Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538313a333533323a3a2f34382d3438203d3e203136393039.roa
File: 326131343a373538313a333533323a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier: uLfp+WVmLMS2JK2MzYugSr2Mo3aMlcQ92sIb9OroytI=
Subject key identifier: 2A:2B:80:8F:84:B7:66:CD:1D:1D:5B:6B:0E:8D:D4:CC:B4:85:30:A9
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 24DDFC19DE7CBF7C3941DB4BD7D28F5F26E98F32
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538313a333533323a3a2f34382d3438203d3e203136393039.roa
Signing time: Fri 20 Jun 2025 06:24:53 +0000
ROA not before: Fri 20 Jun 2025 06:19:53 +0000
ROA not after: Fri 19 Jun 2026 06:24:53 +0000
asID: 16909
IP address blocks: 2a14:7581:3532::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 25 Jun 2025 16:06:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
24:dd:fc:19:de:7c:bf:7c:39:41:db:4b:d7:d2:8f:5f:26:e9:8f:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: Jun 20 06:19:53 2025 GMT
Not After : Jun 19 06:24:53 2026 GMT
Subject: CN=2A2B808F84B766CD1D1D5B6B0E8DD4CCB48530A9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:95:d7:20:d8:ac:9e:b6:e5:e3:bb:f5:44:12:
89:6a:95:68:e9:55:2a:97:8f:49:fb:db:29:c7:9d:
7b:40:fd:50:4f:87:10:58:df:40:3a:19:d4:6a:e7:
b1:6d:a6:69:66:9e:a1:98:fa:10:6e:11:6e:90:4e:
49:0f:b8:a5:22:c6:f1:66:23:18:c8:ad:c8:c4:5e:
82:0b:f6:80:df:bc:e3:db:ff:8d:f7:d2:f7:08:f8:
67:a7:cc:7a:28:eb:3b:50:0f:68:16:cf:f7:cd:89:
f1:cf:0a:5e:93:be:e3:23:84:22:b3:0e:a8:4d:9b:
65:3d:44:ba:dd:cc:70:38:55:0f:ae:3d:ea:f2:ce:
7b:81:b4:b5:21:0e:e5:3d:37:82:a9:6f:a5:43:70:
5c:2b:87:d9:ef:96:80:10:be:60:e0:37:68:60:7b:
91:69:b7:54:17:de:7d:0b:26:88:1f:aa:1e:e5:b5:
e7:16:94:ad:e4:74:63:23:97:8a:8a:d0:46:58:6c:
5b:7d:b4:4c:f4:49:f0:0e:e2:51:37:35:27:23:56:
37:d9:0b:97:55:e6:a5:fd:99:b7:7e:70:b2:ea:19:
31:80:62:36:a4:ce:c0:53:bf:6d:87:a8:2a:a7:98:
a2:3f:cb:89:df:54:7e:ab:83:a6:6d:1d:8c:ee:b9:
9b:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:2B:80:8F:84:B7:66:CD:1D:1D:5B:6B:0E:8D:D4:CC:B4:85:30:A9
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538313a333533323a3a2f34382d3438203d3e203136393039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7581:3532::/48
Signature Algorithm: sha256WithRSAEncryption
14:9b:e1:49:a0:14:66:ba:f0:0b:fa:1c:7d:1e:76:29:7a:0f:
27:c8:a9:e9:e0:80:6a:3b:42:48:da:c4:f5:ff:fb:17:c5:d1:
64:14:cc:33:7a:4f:8a:53:38:a8:18:a1:7a:69:1f:00:cf:8f:
6c:e2:4c:9e:fd:09:3c:7e:bd:d2:d4:c9:73:c8:09:7d:f3:4a:
3e:52:e3:14:c7:ae:d9:ae:9d:3a:be:14:9d:36:64:ad:0b:5b:
9f:10:68:48:40:86:6c:94:29:f4:f7:9e:0c:30:01:cc:2d:dd:
b1:90:a4:b5:3d:e7:75:62:ee:60:91:6c:53:92:4e:d9:1c:77:
f7:0d:7c:b1:65:33:b5:05:be:9b:56:8e:c0:c0:8e:30:67:b3:
77:7a:83:52:a1:02:45:ca:19:8a:94:5e:93:a2:f2:b1:d7:9c:
35:e9:b6:12:12:75:9b:94:ab:79:1a:b9:09:80:f0:5a:b8:ae:
1e:15:08:02:2a:e4:c8:58:71:33:ed:de:b2:2d:2c:32:a6:46:
79:17:7b:c5:8e:9b:c6:a2:7d:81:5b:50:11:60:b2:48:a1:5f:
e5:0d:a3:a9:3c:74:73:e8:ec:63:fa:92:55:dd:a8:81:b7:c9:
91:2b:97:cc:1d:73:07:b4:98:71:ab:d3:70:8e:73:48:37:02:
5a:d7:ef:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 23 23:52:28 2025 by rpki-client