Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a366138663a3a2f34382d3438203d3e203136393039.roa
File: 326131343a373538343a366138663a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier: VTT6CLng6u2UgoaYJ+smmW5zw4XYRtTHQnikUpFT1+g=
Subject key identifier: FE:FA:E3:A6:17:17:0D:F9:B3:C6:C4:94:B1:BE:00:F0:04:23:52:2B
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 047984A991CD63757749ADA2BCF29BC0D0BDBF18
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a366138663a3a2f34382d3438203d3e203136393039.roa
Signing time: Thu 29 May 2025 13:24:01 +0000
ROA not before: Thu 29 May 2025 13:19:01 +0000
ROA not after: Thu 28 May 2026 13:24:01 +0000
asID: 16909
IP address blocks: 2a14:7584:6a8f::/48 maxlen: 48
Validation: Failed, certificate revoked on Sat 31 May 2025 17:16:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
04:79:84:a9:91:cd:63:75:77:49:ad:a2:bc:f2:9b:c0:d0:bd:bf:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: May 29 13:19:01 2025 GMT
Not After : May 28 13:24:01 2026 GMT
Subject: CN=FEFAE3A617170DF9B3C6C494B1BE00F00423522B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:99:25:58:6f:fd:2f:a8:e0:ef:98:b0:73:2d:
5a:3f:04:85:28:bc:19:b0:2f:cf:cd:83:a6:41:d0:
26:ea:7b:a4:b9:5a:d2:31:c9:70:06:c9:fa:ad:10:
67:74:13:8c:ae:31:31:e2:7e:b7:0b:b9:36:f7:0a:
1e:14:72:33:c4:bc:bf:86:49:5f:41:a3:53:4c:3c:
3b:51:4e:a3:8e:4a:0c:ff:00:c7:75:8c:4d:a2:8b:
37:03:35:d3:c5:0b:6c:7e:e4:1b:b4:86:5a:19:08:
c7:a7:fc:a2:97:d9:cf:db:d2:11:b2:65:bd:d8:cc:
77:fa:cc:81:8d:86:45:56:80:b5:48:39:5f:67:a5:
10:21:27:6f:d8:d5:b6:0d:61:ad:76:16:61:09:25:
a7:c6:23:f0:4b:b5:27:c9:2a:19:8b:3f:ac:5d:22:
88:65:cd:14:72:67:b0:c9:bb:56:a5:38:26:b2:97:
62:3a:72:5d:ab:a8:ff:42:6a:ac:b8:3c:35:95:7a:
19:0a:24:33:29:92:98:09:56:09:e7:46:d9:0b:07:
63:1a:ca:a9:cf:bd:e1:ad:4a:75:02:b4:57:99:1d:
0d:8d:56:90:41:a8:6d:29:dc:ff:b2:88:4d:6e:3d:
e4:9b:3a:2a:dd:2f:4b:5e:67:0f:6a:59:d7:ea:81:
01:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:FA:E3:A6:17:17:0D:F9:B3:C6:C4:94:B1:BE:00:F0:04:23:52:2B
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a366138663a3a2f34382d3438203d3e203136393039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:6a8f::/48
Signature Algorithm: sha256WithRSAEncryption
7a:a9:22:88:7c:91:89:c4:9f:2e:7b:25:cc:7f:f4:64:c2:a6:
39:78:df:b9:b0:99:96:22:3f:10:04:7f:14:b4:eb:eb:d3:68:
db:30:cc:5f:8c:a1:a6:81:a6:9d:68:91:69:05:fd:21:8a:b9:
d0:e3:c3:a6:94:8f:d8:16:a3:df:d9:dc:8c:a4:03:81:53:2c:
f8:2d:44:e6:88:8e:ec:78:db:86:d4:7b:89:35:95:66:80:e6:
5d:eb:e6:55:9c:e6:7f:83:55:d7:ed:6c:8f:88:de:f9:cb:65:
58:f5:ba:67:c1:bd:cc:c8:0b:83:41:ca:e3:5f:c4:09:3d:52:
ba:e3:34:76:0a:9d:43:75:fb:aa:c0:0f:c2:c7:05:69:58:71:
9e:bd:c4:cc:14:c8:ab:c3:b3:c7:33:4b:92:00:04:0b:29:dd:
bc:33:57:73:bc:d6:a4:0a:94:ed:a1:f4:7f:89:82:db:5e:0e:
48:b6:91:bf:ef:e6:29:95:97:e9:89:eb:69:a6:43:d2:6a:37:
1c:cb:c0:ea:37:61:07:ae:b5:e1:d3:48:ca:74:62:77:2e:13:
ee:13:28:92:48:c9:60:7f:88:41:16:7a:63:61:26:ed:e8:59:
99:22:b9:67:f1:8c:05:20:c8:60:f2:39:0b:75:e4:8c:de:85:
ec:aa:2a:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 05:55:54 2025 by rpki-client