Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a366431373a3a2f34382d3438203d3e203136393039.roa
File: 326131343a373538343a366431373a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier: 7ZNc917+ESVgTmhLyBwU/GADPOeojSR8D6/0BaA8Srg=
Subject key identifier: F3:5E:96:84:86:19:EE:4E:64:67:27:73:CA:53:82:44:0E:2E:ED:00
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 27D3C2402F36111152F3B6A6566B1627D3B5D9FE
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a366431373a3a2f34382d3438203d3e203136393039.roa
Signing time: Sat 24 May 2025 16:48:02 +0000
ROA not before: Sat 24 May 2025 16:43:02 +0000
ROA not after: Sat 23 May 2026 16:48:02 +0000
asID: 16909
IP address blocks: 2a14:7584:6d17::/48 maxlen: 48
Validation: Failed, certificate revoked on Sun 25 May 2025 13:54:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
27:d3:c2:40:2f:36:11:11:52:f3:b6:a6:56:6b:16:27:d3:b5:d9:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: May 24 16:43:02 2025 GMT
Not After : May 23 16:48:02 2026 GMT
Subject: CN=F35E96848619EE4E64672773CA5382440E2EED00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:e0:42:b7:4d:82:28:32:6c:b4:d4:76:9f:5c:
31:d0:c5:7a:ac:76:91:ca:58:57:93:a5:e9:90:19:
0a:40:33:96:b3:ba:18:5c:08:26:c2:a4:fe:92:d9:
a6:4b:f1:73:94:5e:dc:4d:39:1b:d4:cc:72:f3:5a:
a1:8f:4a:5c:84:b8:82:69:4a:40:2b:b9:40:a0:3d:
17:1c:0c:22:f7:fe:0a:03:5b:02:88:b7:31:36:1d:
9a:81:3f:a8:0f:51:2b:a0:2c:d3:85:49:6d:7a:ec:
c9:7d:56:2e:b0:df:f9:b4:2d:c7:92:6c:a8:0c:e2:
e2:b6:e4:2c:54:cd:b8:56:03:9f:c8:a8:ee:5d:c0:
fb:97:e9:ad:61:9b:25:38:b1:eb:a8:04:f9:0e:be:
b2:11:d1:c0:71:a2:52:f9:dd:ff:ff:75:bd:77:2a:
c8:1d:96:c2:00:5c:7c:04:65:2b:30:e0:07:8c:5c:
1e:46:1c:8e:e6:57:c4:0c:e6:ec:71:fe:e0:36:8f:
d7:61:95:0a:4e:f8:8e:49:0c:9b:2b:dc:3b:3e:7a:
a3:b5:94:84:2d:92:2c:46:09:af:1b:d8:5d:c6:a4:
af:b0:38:fb:66:cf:47:79:9a:78:c4:18:9b:86:00:
b8:14:55:74:dd:60:2a:c6:d5:63:12:ee:3a:79:e4:
9a:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:5E:96:84:86:19:EE:4E:64:67:27:73:CA:53:82:44:0E:2E:ED:00
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a366431373a3a2f34382d3438203d3e203136393039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:6d17::/48
Signature Algorithm: sha256WithRSAEncryption
1e:a4:84:25:e6:4c:ed:42:14:62:08:8a:e3:5b:88:c3:da:2a:
94:fa:cd:0a:9c:1d:25:6f:22:e8:08:0f:1e:fd:cf:5a:69:80:
b8:c9:75:79:7d:87:ef:41:28:78:68:6d:73:b8:f0:b1:30:c8:
b3:bb:e2:c3:81:01:05:f5:bb:d3:6a:3d:4d:66:96:76:5e:e1:
df:4d:58:a7:fb:e4:d0:6c:10:0a:49:84:9c:36:d9:38:25:08:
85:49:27:3c:c7:ef:e1:9c:7c:df:41:c5:8b:07:77:a1:15:e6:
59:32:f6:67:75:78:48:2f:ef:20:f6:ad:79:31:54:96:01:fb:
10:71:a4:6f:bc:0d:aa:fe:17:4b:40:56:bf:4c:96:0f:b6:f2:
5c:45:06:2a:00:e9:91:ab:c3:c9:e1:aa:0a:2b:fa:fd:d2:07:
ef:c0:75:14:4d:e7:1c:52:5e:46:bf:ea:69:0a:41:89:e5:e8:
94:57:8f:22:13:b2:bb:0f:9d:c7:b1:dd:b8:dc:15:ff:37:30:
50:7e:44:8b:09:11:cd:ee:4f:ac:45:66:d7:b8:1a:90:4e:c1:
56:04:bb:4c:33:2a:ec:8e:5e:72:ef:30:ec:0f:b8:52:0a:dd:
bc:0e:c4:30:4d:0f:ca:10:3c:c9:63:4f:c6:2a:b6:10:11:1f:
f4:f8:ce:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 10:45:17 2025 by rpki-client