Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538313a333562333a3a2f34382d3438203d3e203136393039.roa
File: 326131343a373538313a333562333a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier: c8ubRVygYT8Bc5RPdELzMYFx+HuBV+B+7VLgTckpWP4=
Subject key identifier: 02:3B:9B:60:FF:3A:85:6D:2C:1B:60:7B:40:CE:2D:0D:8F:CB:AA:DE
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 6EF349D273B2F0263845CA1CA081536795BEE96A
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538313a333562333a3a2f34382d3438203d3e203136393039.roa
Signing time: Fri 20 Jun 2025 06:24:54 +0000
ROA not before: Fri 20 Jun 2025 06:19:54 +0000
ROA not after: Fri 19 Jun 2026 06:24:54 +0000
asID: 16909
IP address blocks: 2a14:7581:35b3::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 25 Jun 2025 16:06:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6e:f3:49:d2:73:b2:f0:26:38:45:ca:1c:a0:81:53:67:95:be:e9:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: Jun 20 06:19:54 2025 GMT
Not After : Jun 19 06:24:54 2026 GMT
Subject: CN=023B9B60FF3A856D2C1B607B40CE2D0D8FCBAADE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:2d:4a:a6:e4:01:00:56:02:22:f9:3c:48:ca:
f2:ca:d0:e2:da:c2:36:a0:f1:ae:3d:e2:d3:f2:f2:
f6:6f:80:c6:d7:b4:db:92:d4:15:00:7f:1b:be:4b:
74:ef:37:12:14:8a:69:2f:0d:24:20:35:89:e9:d3:
2b:c2:e8:a5:7a:24:1f:a5:5c:61:1b:f7:f8:33:17:
5f:fd:d4:17:17:ed:68:1a:27:63:48:61:0f:b7:5a:
c8:7a:7a:9f:59:14:a4:58:96:00:3e:68:37:c2:e9:
6a:2c:86:21:3e:96:9c:53:f6:5f:08:5d:18:ab:0c:
cd:45:c0:11:d1:f1:6e:78:5f:1a:c7:ae:40:ff:d2:
68:ef:98:de:77:4e:47:d9:08:db:30:63:b3:48:10:
39:48:ed:0e:fe:f6:f1:bb:ba:56:fc:9a:b6:dd:52:
e1:8b:de:04:ad:1d:1d:ac:92:4b:ea:22:d9:e4:ad:
a6:0c:6c:bf:97:ec:58:11:43:0e:24:cc:65:83:5c:
bf:69:e3:47:56:05:17:db:a1:63:bb:fc:08:13:89:
a9:f2:3e:c3:53:b9:71:63:bd:39:3a:cf:7d:c8:9b:
4d:6a:12:11:c5:0d:a2:aa:d9:b0:08:8b:c2:44:ca:
d6:a8:a3:68:8f:3c:9d:51:8b:3f:f4:b8:90:4e:20:
00:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:3B:9B:60:FF:3A:85:6D:2C:1B:60:7B:40:CE:2D:0D:8F:CB:AA:DE
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538313a333562333a3a2f34382d3438203d3e203136393039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7581:35b3::/48
Signature Algorithm: sha256WithRSAEncryption
9c:e7:d4:57:6e:9f:38:9b:bc:2b:18:a8:c5:a4:38:fa:13:20:
77:16:fc:b8:4b:94:45:b5:b6:ac:e7:97:65:83:27:fc:d8:a3:
d9:4f:44:4b:89:b7:54:e0:27:97:19:8e:7a:93:b8:c6:38:2d:
91:c1:fd:02:9f:d0:fa:4a:62:36:ac:bc:01:65:98:2b:45:af:
90:ef:77:33:89:43:7b:73:98:dd:d5:94:fd:37:08:c5:36:47:
1d:e0:a3:b8:5d:f1:59:13:63:88:5f:3c:3c:eb:e9:23:0e:42:
16:0e:b1:d7:a7:2e:37:25:5b:71:de:a2:1f:69:77:45:61:09:
98:2a:5b:8f:7c:cd:0a:21:d4:ce:2f:53:e8:5f:5f:5b:ad:26:
59:70:f0:67:3a:1a:1c:73:ab:b0:4a:e2:75:af:19:7e:4a:64:
52:c6:75:f3:7a:6b:a2:f3:6c:3f:d8:ef:64:54:5f:71:7f:ec:
d2:39:b0:ae:32:14:cb:02:38:87:f8:c3:ef:67:7d:61:f3:b4:
71:6e:62:42:8c:f3:57:65:0f:cc:09:c3:92:49:20:c1:79:a7:
79:90:29:6a:a1:3f:84:c2:88:75:bd:d3:dc:cd:c1:5a:eb:38:
12:49:26:94:ae:20:0a:42:3c:52:29:b1:d5:83:2b:3e:49:4b:
52:4b:4b:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 23 23:52:22 2025 by rpki-client