Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a366331613a3a2f34382d3438203d3e203136393039.roa
File: 326131343a373538343a366331613a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier: lOnCRpqZtHYAjZShb/LV3z7v20/VDeZjGmSwTY4HC24=
Subject key identifier: D9:09:A9:B6:44:DC:04:05:09:96:95:5F:66:57:75:DD:B0:BD:9E:F1
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 278407E24DBC0C69570E3FCE38D5C005BC336770
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a366331613a3a2f34382d3438203d3e203136393039.roa
Signing time: Sun 25 May 2025 02:42:02 +0000
ROA not before: Sun 25 May 2025 02:37:02 +0000
ROA not after: Sun 24 May 2026 02:42:02 +0000
asID: 16909
IP address blocks: 2a14:7584:6c1a::/48 maxlen: 48
Validation: Failed, certificate revoked on Mon 26 May 2025 03:36:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
27:84:07:e2:4d:bc:0c:69:57:0e:3f:ce:38:d5:c0:05:bc:33:67:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: May 25 02:37:02 2025 GMT
Not After : May 24 02:42:02 2026 GMT
Subject: CN=D909A9B644DC04050996955F665775DDB0BD9EF1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:5a:24:f0:6c:f5:ed:96:36:ee:8c:e5:db:66:
88:fb:13:5e:b2:e0:13:17:4e:ab:6f:cf:51:01:c6:
e8:ff:f3:18:99:8f:b7:b1:de:eb:bb:e6:41:73:0d:
d9:92:39:4d:76:f4:8b:5c:e4:01:7a:77:22:45:d1:
18:37:eb:15:95:6f:12:7e:48:18:96:18:8d:3c:d8:
07:a9:49:19:39:d3:5f:d8:c3:85:da:61:fc:3a:62:
60:2b:95:de:e8:ec:30:95:6f:13:f9:a0:1f:8e:44:
a4:0d:ba:1f:65:44:18:b4:cc:bd:6e:5b:fd:76:fa:
55:e6:64:67:00:30:38:78:06:0a:6d:c0:f8:bd:ac:
8a:b7:26:40:d1:fc:41:28:b1:54:9a:09:b8:39:13:
b2:d2:c0:ed:e2:a0:64:55:d7:7e:83:df:39:a3:81:
a0:03:69:af:d4:fb:65:f5:8c:f2:d3:88:08:55:fb:
56:c6:9b:18:48:85:9d:57:67:a3:91:2d:a9:48:9a:
0b:3b:9c:e3:72:82:ee:e1:e0:ef:7d:43:8f:ef:4a:
46:51:bb:da:83:7d:60:a6:59:e9:f5:eb:1d:ac:d5:
db:da:27:e2:ae:f3:0e:cc:4b:4c:27:39:8a:52:28:
bf:14:f9:b4:5a:09:74:c1:b0:97:d1:a6:ea:86:9a:
99:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:09:A9:B6:44:DC:04:05:09:96:95:5F:66:57:75:DD:B0:BD:9E:F1
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a366331613a3a2f34382d3438203d3e203136393039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:6c1a::/48
Signature Algorithm: sha256WithRSAEncryption
92:4f:c7:5a:1a:0e:57:3f:6d:0b:45:47:29:60:33:5a:25:c9:
3f:03:cf:10:fa:29:43:52:de:5d:46:eb:75:80:0d:e2:52:d9:
17:a2:33:b7:53:93:9e:63:ee:a0:2e:73:96:b3:cf:65:57:c0:
7b:d9:4e:50:a7:87:d6:e4:72:9f:80:e0:77:3b:09:60:f3:1c:
db:4a:5c:cd:ef:b1:24:76:74:c5:d9:1c:2e:f0:6b:9e:a1:ca:
5f:2f:17:0e:9f:3d:49:e2:16:a3:bd:27:a3:42:52:00:25:47:
29:da:85:e1:52:ca:f8:f4:f8:e7:12:cd:85:2d:84:89:3b:9b:
b4:e5:44:d2:e8:0c:fa:88:7b:46:88:e7:31:a4:b7:25:0b:63:
fb:f1:d0:fd:d2:bf:a6:0a:23:0f:32:00:fd:b1:ce:45:5e:b6:
4a:62:62:dd:0c:52:da:a3:d5:88:37:e5:ac:26:80:ce:82:e4:
47:52:0b:ef:90:f5:8b:86:ba:3b:c7:c9:f4:5f:74:2c:12:8f:
dd:c8:dc:dd:02:f6:32:4a:d4:9d:47:ee:69:58:d6:cc:c7:ee:
0a:b0:7d:cf:db:86:f0:5c:5b:1d:55:bf:cf:99:15:ec:cd:d6:
72:76:c9:4d:bf:27:9d:80:80:5c:67:2f:e2:75:7f:de:7c:fe:
c9:66:2a:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 04:15:21 2025 by rpki-client