Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a366435313a3a2f34382d3438203d3e203136393039.roa
File: 326131343a373538343a366435313a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier: eAPVOY7FaUsfAj0w31SJfL+/e1sP3VqgL4756hAVKNc=
Subject key identifier: 13:6D:4C:92:33:3E:D0:2D:ED:AF:4D:CD:7B:B6:65:28:45:BB:0F:2A
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 3707DD548B9433F103338B927264705E10C0963D
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a366435313a3a2f34382d3438203d3e203136393039.roa
Signing time: Sun 25 May 2025 13:54:02 +0000
ROA not before: Sun 25 May 2025 13:49:02 +0000
ROA not after: Sun 24 May 2026 13:54:02 +0000
asID: 16909
IP address blocks: 2a14:7584:6d51::/48 maxlen: 48
Validation: Failed, certificate revoked on Tue 27 May 2025 22:24:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
37:07:dd:54:8b:94:33:f1:03:33:8b:92:72:64:70:5e:10:c0:96:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: May 25 13:49:02 2025 GMT
Not After : May 24 13:54:02 2026 GMT
Subject: CN=136D4C92333ED02DEDAF4DCD7BB6652845BB0F2A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:36:f5:a6:a8:49:87:b0:58:8b:35:63:e3:ee:
87:40:1b:91:3b:d5:a0:85:c3:93:a5:b2:38:7d:ff:
0b:50:f2:86:3c:4f:29:f9:ba:fc:85:d6:5d:ad:84:
1d:cb:27:01:c7:e7:86:95:72:52:fe:70:ad:7f:67:
e5:18:b9:98:62:cd:f0:8c:c1:31:92:0b:6f:6c:ed:
79:38:a9:5a:19:38:8c:ff:75:b3:ff:d0:b7:8a:fc:
c5:6f:28:aa:8c:39:17:65:6c:16:2a:72:e1:5a:5b:
0d:68:d4:58:c6:c4:3d:c6:7f:e0:14:e8:33:be:11:
de:e1:5a:2f:05:c1:89:b7:da:e6:1b:ce:a0:e7:54:
4d:2f:6b:93:28:45:9b:db:11:2e:95:90:30:6f:c4:
0e:6b:87:24:f2:13:2a:a8:61:a1:49:56:0f:00:ca:
f5:97:16:b1:d9:54:fd:a4:7a:d8:14:59:8f:f4:62:
0f:7d:e7:4d:60:e3:52:98:71:4e:f9:11:08:4d:1b:
25:47:f9:3e:33:58:3c:eb:32:d2:17:d5:fb:8d:bc:
81:cc:c6:2d:c4:63:9a:b3:46:8a:79:3c:38:8f:5c:
90:af:16:35:b7:7c:64:af:fb:23:bf:42:0f:ab:8b:
fd:10:b3:aa:ac:6b:4b:d0:f1:01:4e:60:b3:d8:3b:
2e:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:6D:4C:92:33:3E:D0:2D:ED:AF:4D:CD:7B:B6:65:28:45:BB:0F:2A
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a366435313a3a2f34382d3438203d3e203136393039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:6d51::/48
Signature Algorithm: sha256WithRSAEncryption
43:bc:3e:96:d3:41:7f:2a:3c:6f:dc:53:b3:e3:19:65:ac:2b:
3a:89:f3:d0:be:c7:98:39:67:5b:3a:57:b7:1f:85:05:73:ea:
51:69:85:ea:4e:9e:c8:68:28:bb:6d:7a:52:9a:6b:69:b5:8e:
40:9f:b1:ed:1a:4a:77:11:05:e7:4d:13:05:7b:4b:90:36:3f:
c1:04:f9:9e:3e:08:b5:c9:4e:39:ac:73:8a:41:aa:d5:c9:22:
34:46:f3:94:5b:2f:da:e5:fa:b3:73:db:b5:62:aa:22:fb:db:
14:66:b4:80:c4:1f:85:7a:56:25:76:f7:94:b1:0a:f9:bd:9a:
75:75:da:42:37:c5:21:72:f0:6f:5e:29:5d:f4:e9:6e:88:98:
0d:92:9d:0a:97:f2:bb:a9:c4:52:f9:0e:ba:f2:04:73:1f:3d:
96:9f:da:74:ca:c6:9f:7a:db:0d:00:98:1b:ff:32:12:78:de:
3e:0a:84:a9:04:e2:b1:15:0d:58:d6:31:1e:77:52:4c:b9:e0:
6f:eb:26:36:ed:da:51:12:75:12:2c:08:a7:b7:ce:44:87:ac:
6c:3d:9d:b0:29:df:d9:9f:97:53:29:76:52:25:cc:a4:92:9a:
65:f6:18:c5:9e:a8:a8:5c:c1:53:41:ae:3b:0a:08:b1:b6:c1:
06:c9:ee:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 02:41:57 2025 by rpki-client