Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538313a333561633a3a2f34382d3438203d3e203136393039.roa
File: 326131343a373538313a333561633a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier: J+giNQ9vCSD2pLC+FhlX4F04bhEi4IbEdbiMkWOt3Ks=
Subject key identifier: 25:B6:03:7F:CC:1B:54:87:3A:50:0E:B7:B4:54:B5:41:2B:97:C3:74
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 4943FA4652B3523B2E13D3995B268D25F1500AC8
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538313a333561633a3a2f34382d3438203d3e203136393039.roa
Signing time: Fri 20 Jun 2025 06:31:29 +0000
ROA not before: Fri 20 Jun 2025 06:26:29 +0000
ROA not after: Fri 19 Jun 2026 06:31:29 +0000
asID: 16909
IP address blocks: 2a14:7581:35ac::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 25 Jun 2025 16:06:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
49:43:fa:46:52:b3:52:3b:2e:13:d3:99:5b:26:8d:25:f1:50:0a:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: Jun 20 06:26:29 2025 GMT
Not After : Jun 19 06:31:29 2026 GMT
Subject: CN=25B6037FCC1B54873A500EB7B454B5412B97C374
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:ea:6b:c7:67:72:73:92:77:4f:a2:a4:58:7b:
58:94:b7:3e:75:10:eb:f4:34:85:47:96:f8:cd:0f:
63:d5:a5:54:77:6b:b6:a5:21:b9:cd:56:b7:3b:2c:
a4:70:cf:a8:86:92:8d:73:35:7d:82:46:8c:ea:11:
64:b6:0d:4c:66:fd:b4:13:62:c4:39:55:fd:6b:74:
7b:db:52:0b:de:90:09:3b:90:49:8d:f2:7d:a9:23:
a3:53:0f:81:18:a1:43:d2:18:66:97:2a:5a:fb:ef:
9c:9a:0a:e2:72:fc:30:89:4a:5a:6b:95:c8:c1:49:
25:6d:04:6c:c1:88:70:11:ef:77:ac:21:e2:1a:46:
aa:4d:34:30:01:39:d5:91:09:9a:11:b6:8b:f8:a2:
aa:38:de:1f:0e:26:dc:bb:4c:47:c4:76:61:b9:7e:
35:af:2c:dc:bb:b5:39:3d:ff:2c:1c:76:40:d4:5e:
a7:84:61:13:a4:b2:c1:ed:7c:a1:6f:73:a3:26:42:
89:77:4b:36:57:54:8e:60:4f:66:2b:f8:65:df:4c:
30:dd:c5:15:12:ea:4f:ac:d0:64:66:9f:fd:97:44:
4b:77:a8:90:4c:a8:4f:65:da:b4:e7:71:36:f5:b8:
44:9d:b6:7a:03:db:d8:be:13:e5:45:fe:c0:7d:b0:
ec:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:B6:03:7F:CC:1B:54:87:3A:50:0E:B7:B4:54:B5:41:2B:97:C3:74
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538313a333561633a3a2f34382d3438203d3e203136393039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7581:35ac::/48
Signature Algorithm: sha256WithRSAEncryption
2b:e3:40:fc:6e:34:e6:51:ae:a4:18:7d:91:f2:3f:84:ab:15:
b5:bb:88:ce:f3:8a:93:f1:47:5a:e4:67:0f:7c:a4:41:18:e5:
ec:5d:a6:19:f9:a1:c9:ec:60:86:6a:7b:6f:80:27:e5:34:59:
49:d2:57:58:42:e4:e7:3c:e9:9e:83:fd:9c:58:b8:e3:16:1e:
90:5f:69:2d:ff:2b:b3:5c:b2:06:5b:c4:ac:a8:1d:0c:51:58:
61:98:38:c7:86:f6:c7:65:c5:54:16:78:83:73:50:4b:c0:64:
b7:5f:3d:b9:44:6a:36:bd:9e:83:ad:25:8b:22:b4:22:5f:71:
cc:f4:14:b1:94:40:1c:8b:6d:b1:2d:8e:39:54:57:d2:60:c8:
80:12:8b:27:88:a4:51:7d:b6:27:1e:31:c0:41:23:30:c0:33:
3a:32:c0:c6:cd:6c:36:3b:85:a8:e2:4e:2a:56:bf:fc:1d:41:
76:81:31:d7:7d:16:c5:32:c7:5b:8d:9a:05:31:3f:36:9a:46:
4f:85:f7:1d:e5:55:aa:19:42:18:bf:79:38:7f:21:4d:da:a8:
51:fc:ab:ae:31:45:81:98:8b:1f:0e:99:2b:69:86:18:93:22:
3a:a1:bf:4c:c5:2c:39:0f:2a:01:04:95:8c:3b:3b:e1:65:3f:
cf:de:b8:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 11:31:34 2025 by rpki-client