Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a366534383a3a2f34382d3438203d3e203136393039.roa
File: 326131343a373538343a366534383a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier: 7Qv5cFmbSBRZvvH+jsX35lWvFb7lgY7c6JE/3J5GLOw=
Subject key identifier: 71:B3:10:DC:2B:3A:9E:E9:2C:A5:43:70:E2:21:68:85:3D:18:40:BE
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 70D143BC746273F7BC28CB8F4A90B7CFB1580B74
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a366534383a3a2f34382d3438203d3e203136393039.roa
Signing time: Sun 25 May 2025 03:18:02 +0000
ROA not before: Sun 25 May 2025 03:13:02 +0000
ROA not after: Sun 24 May 2026 03:18:02 +0000
asID: 16909
IP address blocks: 2a14:7584:6e48::/48 maxlen: 48
Validation: Failed, certificate revoked on Sat 31 May 2025 13:57:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
70:d1:43:bc:74:62:73:f7:bc:28:cb:8f:4a:90:b7:cf:b1:58:0b:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: May 25 03:13:02 2025 GMT
Not After : May 24 03:18:02 2026 GMT
Subject: CN=71B310DC2B3A9EE92CA54370E22168853D1840BE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:e8:03:8a:51:73:7b:92:78:6c:0d:72:82:97:
da:02:5a:76:72:34:3e:48:33:7f:a6:84:4a:02:09:
05:3b:a5:f2:36:84:da:06:b2:09:53:13:1e:6d:c4:
7f:04:07:33:f4:6b:f8:2e:be:10:31:0b:fd:1c:50:
ab:6a:2f:30:8e:8c:72:88:49:ba:77:be:f0:f6:89:
64:d9:1e:92:d2:a5:25:2e:19:49:21:4a:2b:89:12:
e6:2c:38:69:55:dd:67:84:54:58:6c:43:3b:37:68:
5f:aa:f6:88:56:1e:ed:65:60:13:71:d0:ec:b5:b8:
4e:86:ac:8b:f5:64:2a:e1:1b:09:86:3c:d1:dd:81:
19:de:1d:2f:fd:f9:27:50:2b:65:21:a8:55:70:9e:
b8:f2:21:35:3e:2b:19:72:72:8f:b0:16:1b:3e:af:
2f:13:58:20:81:a1:24:3f:91:c1:b3:a7:34:d4:9f:
80:83:08:46:27:92:42:a6:c1:ca:cd:71:76:d5:9b:
36:0b:e1:10:be:ea:fc:6c:56:b1:88:95:d0:11:7f:
bb:3d:c4:90:82:8a:3d:c1:1d:7f:ba:23:37:db:9f:
0c:07:c9:88:6c:3f:52:d2:9e:42:10:40:f0:fd:68:
c4:49:f5:7f:55:81:ab:4a:49:80:1a:d1:fa:6e:7f:
3a:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:B3:10:DC:2B:3A:9E:E9:2C:A5:43:70:E2:21:68:85:3D:18:40:BE
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a366534383a3a2f34382d3438203d3e203136393039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:6e48::/48
Signature Algorithm: sha256WithRSAEncryption
b2:20:8e:41:f4:c8:a1:ba:02:84:ba:f3:07:37:9e:9f:18:20:
c3:c4:26:de:0d:60:46:67:9a:9a:6d:78:9f:51:52:ac:0a:88:
14:71:98:41:76:81:17:a5:be:67:97:3f:e1:d8:39:13:56:fe:
f2:41:88:f4:90:8b:f2:2c:5f:40:f6:d1:5d:f5:3b:0a:11:ae:
c0:7b:e9:36:ed:07:c9:c5:81:70:f4:f4:f5:c8:4e:aa:f4:b5:
2c:3f:e6:73:c6:1c:c4:5e:78:57:9f:23:28:6e:dd:f6:98:dc:
c2:e8:c5:2a:40:4a:c9:0f:e1:ca:e7:de:69:ee:6a:b1:84:43:
98:93:93:a7:b7:2d:75:40:25:ae:fc:03:25:5f:8d:f2:56:9e:
d3:4b:96:db:94:68:e2:a7:41:27:e7:34:e3:3a:0d:bd:0a:99:
a0:69:6e:9e:ed:d3:77:71:46:5c:65:03:39:fe:7e:42:b0:5d:
ee:c1:b2:cc:ae:d8:d1:1e:01:fd:71:69:b8:e7:bd:29:c2:97:
1e:ae:fb:f7:5f:31:64:7e:eb:bd:15:e5:58:78:1b:be:0e:60:
a7:d3:2b:cd:0e:b4:6e:88:fa:72:86:f6:43:37:e6:a0:e9:56:
6c:53:ac:35:65:0c:30:69:fc:9d:a9:d4:ad:37:e7:92:70:29:
10:74:c8:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 07:45:44 2025 by rpki-client