Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538313a333564633a3a2f34382d3438203d3e203136393039.roa
File: 326131343a373538313a333564633a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier: glbj9mEmurbCzlRjKNqU2lHVwZV3ezT5KYY2XTVU3oE=
Subject key identifier: 0B:EB:80:EE:F4:5C:90:77:1F:A1:66:42:F4:D2:12:97:72:E6:0F:50
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 5E2248266B0503D5695DDA4BECE8B523502D6B55
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538313a333564633a3a2f34382d3438203d3e203136393039.roa
Signing time: Fri 20 Jun 2025 06:26:13 +0000
ROA not before: Fri 20 Jun 2025 06:21:13 +0000
ROA not after: Fri 19 Jun 2026 06:26:13 +0000
asID: 16909
IP address blocks: 2a14:7581:35dc::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 25 Jun 2025 16:06:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5e:22:48:26:6b:05:03:d5:69:5d:da:4b:ec:e8:b5:23:50:2d:6b:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: Jun 20 06:21:13 2025 GMT
Not After : Jun 19 06:26:13 2026 GMT
Subject: CN=0BEB80EEF45C90771FA16642F4D2129772E60F50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:f2:49:47:47:76:89:9c:b9:e5:e9:fd:34:fd:
7d:09:cc:0e:5a:1f:bc:19:19:c8:4f:1e:fb:77:d2:
85:61:6e:59:cf:e4:f1:9a:b9:a5:7d:f7:6f:e4:28:
46:c3:8e:cd:00:e6:b5:cb:d6:fc:9f:27:e5:df:f0:
0c:fd:39:35:dc:5b:89:20:43:95:cf:7e:ac:f9:e8:
81:9c:91:01:f4:ba:a6:08:a3:16:94:1f:02:fb:40:
c1:d5:83:47:ad:12:ee:14:af:4a:8f:09:37:ed:4d:
d6:68:95:b1:f7:95:7c:5a:ab:3b:f5:b9:a3:0c:1b:
2e:90:30:4e:ba:91:9b:9b:c0:0b:83:ff:a8:bc:0a:
cb:1a:04:14:89:66:d8:e6:3f:96:bc:22:86:3a:ef:
87:0b:86:22:26:88:4c:d8:51:75:25:70:5a:e1:bb:
8a:9c:98:a4:53:e2:76:c5:f7:08:1b:0c:69:3d:41:
78:60:97:6e:0d:d4:15:68:59:23:03:d9:99:14:3d:
2b:c0:fe:fc:3d:1b:f3:b4:ac:86:4e:7f:dc:7a:c5:
36:82:e2:ae:a7:23:29:9f:d9:f4:1f:de:bd:19:29:
ad:81:89:b4:31:e0:c1:e6:16:fd:99:4a:bf:18:06:
7f:87:34:37:45:8d:06:5d:61:8e:1e:d3:9f:6e:d1:
1f:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:EB:80:EE:F4:5C:90:77:1F:A1:66:42:F4:D2:12:97:72:E6:0F:50
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538313a333564633a3a2f34382d3438203d3e203136393039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7581:35dc::/48
Signature Algorithm: sha256WithRSAEncryption
2a:18:24:3b:29:df:fb:53:e6:c6:a5:af:90:a1:b3:33:38:19:
e6:b8:f5:e7:9b:04:da:cd:44:0b:3f:f8:24:f6:3e:06:99:80:
8e:d3:36:fe:d0:1a:03:82:c4:54:b2:98:db:e7:1b:0c:d0:e0:
56:b2:4d:6b:76:17:97:f1:2a:eb:c7:03:a3:9a:2e:63:d4:30:
3b:e2:bf:d5:cc:19:a5:cc:a5:78:19:af:78:c6:17:fe:fc:04:
27:39:d9:91:15:58:8f:ec:d4:c9:94:11:44:0b:69:77:5d:8b:
d0:08:20:3a:99:4d:01:c9:17:59:e2:cf:0a:ef:69:ec:38:46:
7d:59:b5:3f:cc:16:e0:f4:bf:c8:00:f7:97:df:b6:55:6d:43:
6c:2e:ba:b5:8b:7b:ac:49:cb:7e:0c:4d:ad:50:0e:bb:36:ce:
16:48:9e:4d:da:ab:c3:e1:2f:ec:36:79:7d:9b:79:25:e3:5a:
cd:08:16:c1:70:b9:22:c9:93:73:de:4b:81:dd:f4:5b:22:7f:
1f:b7:ad:bc:d9:b3:69:6e:ec:13:70:4e:24:d8:82:a2:a1:3c:
13:b0:87:0d:45:8f:86:13:30:45:bc:6b:a6:9c:0c:90:9c:0a:
3e:c0:23:57:fc:fd:d9:a1:09:13:8b:d5:39:b7:13:7f:25:c6:
5f:79:d2:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 23 23:52:35 2025 by rpki-client