Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538313a333566313a3a2f34382d3438203d3e203136393039.roa
File: 326131343a373538313a333566313a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier: BFJgf4092aQdLS7KKYFdGq2g66hUgJu3om4AVIe3ltA=
Subject key identifier: 80:39:F5:C1:50:20:44:B8:82:A1:15:F8:EA:8D:57:81:65:87:B0:3F
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 3E5B07ED2B30710D9FF40D8FADF09884FBCC3C39
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538313a333566313a3a2f34382d3438203d3e203136393039.roa
Signing time: Fri 20 Jun 2025 06:26:13 +0000
ROA not before: Fri 20 Jun 2025 06:21:13 +0000
ROA not after: Fri 19 Jun 2026 06:26:13 +0000
asID: 16909
IP address blocks: 2a14:7581:35f1::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 25 Jun 2025 16:06:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3e:5b:07:ed:2b:30:71:0d:9f:f4:0d:8f:ad:f0:98:84:fb:cc:3c:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: Jun 20 06:21:13 2025 GMT
Not After : Jun 19 06:26:13 2026 GMT
Subject: CN=8039F5C1502044B882A115F8EA8D57816587B03F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:6b:24:31:d5:6c:8d:05:b4:2c:3e:e2:b1:c3:
17:9b:54:fa:36:e0:99:68:9f:c6:c8:6e:a2:c6:6b:
33:bb:27:98:0e:8e:b7:01:da:ea:33:67:d7:d5:eb:
b0:2e:9c:48:46:db:82:f6:8d:63:df:10:ac:eb:e6:
7e:9c:05:c1:bd:ba:78:ec:00:c9:c4:68:59:7a:22:
25:ab:55:6c:3b:d9:15:1d:d0:34:11:e8:e9:0e:3c:
9b:52:ce:04:d1:76:78:81:49:7a:54:cd:6c:df:e6:
37:76:65:e4:de:df:b3:b8:35:80:9e:52:e1:ab:e0:
9d:cc:5b:39:bb:e0:0f:fd:2f:9a:37:e6:99:f4:7f:
ce:1e:75:09:cb:8c:b2:53:dc:82:38:5d:50:2b:7e:
9b:50:4d:c7:ef:e0:ff:7c:78:bb:ef:e5:e4:3d:f4:
35:df:01:5d:c8:47:ca:bf:34:17:6a:98:80:ba:47:
6b:26:d4:50:ca:83:73:b0:8c:06:8e:f4:57:ea:1c:
e8:00:09:59:1a:5b:21:f3:b2:96:54:1f:67:4a:f5:
6a:73:3d:d2:2c:30:75:af:16:6a:57:a5:13:51:90:
a1:71:de:9b:32:9b:12:f0:59:49:f0:2b:34:c1:78:
a0:17:84:e0:06:a9:2b:af:f9:0f:93:b6:8f:68:44:
40:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:39:F5:C1:50:20:44:B8:82:A1:15:F8:EA:8D:57:81:65:87:B0:3F
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538313a333566313a3a2f34382d3438203d3e203136393039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7581:35f1::/48
Signature Algorithm: sha256WithRSAEncryption
8f:32:03:cd:5d:3f:f3:fb:57:03:d1:59:da:07:7d:4b:36:ed:
fe:f0:6c:6e:37:86:f8:29:2e:36:3b:93:70:93:e5:06:cc:c8:
61:4c:81:cd:36:dd:ee:6a:ab:59:c6:84:5a:80:b6:46:d2:b6:
5a:9f:c6:cd:98:3d:bf:96:c3:fa:33:ad:b4:29:0a:d4:45:1d:
05:e7:81:76:6e:56:e6:11:d3:f3:35:b1:47:9d:6c:65:0a:8b:
d5:29:b5:7b:25:bd:24:8f:8b:b8:bd:b9:2a:28:cd:55:43:66:
5a:3d:01:38:8b:3e:fe:8b:97:61:e2:e0:6d:6a:ba:bd:3e:18:
04:d4:84:1b:83:6f:c3:c0:d0:47:cc:66:95:78:bb:ba:7e:a1:
f0:ec:d2:37:50:4e:88:9a:28:8e:76:44:fd:ec:1d:58:43:72:
fa:fd:78:fe:eb:56:0b:32:b1:72:69:70:7f:b6:aa:53:ba:1c:
2f:34:12:95:01:b9:c9:7d:3c:29:34:21:29:18:fb:71:78:a3:
16:f3:cc:66:08:2a:d0:18:65:c9:8d:a2:67:d3:3b:95:d5:a4:
f7:c8:d5:ad:87:1d:b7:8c:72:bb:18:9f:e5:c6:54:8f:66:40:
41:28:a0:98:3d:ba:61:db:f3:de:e8:88:68:e7:df:56:5d:62:
d2:1b:7a:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 25 00:57:38 2025 by rpki-client