Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538313a333537333a3a2f34382d3438203d3e203136393039.roa
File: 326131343a373538313a333537333a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier: fcow7zf+VpQmqpYcAbs4Mss82uRB3PGRf7D4E2W3+i0=
Subject key identifier: 66:73:FE:19:10:D6:7E:B8:F6:CC:F0:58:F2:2A:2C:F6:86:B1:CD:C6
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 4598C2DBC22189C3B582CDAA563EDD383B85BE96
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538313a333537333a3a2f34382d3438203d3e203136393039.roa
Signing time: Fri 20 Jun 2025 06:24:44 +0000
ROA not before: Fri 20 Jun 2025 06:19:44 +0000
ROA not after: Fri 19 Jun 2026 06:24:44 +0000
asID: 16909
IP address blocks: 2a14:7581:3573::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 25 Jun 2025 16:06:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
45:98:c2:db:c2:21:89:c3:b5:82:cd:aa:56:3e:dd:38:3b:85:be:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: Jun 20 06:19:44 2025 GMT
Not After : Jun 19 06:24:44 2026 GMT
Subject: CN=6673FE1910D67EB8F6CCF058F22A2CF686B1CDC6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:c5:58:3c:50:93:d7:9b:22:ad:ea:23:00:8f:
d6:b6:bc:bd:ba:0f:8a:db:c4:70:87:91:3e:44:f3:
a5:21:69:1b:ce:fb:46:38:f7:85:b2:1b:85:26:0d:
ef:10:d0:7d:00:54:83:e4:41:8a:e8:a2:1b:ea:49:
bf:90:9e:bf:2a:a4:b9:b0:81:6a:0d:fc:a2:5b:27:
b1:7f:90:44:26:84:06:0d:f0:04:89:d1:34:51:e9:
01:67:3f:c0:ab:06:49:5a:96:13:80:0c:11:07:25:
a4:b5:46:ee:9b:0b:8a:01:0d:6b:f1:f6:df:cb:5e:
dc:37:6e:c6:06:4b:96:ef:09:07:e2:c0:23:d6:b4:
e2:8f:35:ac:4e:8b:d8:76:52:93:65:d7:db:4f:1f:
70:54:90:fc:ad:48:61:53:6f:de:26:4d:cc:0c:14:
74:a0:5a:b8:db:b8:99:c5:2a:32:63:7e:39:b5:73:
30:17:36:dd:69:b8:18:79:66:5b:8b:36:7f:32:ec:
fd:eb:1f:5c:2d:19:d8:45:86:00:86:5f:6a:84:80:
97:b6:c7:44:37:c7:66:d1:be:49:31:d8:06:c5:06:
b5:57:1f:f4:1c:32:c5:85:2a:5d:41:6a:e5:d7:e7:
49:ea:8b:e9:25:26:a7:9b:b0:8e:86:db:2d:c1:25:
e7:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:73:FE:19:10:D6:7E:B8:F6:CC:F0:58:F2:2A:2C:F6:86:B1:CD:C6
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538313a333537333a3a2f34382d3438203d3e203136393039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7581:3573::/48
Signature Algorithm: sha256WithRSAEncryption
14:0b:b6:14:5f:1b:4d:41:d9:7d:43:f9:da:92:20:4e:2e:34:
85:06:19:e6:42:87:68:26:8a:38:39:f7:02:12:ca:d5:cb:94:
0a:93:15:99:c5:46:79:64:85:17:49:6c:e9:5d:bd:6a:dd:b8:
e8:06:a5:66:a1:cb:27:56:64:99:05:3e:53:f1:1f:8a:e9:5c:
79:2b:73:03:23:e1:1d:72:11:8d:3a:74:bc:c2:41:bb:f7:5a:
76:e5:c9:56:bd:37:47:c8:3b:87:0d:cb:ad:c9:42:ea:58:8a:
c4:9d:d3:1e:2e:78:44:b0:f8:25:16:f8:77:f8:06:21:85:c6:
b0:e5:06:b2:14:53:7a:0c:75:38:0e:20:ab:b6:a2:2c:b0:b3:
11:58:23:cf:f7:c1:76:ba:0b:67:5e:ce:a3:b9:15:7a:6a:6d:
e9:fc:3c:85:9e:09:88:d2:52:e0:b9:04:6a:f7:70:ad:a9:26:
ad:d8:7a:49:35:eb:5c:a7:94:e4:11:6e:93:e4:39:41:58:e0:
bf:25:b0:6c:31:11:cd:da:0b:ad:e1:4e:36:f0:15:3f:72:9a:
e8:41:ef:cc:47:32:bf:f7:93:97:f5:e1:7e:43:a9:13:9f:02:
4f:93:80:ce:91:fe:57:01:cf:6f:a8:ff:99:c1:ef:2a:aa:4f:
45:ac:82:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 23 23:52:59 2025 by rpki-client