Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a366362353a3a2f34382d3438203d3e203136393039.roa
File: 326131343a373538343a366362353a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier: vjwG1iHLzqYN3dgjC8fBuqPO4OEmmJZjxzwJzJTPngc=
Subject key identifier: 95:4E:16:84:85:EF:A7:7C:80:BD:4C:C6:53:72:75:4D:87:5C:D5:D0
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 29EEC3691517E037926EF27DBBD29AF0075DF747
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a366362353a3a2f34382d3438203d3e203136393039.roa
Signing time: Sat 24 May 2025 16:48:02 +0000
ROA not before: Sat 24 May 2025 16:43:02 +0000
ROA not after: Sat 23 May 2026 16:48:02 +0000
asID: 16909
IP address blocks: 2a14:7584:6cb5::/48 maxlen: 48
Validation: Failed, certificate revoked on Sun 25 May 2025 02:54:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
29:ee:c3:69:15:17:e0:37:92:6e:f2:7d:bb:d2:9a:f0:07:5d:f7:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: May 24 16:43:02 2025 GMT
Not After : May 23 16:48:02 2026 GMT
Subject: CN=954E168485EFA77C80BD4CC65372754D875CD5D0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:08:3d:90:91:68:9d:02:e2:ff:48:81:c4:c7:
28:7d:bd:dd:9f:f7:fa:bd:62:aa:8f:6d:69:53:a3:
a2:72:f9:0c:54:dc:23:c8:6c:88:17:35:47:66:10:
0f:1e:f4:c6:70:be:b4:1a:26:cd:6f:a4:51:24:63:
09:a1:34:ac:f4:5f:91:96:48:f4:3d:b6:a3:0a:af:
9c:4d:57:13:12:1f:6e:3e:b3:9f:c5:16:50:f6:b7:
f2:93:0a:b5:80:1f:88:f6:d0:14:46:9e:a9:62:69:
6e:51:67:79:25:ef:5d:78:4b:57:44:cf:41:fd:31:
90:77:55:01:1c:59:fb:fe:8b:5b:8d:ac:b8:44:18:
a6:5a:78:a1:37:f6:51:73:eb:fb:c5:f0:32:92:d0:
0e:de:98:d2:3e:d3:ba:5e:a8:ff:c0:42:e2:63:14:
77:36:0b:ca:21:6f:a7:e1:d1:82:7e:43:18:42:32:
50:c1:8f:8f:47:89:56:13:8f:30:91:44:85:6b:35:
e1:89:8f:2e:5a:61:2d:00:93:3d:45:a2:cf:11:97:
bf:d6:46:b3:03:93:c1:ef:ed:36:ff:85:c5:53:38:
28:22:30:59:b6:52:7d:80:31:ef:e8:60:90:8f:d0:
d1:53:aa:34:0b:05:5d:f7:1e:47:b0:c7:13:ba:d7:
76:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:4E:16:84:85:EF:A7:7C:80:BD:4C:C6:53:72:75:4D:87:5C:D5:D0
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a366362353a3a2f34382d3438203d3e203136393039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:6cb5::/48
Signature Algorithm: sha256WithRSAEncryption
89:1d:6a:24:eb:4d:cc:dc:db:d4:61:65:30:03:aa:ef:55:e3:
30:e1:1c:a5:f5:e7:81:01:d4:52:eb:21:3c:4c:31:5a:ba:bc:
b7:81:fd:5b:74:35:24:46:eb:2e:e0:d9:e3:e4:da:db:4c:bb:
06:d1:53:c7:f2:72:d2:09:06:89:96:1a:e6:0a:62:04:26:a7:
10:93:0f:53:39:1c:ec:6a:b1:ce:0a:26:ac:31:32:c7:3d:cf:
fa:4e:15:31:c0:c7:0d:30:6a:84:2b:9b:34:da:69:f3:fd:06:
dd:1b:45:44:b1:73:f8:6a:21:30:b3:cd:84:bc:05:89:62:b4:
45:79:65:0c:e8:5d:c9:84:0d:df:98:e1:2f:61:9b:1c:aa:b8:
a3:8c:38:14:29:bc:1c:43:35:ed:74:ca:72:09:2b:16:f8:38:
91:b6:54:40:a7:df:d3:4e:f6:ac:10:3e:70:31:ee:66:80:b7:
b5:8f:5e:26:f0:42:23:e4:3f:22:9c:97:27:2e:0f:50:ab:87:
8f:cf:82:ca:b2:6d:a8:a3:59:90:98:42:75:23:f8:67:ae:b0:
b7:10:59:bf:29:c7:c0:03:32:9e:30:10:2a:6e:29:9f:da:a1:
5e:92:2e:63:49:35:95:97:6d:11:e7:c1:69:08:68:19:86:1f:
59:c4:64:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 06:18:37 2025 by rpki-client