Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538313a333566663a3a2f34382d3438203d3e203136393039.roa
File: 326131343a373538313a333566663a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier: xD9g5GHj/sGXNqpPJh3yoBvjMBDbvvGxzK5SszaahRo=
Subject key identifier: 40:7D:BF:5D:02:62:06:87:76:47:83:CB:FE:23:80:53:11:90:05:05
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 32E9A8DDCF7B6F27D7309AD578EC966CF71F95CA
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538313a333566663a3a2f34382d3438203d3e203136393039.roa
Signing time: Fri 20 Jun 2025 07:08:16 +0000
ROA not before: Fri 20 Jun 2025 07:03:16 +0000
ROA not after: Fri 19 Jun 2026 07:08:16 +0000
asID: 16909
IP address blocks: 2a14:7581:35ff::/48 maxlen: 48
Validation: Failed, certificate revoked on Sat 21 Jun 2025 07:50:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
32:e9:a8:dd:cf:7b:6f:27:d7:30:9a:d5:78:ec:96:6c:f7:1f:95:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: Jun 20 07:03:16 2025 GMT
Not After : Jun 19 07:08:16 2026 GMT
Subject: CN=407DBF5D02620687764783CBFE23805311900505
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:92:b2:45:4f:28:4b:ff:12:86:84:5c:b4:0f:
80:3c:9c:a8:66:ce:17:99:fe:f3:c8:7f:da:94:c6:
80:00:55:e9:af:74:f8:b5:8a:54:d5:68:2f:c7:e3:
7d:44:5b:47:cb:c1:77:4e:e6:7d:13:5e:19:fb:2a:
60:de:de:b2:1b:c1:ab:98:6a:8f:bf:d4:4e:94:db:
32:b5:94:8c:57:17:de:ed:56:37:98:3a:b2:14:83:
91:1c:fd:85:a6:d8:08:15:5e:d6:18:ac:1a:06:dc:
d6:26:8f:24:71:77:a4:b9:59:63:fb:c5:a2:61:f0:
52:e9:61:26:1b:57:0d:10:8e:c2:0f:1f:15:74:88:
41:d3:bc:3d:e3:06:9b:aa:43:71:8c:2d:c1:a7:62:
77:d0:7b:21:fa:2e:b9:67:3c:ac:02:d2:32:8d:0d:
d0:b1:69:0d:ac:8e:4d:52:a3:86:a8:a4:b4:b2:0d:
8c:25:99:e4:ca:fd:0f:c1:f2:a0:e1:8a:d9:68:cc:
49:a6:f5:3f:df:17:18:64:6e:11:8b:02:48:60:c8:
19:d3:7e:0a:5a:db:a0:62:6c:32:c3:32:2f:02:52:
d4:db:af:97:9f:f9:e4:ef:da:ad:b2:63:70:2c:7e:
cb:87:a4:21:5f:4b:7a:2c:ae:a9:ce:51:00:f8:9e:
88:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:7D:BF:5D:02:62:06:87:76:47:83:CB:FE:23:80:53:11:90:05:05
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538313a333566663a3a2f34382d3438203d3e203136393039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7581:35ff::/48
Signature Algorithm: sha256WithRSAEncryption
5e:b0:54:cf:41:81:8e:47:5b:cb:63:88:ed:7a:b4:91:e4:21:
46:d9:8b:9b:5a:67:77:96:41:7b:11:49:53:08:de:a9:9e:e9:
bd:24:b0:97:d0:46:e6:27:e8:b6:c4:20:b5:e4:81:00:0b:8a:
55:be:c1:f0:4b:04:ef:02:0c:62:1e:f4:82:37:23:1f:2f:cf:
7f:46:ff:fb:06:42:49:d8:6d:a2:69:3b:16:5e:0e:e2:db:cf:
64:06:20:d3:f7:94:c1:61:cb:80:bf:03:a7:32:8c:f1:af:73:
6f:60:a6:d8:40:08:ed:c3:66:4f:41:b2:72:8b:0d:56:7f:75:
42:ac:c2:fb:f6:b3:ea:bd:07:85:7f:dd:bf:34:dc:9e:b0:f6:
35:29:ee:44:8b:43:25:a5:02:b7:e0:f1:4f:9a:a1:05:9d:0d:
43:6e:65:80:ae:5e:b3:96:27:cd:27:4e:50:a0:a0:70:ad:d2:
92:35:07:01:b6:c4:d3:f1:5c:57:70:1f:8e:ec:f1:9e:32:94:
a6:8b:05:13:fa:75:1e:d6:17:ca:32:cd:28:25:25:d2:97:e0:
fd:87:ff:d5:c1:10:f4:5d:76:a8:2d:ce:35:0e:e9:41:c6:1d:
5f:4a:37:fc:45:d0:a2:a5:39:8f:6b:08:0f:dd:29:cc:eb:e3:
61:4a:18:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 23 23:54:22 2025 by rpki-client