Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538313a333561363a3a2f34382d3438203d3e203136393039.roa
File: 326131343a373538313a333561363a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier: 4RvybC6m7w0TppRDqdW6JynA0uCMPWPTOv54nZ2m5sE=
Subject key identifier: CC:97:91:12:E8:99:BD:D8:34:62:A5:C6:D6:BA:D2:DA:5C:B1:D0:F0
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 69957EAEF5807316DB69DC346E98C459B5B8BD87
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538313a333561363a3a2f34382d3438203d3e203136393039.roa
Signing time: Fri 20 Jun 2025 06:26:09 +0000
ROA not before: Fri 20 Jun 2025 06:21:09 +0000
ROA not after: Fri 19 Jun 2026 06:26:09 +0000
asID: 16909
IP address blocks: 2a14:7581:35a6::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 25 Jun 2025 16:06:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
69:95:7e:ae:f5:80:73:16:db:69:dc:34:6e:98:c4:59:b5:b8:bd:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: Jun 20 06:21:09 2025 GMT
Not After : Jun 19 06:26:09 2026 GMT
Subject: CN=CC979112E899BDD83462A5C6D6BAD2DA5CB1D0F0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:dd:3c:ec:4e:b5:3b:eb:35:3d:d7:4e:f9:d9:
16:ff:c9:b3:d2:b8:33:86:42:42:ae:c7:b7:88:63:
37:61:54:c8:85:40:43:93:e8:37:29:06:0f:73:b5:
83:1e:a2:4f:c1:a8:5a:53:e0:73:62:89:c4:4d:70:
88:de:32:f2:68:c0:03:f9:1e:8a:8f:f3:c7:6a:59:
ac:09:a2:dc:85:28:9a:f6:56:db:50:9d:d7:6a:ee:
9b:f3:70:2d:c9:7d:3e:ad:5f:38:23:c1:8e:f2:82:
40:ba:29:73:b8:00:ef:e1:6b:31:24:d0:81:d9:42:
92:1c:e1:60:8f:6f:de:31:53:fe:69:b3:85:7d:0e:
2f:3b:61:5f:e2:19:2e:f8:fe:a7:01:67:13:bb:f1:
32:0f:be:b0:28:1c:59:1d:e4:b3:1e:0b:c0:c2:74:
27:25:52:e5:8c:cb:b3:77:d2:46:93:94:8b:bb:06:
87:d6:08:7d:cf:35:13:11:0c:5e:80:88:5f:8c:36:
f7:e5:0d:b2:36:c2:4f:23:8d:36:e1:ed:d1:6e:c1:
ca:ed:a8:8e:16:39:d5:39:ec:5c:e5:3e:bd:85:15:
29:4a:37:85:67:75:f2:18:87:d8:4c:32:99:f7:21:
77:0f:c5:c3:e6:03:fe:ca:f9:9c:d1:e9:f4:cf:59:
fa:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:97:91:12:E8:99:BD:D8:34:62:A5:C6:D6:BA:D2:DA:5C:B1:D0:F0
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538313a333561363a3a2f34382d3438203d3e203136393039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7581:35a6::/48
Signature Algorithm: sha256WithRSAEncryption
40:e2:96:0f:22:37:6f:4b:88:d9:2a:eb:05:22:4f:62:17:5a:
ed:90:5b:11:72:2a:b5:92:17:23:9e:7a:1c:37:77:30:70:42:
4c:27:9f:e2:ac:ce:6f:b5:52:a0:64:79:8b:d0:b0:77:9e:3c:
a9:c0:58:25:05:fb:dc:a8:45:c3:1a:38:72:99:40:01:ef:19:
8d:4e:c4:44:be:fa:c3:f3:51:41:89:d6:a2:d6:a9:02:f4:a4:
45:c1:cb:1d:27:52:ad:e3:f6:92:32:b4:cc:12:55:60:a2:3e:
35:70:a9:20:4f:ad:d0:42:9c:c4:06:3b:bb:bf:83:52:d5:e7:
35:eb:f7:09:04:78:f1:07:59:b2:49:2b:f6:aa:c5:10:9d:3f:
f9:27:00:48:13:cd:c3:96:3d:2c:da:f3:d3:b3:15:f3:01:cf:
ff:f0:82:17:f0:27:2c:ea:f9:d3:e6:ea:91:5f:29:83:8c:33:
a5:82:8f:f2:2f:cc:b2:5a:67:d6:95:4e:ff:fe:a7:e5:ef:3b:
52:0b:62:2b:c1:65:8e:e2:10:7a:5a:2d:b1:91:65:fd:bd:0d:
c1:8a:02:cf:b4:32:d8:2e:54:eb:a6:c2:fe:7e:d1:ea:c7:43:
65:06:19:c7:39:65:9c:74:53:25:3b:ae:68:b5:79:e1:35:70:
0f:fd:21:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 23 23:52:15 2025 by rpki-client