:26:b0:ad:3e:3d:
8d:e8:74:57:ba:0d:31:c9:9c:30:d2:6e:4d:79:b6:
e6:14:9b:b0:de:aa:f4:87:46:0c:42:ad:98:cb:da:
c2:8e:ec:a8:c9:8a:a8:64:ec:40:4f:ed:f5:07:f5:
cc:54:c5:c6:ed:f7:31:fd:2f:3b:83:d4:0a:3e:b4:
7a:05:34:58:01:b9:4c:9c:be:db:ef:44:c0:a4:0c:
e3:de:f4:d1:9d:30:46:9e:1c:3d:b1:65:62:46:8e:
82:f6:81:b5:59:37:93:42:ed:d5:ea:52:39:77:56:
da:0d:8b:1c:f2:51:d4:3e:69:ad:26:f8:bd:58:30:
96:ca:62:41:ff:50:c7:fd:9d:3d:cb:3d:4e:5c:d1:
d2:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:3D:9C:39:27:7F:DD:E6:FE:F4:78:C7:12:76:01:36:89:69:E9:08
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363934663a3a2f34382d3438203d3e203136393039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:694f::/48
Signature Algorithm: sha256WithRSAEncryption
12:6f:1e:c4:57:20:6c:68:61:0c:81:44:29:16:ae:39:a0:26:
21:a2:c6:3e:61:6c:f1:42:3f:4a:88:e5:d5:8a:57:53:01:b4:
58:52:2a:5b:d0:f3:b5:2a:25:ee:b2:8d:78:e8:ca:d3:e4:df:
4a:e6:11:0f:cd:07:4e:fd:2f:ea:2b:1e:b7:b6:bf:64:6a:40:
be:58:69:23:1b:48:df:63:c4:f6:ee:20:68:33:6e:da:ab:8f:
44:7b:fa:a2:e6:6c:00:e8:3c:44:e6:33:21:11:3e:c0:61:73:
f3:f1:83:24:2a:0e:a5:f3:69:d1:70:0b:63:3f:a4:e0:9f:3e:
73:93:71:46:03:50:cb:6a:a9:2c:04:4b:09:cc:92:8e:64:77:
1a:be:7f:9c:a7:9e:79:95:7d:97:01:d8:47:8f:5b:05:96:11:
a4:3f:d1:7f:94:7c:83:be:cd:19:46:bf:91:82:78:19:56:44:
0b:d2:ac:b0:3c:b5:2f:4d:5f:8c:45:d4:a2:36:d1:32:b7:d1:
fa:2e:8a:e6:98:09:a9:62:c4:be:8d:cc:4b:f7:e7:19:79:13:
39:a9:17:9c:4e:ab:66:34:b3:72:13:a2:da:88:9f:ea:19:79:
09:7e:a2:6b:6a:d8:9a:b1:41:5e:8f:85:c7:62:2b:96:30:f2:
c6:42:cc:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 01:26:52 2025 by rpki-client