Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363232353a3a2f34382d3438203d3e203136393039.roa
File: 326131343a373538343a363232353a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier: KTPJow74H01TqnRRaDu2hC4TtmSE46oOw3dL3xOfR5Y=
Subject key identifier: 20:DD:CF:92:3A:45:5C:EA:E6:69:E5:D0:4B:3E:DA:AF:A4:BF:A0:CB
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 6ADAA40F618DCF25F5CD4DC8223523A3F995D20D
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363232353a3a2f34382d3438203d3e203136393039.roa
Signing time: Mon 12 May 2025 16:18:05 +0000
ROA not before: Mon 12 May 2025 16:13:05 +0000
ROA not after: Mon 11 May 2026 16:18:05 +0000
asID: 16909
IP address blocks: 2a14:7584:6225::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 14 May 2025 07:18:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6a:da:a4:0f:61:8d:cf:25:f5:cd:4d:c8:22:35:23:a3:f9:95:d2:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: May 12 16:13:05 2025 GMT
Not After : May 11 16:18:05 2026 GMT
Subject: CN=20DDCF923A455CEAE669E5D04B3EDAAFA4BFA0CB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:ce:38:65:58:b7:d8:91:e0:24:e1:fb:7f:f1:
24:d9:24:c1:e9:a8:c5:2d:ab:7c:e5:df:ba:e2:f2:
b8:76:96:4a:6a:3a:96:d8:28:10:30:83:0a:1b:af:
b0:ff:e6:be:08:86:a6:b0:6b:3b:75:44:20:13:20:
55:3c:dd:ab:8f:73:3a:b7:ad:38:cb:9f:3c:93:09:
3c:23:da:06:f4:d9:11:6c:e3:a4:01:d0:5f:47:f0:
a6:af:bb:7e:74:6f:f4:51:43:1f:bc:9f:1a:7d:46:
06:46:57:37:90:b8:78:0f:32:37:a7:4c:5a:42:87:
ca:d8:79:68:3c:2a:30:24:43:ae:1e:65:98:18:05:
60:15:da:d8:2d:c6:44:f2:9f:aa:f2:d1:b3:7a:7a:
94:7d:8d:d5:b8:64:dc:d5:36:9f:6a:ef:ed:64:12:
1b:d4:c5:61:74:78:ee:79:80:ed:a9:a6:64:60:b9:
fd:b3:7c:37:da:45:5f:30:d6:8b:64:a6:b0:89:20:
13:67:c7:b8:c2:30:e2:72:e9:7d:c7:dd:61:eb:69:
ff:93:37:5f:2d:1e:0d:48:6d:a9:85:bd:df:0f:11:
09:e9:20:29:e3:8e:ad:2c:3d:b1:55:40:1b:57:52:
e1:2e:1a:c4:4f:b6:0d:9e:bc:13:5d:1c:03:af:02:
c5:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:DD:CF:92:3A:45:5C:EA:E6:69:E5:D0:4B:3E:DA:AF:A4:BF:A0:CB
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363232353a3a2f34382d3438203d3e203136393039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:6225::/48
Signature Algorithm: sha256WithRSAEncryption
0e:46:85:75:3f:65:cf:c4:9b:22:a5:7f:60:a2:ae:1c:d1:c4:
85:fa:3c:05:f2:ef:d1:4c:98:44:a5:0f:b8:99:60:63:97:6f:
bb:87:1a:7b:68:ee:69:93:28:0d:ae:43:69:0f:1d:f0:4d:69:
82:81:90:a9:0e:df:19:de:c5:1a:a0:19:79:74:c4:46:e8:11:
85:d2:e2:5e:f2:75:d0:e0:31:bb:ca:9f:05:2e:43:79:0d:53:
bf:e8:77:bf:eb:28:fb:bd:5e:e3:ce:c8:13:01:b9:92:f3:e3:
50:ac:0b:51:e4:b2:de:f7:b2:91:2a:89:f7:cb:bd:db:56:18:
e2:4a:5a:3b:9a:28:fc:b2:47:ba:89:85:f8:07:e9:5f:8b:a8:
87:6c:40:35:be:15:c6:e8:b6:14:9e:05:8b:97:8d:93:fe:5d:
37:25:b8:0b:c0:a0:90:86:fe:c8:ea:f6:e5:9a:d9:f6:b8:8a:
16:2d:9c:47:a8:c2:ea:7b:ae:cf:61:4e:f5:74:78:3e:17:92:
73:c6:eb:6a:f7:7f:89:d8:4a:25:5b:35:d6:35:76:07:b9:82:
74:62:bb:03:b0:9e:b2:eb:64:b2:e8:a4:58:02:9f:1f:a0:77:
e0:c4:03:61:0d:ac:d5:64:fb:a1:db:8b:ac:73:2f:ec:de:a3:
18:f9:6e:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 25 01:03:27 2025 by rpki-client