Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538313a333537353a3a2f34382d3438203d3e203136393039.roa
File: 326131343a373538313a333537353a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier: yVMkiXNrKzlcP0Dql3Z0lpnw7ULQ6u4onwZ/qz1aejg=
Subject key identifier: 45:AA:00:31:15:08:DF:C3:96:19:89:B5:BA:0D:42:94:6E:C6:DA:72
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 7AD50979A14EE9DA12D04E68AA9547E6FB00175B
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538313a333537353a3a2f34382d3438203d3e203136393039.roa
Signing time: Fri 20 Jun 2025 06:24:45 +0000
ROA not before: Fri 20 Jun 2025 06:19:45 +0000
ROA not after: Fri 19 Jun 2026 06:24:45 +0000
asID: 16909
IP address blocks: 2a14:7581:3575::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 25 Jun 2025 16:06:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7a:d5:09:79:a1:4e:e9:da:12:d0:4e:68:aa:95:47:e6:fb:00:17:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: Jun 20 06:19:45 2025 GMT
Not After : Jun 19 06:24:45 2026 GMT
Subject: CN=45AA00311508DFC3961989B5BA0D42946EC6DA72
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:f2:a8:d5:09:c7:58:61:79:2c:f2:45:d9:b0:
d9:10:f0:89:6a:e5:e2:25:08:39:97:2a:90:d3:f9:
cf:9d:22:34:20:ac:7d:b9:e4:67:a5:96:69:58:a0:
d6:5c:8c:70:6b:8b:e7:4b:35:66:d8:c5:95:66:e4:
6b:9a:e7:4d:d1:e4:6b:19:e0:76:a9:95:52:2e:84:
b3:56:08:83:c4:07:b3:73:b0:89:11:e1:1d:10:b4:
33:89:5c:09:02:51:2f:5d:83:70:05:90:91:5a:8e:
80:b5:60:cd:aa:bd:eb:cb:78:3f:c2:25:fd:c8:04:
55:33:f0:a3:69:06:0a:a1:a9:f9:37:05:bd:0c:63:
15:3d:73:69:0f:fd:45:8f:70:ca:a6:e3:5c:8d:15:
de:ec:56:79:c6:7f:2c:ef:a1:1e:ff:be:80:ca:64:
e5:b2:ce:b2:88:7d:44:c5:0d:62:e0:14:a3:7c:fa:
20:c4:b0:04:ec:73:54:1f:9a:35:34:54:9d:98:73:
d1:e9:1b:61:25:8a:27:79:0e:34:08:89:d0:4b:02:
de:05:96:47:f0:f8:f9:a6:3f:e3:ba:8b:a0:ac:bb:
30:2b:d4:e1:9e:40:66:4c:d3:2c:4a:2c:28:df:f5:
db:0c:8d:02:34:5d:e3:03:d2:ab:f1:8e:c1:db:49:
e7:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:AA:00:31:15:08:DF:C3:96:19:89:B5:BA:0D:42:94:6E:C6:DA:72
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538313a333537353a3a2f34382d3438203d3e203136393039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7581:3575::/48
Signature Algorithm: sha256WithRSAEncryption
45:af:07:53:e2:7d:d7:2a:fb:86:ab:f5:6f:39:12:82:40:e1:
79:84:50:5f:5a:39:1f:b3:c8:a1:18:64:d2:69:07:a1:75:59:
8b:64:1e:2b:b4:a1:fd:4f:bc:cf:88:23:df:88:f3:3b:c5:21:
18:94:a4:c4:00:c0:8a:96:33:7d:81:7f:34:cd:b9:9b:e4:47:
92:ce:94:73:d8:f2:e9:2d:e4:20:b3:f1:ef:9b:d5:9b:79:34:
97:b0:f0:18:02:52:b8:4e:b5:dc:39:1f:bf:77:9f:6e:0d:8c:
3f:a7:3f:9d:5f:c2:94:6e:b6:9b:2e:2e:8a:38:9b:10:a3:e2:
78:36:7f:cd:15:57:ee:95:50:4a:84:03:44:69:91:7b:8f:49:
0a:56:a8:23:74:fc:cc:c5:93:b1:8c:30:3e:6e:c4:98:ec:6d:
71:02:ac:8b:57:64:94:86:98:fb:6c:98:05:dc:19:8b:ae:45:
9f:19:07:22:af:ab:97:8e:0a:25:63:dd:b4:6d:d2:9b:21:43:
0c:78:7c:9c:f2:a3:39:6f:9b:d2:df:7a:46:d6:0c:d5:34:a1:
61:58:2a:95:ad:44:36:f5:61:5c:6b:a8:7c:01:7a:2c:ca:00:
4c:57:a1:a9:53:e5:15:1a:70:9d:f0:fb:82:bd:93:34:b8:96:
36:65:d9:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 23 23:53:03 2025 by rpki-client