Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538313a333534383a3a2f34382d3438203d3e203136393039.roa
File: 326131343a373538313a333534383a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier: d84sUXRuixFWpmqg0ZTjjG0IUdfDSYOLdrnsi/cS+jU=
Subject key identifier: 4B:1F:F6:BB:4E:12:6E:6E:D7:30:C8:9C:7B:41:3B:10:28:41:EE:D0
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 2C09EAAFD8F64B3B2C139BE3EB35F3EFF032CB50
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538313a333534383a3a2f34382d3438203d3e203136393039.roa
Signing time: Fri 20 Jun 2025 06:31:02 +0000
ROA not before: Fri 20 Jun 2025 06:26:02 +0000
ROA not after: Fri 19 Jun 2026 06:31:02 +0000
asID: 16909
IP address blocks: 2a14:7581:3548::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 25 Jun 2025 16:06:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2c:09:ea:af:d8:f6:4b:3b:2c:13:9b:e3:eb:35:f3:ef:f0:32:cb:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: Jun 20 06:26:02 2025 GMT
Not After : Jun 19 06:31:02 2026 GMT
Subject: CN=4B1FF6BB4E126E6ED730C89C7B413B102841EED0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:5c:29:39:86:2e:db:e2:12:13:ce:77:27:f2:
8b:9f:c6:dd:0a:24:8c:61:ab:2c:ae:01:1b:47:60:
79:1a:5b:29:f4:5a:21:01:bb:30:5d:c2:35:34:99:
ae:31:c5:fb:56:0e:ec:bd:de:59:f9:e5:71:f1:47:
ad:06:de:8a:4e:e0:4f:7e:ed:2e:30:42:05:30:d5:
4e:c6:f2:1e:85:4d:33:a2:6c:4f:0f:be:c9:1e:61:
f1:8e:93:4d:d5:4b:46:85:33:57:d8:73:9f:18:1c:
70:f3:60:37:fa:a9:ff:1b:51:35:17:05:e7:21:dc:
cc:e1:6c:96:65:f3:f1:9e:6d:18:cd:25:a1:b9:86:
d2:a5:d0:25:db:13:c6:5f:07:e0:c7:cc:2a:82:55:
0d:d7:93:c4:f4:d9:f1:2e:47:dd:40:e5:70:6f:04:
57:96:a7:40:95:7c:94:e7:79:86:22:cc:7a:e8:bb:
9d:7b:23:30:29:8e:e3:0d:f9:51:b8:b7:ac:48:ee:
3d:de:e0:14:d8:f8:05:81:31:68:b8:b1:37:28:ef:
47:d6:fa:f4:7c:b4:f5:5f:53:19:a4:e1:cf:fb:4a:
d9:36:23:18:fc:36:d7:19:f9:68:77:11:75:45:04:
34:f1:08:24:6a:a2:0d:9d:e1:5f:91:f9:66:3f:eb:
c2:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:1F:F6:BB:4E:12:6E:6E:D7:30:C8:9C:7B:41:3B:10:28:41:EE:D0
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538313a333534383a3a2f34382d3438203d3e203136393039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7581:3548::/48
Signature Algorithm: sha256WithRSAEncryption
3b:79:81:9a:b4:34:9e:cb:6c:bb:46:57:52:b1:af:a2:fc:b0:
53:8a:6d:a6:98:c6:7a:8f:1e:d7:f9:a2:4b:5b:1b:85:67:c7:
15:5a:a5:8a:4b:9b:df:d2:92:42:f5:4b:4f:6a:21:8f:bc:cf:
49:35:62:f2:aa:98:5c:dc:b7:87:cb:60:87:02:a2:ca:f3:55:
b5:89:e8:f2:65:27:c3:c0:f4:d1:59:0a:73:58:ff:28:8c:9b:
b8:7c:1f:f5:28:3c:76:30:b7:8d:8a:0b:4a:cc:02:39:fe:ef:
58:c6:52:c9:58:de:d2:30:cb:c2:64:1a:47:6d:ad:f9:a1:4f:
3b:ec:1b:5d:ca:a6:d8:73:f2:a3:a0:1b:08:a8:59:c1:41:77:
de:9c:bf:17:f1:0d:a9:ac:96:c4:ca:99:ff:d9:93:a5:3d:ea:
5d:ab:9e:d5:6b:40:c1:e0:0b:d0:36:96:7a:05:52:5c:2d:ba:
e8:30:46:c0:bb:27:bd:dc:ae:3b:5b:1e:03:8b:83:49:3b:80:
7f:f7:ff:46:0b:cb:c3:4e:70:fc:1f:2e:8d:b1:dc:30:37:26:
4f:07:1b:09:d0:7f:fe:ef:1e:ff:de:2d:26:3d:cc:e2:60:e7:
42:eb:7f:aa:53:ab:d6:49:c9:87:47:b4:ba:f7:61:c5:d7:ec:
6a:ba:b1:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 25 01:02:02 2025 by rpki-client