Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363466313a3a2f34382d3438203d3e203136393039.roa
File: 326131343a373538343a363466313a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier: K0g+4YRmuTNDn//7dGDN6mK7S1NjKX5BLNew+5OvlYA=
Subject key identifier: F0:F6:E1:4D:56:09:91:15:2F:BB:CD:5F:E9:13:46:C4:0F:98:B0:50
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 6A2AFB32E653095D923EB29D196199C61FCB451C
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363466313a3a2f34382d3438203d3e203136393039.roa
Signing time: Mon 26 May 2025 20:18:02 +0000
ROA not before: Mon 26 May 2025 20:13:02 +0000
ROA not after: Mon 25 May 2026 20:18:02 +0000
asID: 16909
IP address blocks: 2a14:7584:64f1::/48 maxlen: 48
Validation: Failed, certificate revoked on Thu 29 May 2025 16:13:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6a:2a:fb:32:e6:53:09:5d:92:3e:b2:9d:19:61:99:c6:1f:cb:45:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: May 26 20:13:02 2025 GMT
Not After : May 25 20:18:02 2026 GMT
Subject: CN=F0F6E14D560991152FBBCD5FE91346C40F98B050
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:28:1f:34:77:3a:a6:44:73:39:2f:93:a3:83:
3b:38:08:f3:23:63:24:4a:dc:d2:8b:77:d5:d9:6d:
8f:40:5e:fa:47:e5:7c:6f:c4:82:f0:f0:df:d5:b6:
b8:d8:85:42:47:f5:e5:49:7c:aa:3f:64:47:4c:c8:
3b:8d:37:cf:c8:75:db:34:0b:eb:37:3d:3e:9e:73:
f4:db:c2:af:1c:16:09:7e:f6:40:9d:d7:e1:aa:d1:
c8:52:4c:f6:ac:a7:4d:9a:05:65:7e:b5:13:7c:68:
be:a9:5b:4b:25:9d:95:4f:05:40:fc:a4:14:9e:75:
a9:44:2f:bb:b3:e9:f2:8c:2d:e2:75:2d:66:dd:80:
19:e0:13:83:c3:2a:0e:6a:d3:38:3f:dd:d0:6a:7f:
f0:ae:ba:70:6e:87:d0:87:0a:54:88:6e:37:f0:25:
8e:58:19:43:e7:cc:b9:28:25:d7:b8:68:9d:0e:4e:
9d:10:02:8f:53:68:d6:85:8b:07:b4:0d:44:e9:56:
a9:47:a2:81:b2:23:96:ee:52:7a:6f:5f:40:3b:e0:
ef:6b:da:dd:99:91:ce:ff:5b:3d:dd:fd:5d:df:f5:
2d:fd:cb:b9:41:19:b6:53:61:7d:0d:2f:b3:d4:09:
4c:df:db:23:e1:ec:8d:30:07:a0:da:1d:f8:dc:86:
70:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:F6:E1:4D:56:09:91:15:2F:BB:CD:5F:E9:13:46:C4:0F:98:B0:50
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363466313a3a2f34382d3438203d3e203136393039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:64f1::/48
Signature Algorithm: sha256WithRSAEncryption
5f:33:a7:82:02:21:b2:12:d5:d2:7b:14:f0:86:3b:e1:98:25:
9c:ee:c9:b1:15:9b:1e:95:aa:b5:12:43:d7:ee:fd:85:f5:9d:
02:20:3d:88:ff:49:d2:82:55:9b:0a:84:96:dc:b8:1a:58:d2:
7c:21:3d:2a:48:13:5e:49:6c:10:bb:b0:92:51:47:c2:49:d2:
0b:ec:03:8f:11:74:65:1c:c4:59:df:8e:f2:e5:c7:20:5a:21:
2f:2b:07:65:fd:93:70:92:83:47:2c:d3:4d:a9:5a:41:82:e2:
c4:3c:d2:e9:52:e0:1a:b3:c7:ae:f3:3e:af:68:4a:53:90:fc:
3f:aa:fd:8c:f4:42:a7:5f:4d:a0:af:8d:3b:c8:70:82:af:6e:
db:5e:fe:58:6d:37:af:07:b5:d9:35:91:21:7f:6d:c2:06:d1:
f8:09:df:6a:1c:c2:ff:6e:3c:3c:10:ac:6f:e8:52:8e:6b:a1:
8d:0f:06:f9:7e:b1:e0:80:60:d3:78:8f:93:0f:62:76:9e:3f:
e1:3c:e0:b9:f1:ae:17:be:30:3e:a5:36:ad:e2:a4:f2:5b:ab:
bc:f9:a0:54:49:81:11:1d:4a:80:43:da:df:fe:06:a8:f1:e8:
45:5c:9e:06:86:2a:b7:ed:5b:49:06:7d:c1:bb:81:a1:18:0c:
49:03:4d:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 23 23:54:48 2025 by rpki-client