Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538313a333536643a3a2f34382d3438203d3e203136393039.roa
File: 326131343a373538313a333536643a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier: nfWs/dyc9eDoLvicrylKsYKXUADPyM0tAbEdS7NZTvs=
Subject key identifier: A1:DE:CA:59:1A:B7:68:AF:3D:A5:F0:12:68:F7:7A:B4:FF:4C:6E:A9
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 0D3532A01B422171CE308A64072CA940AEF43D91
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538313a333536643a3a2f34382d3438203d3e203136393039.roa
Signing time: Fri 20 Jun 2025 06:26:10 +0000
ROA not before: Fri 20 Jun 2025 06:21:10 +0000
ROA not after: Fri 19 Jun 2026 06:26:10 +0000
asID: 16909
IP address blocks: 2a14:7581:356d::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 25 Jun 2025 16:06:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0d:35:32:a0:1b:42:21:71:ce:30:8a:64:07:2c:a9:40:ae:f4:3d:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: Jun 20 06:21:10 2025 GMT
Not After : Jun 19 06:26:10 2026 GMT
Subject: CN=A1DECA591AB768AF3DA5F01268F77AB4FF4C6EA9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:66:82:e0:48:17:e0:61:97:0b:4c:3a:21:db:
04:47:4e:a7:58:2f:1b:23:bd:cc:dd:ce:e9:7f:ac:
f2:50:df:3a:ae:0f:29:16:0d:7f:76:78:54:79:e5:
dd:26:da:f6:2d:7b:a9:11:39:63:df:45:93:7f:b9:
0e:9f:04:45:59:ff:e7:5b:2c:9c:57:e2:14:6d:12:
2b:5c:53:22:22:b4:5f:0a:18:45:bc:c2:13:13:15:
b0:19:7b:f2:11:26:cf:3d:c5:70:f3:64:e9:a2:41:
f6:d8:0a:54:c4:e6:c3:fa:c3:31:86:2b:7a:ba:d8:
46:f6:a5:32:41:83:26:74:74:8a:98:8c:6c:b9:ce:
40:09:93:a6:98:89:3d:64:a6:3f:9d:f5:2e:d2:77:
84:b8:3f:3c:af:c9:18:ca:26:61:b5:dc:54:03:d5:
13:1d:7a:1e:a4:24:1d:7b:06:63:37:d5:0d:f9:98:
50:cc:ea:e0:d6:1f:59:3b:01:7a:66:32:fb:21:b8:
e2:87:79:f9:cf:62:ce:64:68:d1:71:dc:05:3a:21:
93:58:2a:86:58:2c:44:47:07:c8:14:95:fb:43:db:
97:52:10:3f:9f:c9:43:e5:d7:04:b9:10:42:b8:85:
e6:c3:b1:cc:45:cd:40:cd:75:9e:db:c0:36:6f:81:
1c:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:DE:CA:59:1A:B7:68:AF:3D:A5:F0:12:68:F7:7A:B4:FF:4C:6E:A9
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538313a333536643a3a2f34382d3438203d3e203136393039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7581:356d::/48
Signature Algorithm: sha256WithRSAEncryption
70:cb:d9:ae:3f:cd:dc:5f:52:02:3f:12:36:8f:62:cd:14:d2:
09:96:af:24:c5:99:01:e2:42:56:e7:0a:27:16:b2:60:5a:ff:
68:16:b0:f0:c8:cb:21:14:29:32:1c:32:a2:2e:23:69:c2:ee:
74:39:84:c1:da:ee:e7:75:6f:8c:a8:f6:f9:1f:df:da:f5:b8:
63:86:fb:5d:9d:0b:7f:7f:0b:4d:96:2f:a9:0d:6f:16:1f:0d:
6b:df:db:71:d8:3a:37:c7:c8:cd:f9:4f:a8:15:3b:15:24:a8:
6f:c6:a2:8e:fd:7a:f2:25:eb:36:84:db:fc:bb:8a:69:98:34:
85:78:44:87:30:c0:e0:23:46:fe:63:63:38:d8:79:21:22:db:
a9:ee:63:93:c2:c2:93:6d:9a:14:53:bd:28:b0:32:9d:08:11:
bc:f2:95:46:e2:7a:a6:31:e7:5b:e1:b0:b8:48:b0:04:8e:ae:
76:91:4b:8f:11:66:68:da:52:53:02:b3:e2:22:72:3f:09:72:
51:f0:52:dc:53:a9:c4:8c:db:ba:47:9c:36:a2:39:78:05:40:
76:37:40:39:e5:0c:75:94:12:08:97:3d:15:c9:92:30:30:a8:
16:e5:4d:75:88:86:d7:56:77:04:d4:3d:a0:e1:5a:4d:0d:34:
01:c5:8b:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 23 23:52:04 2025 by rpki-client