Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a366461643a3a2f34382d3438203d3e203136393039.roa
File: 326131343a373538343a366461643a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier: pHybdHTHv4YXhvmX6ALg67SkVnyf4mWV/I4biCSQ9Po=
Subject key identifier: 61:81:7C:21:28:60:56:4D:B3:48:2A:10:58:9D:D0:84:47:A8:EF:9C
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 5139126CFEEED2F2B2460181A80673B96584D04A
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a366461643a3a2f34382d3438203d3e203136393039.roa
Signing time: Sun 25 May 2025 05:36:02 +0000
ROA not before: Sun 25 May 2025 05:31:02 +0000
ROA not after: Sun 24 May 2026 05:36:02 +0000
asID: 16909
IP address blocks: 2a14:7584:6dad::/48 maxlen: 48
Validation: Failed, certificate revoked on Mon 26 May 2025 20:12:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
51:39:12:6c:fe:ee:d2:f2:b2:46:01:81:a8:06:73:b9:65:84:d0:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: May 25 05:31:02 2025 GMT
Not After : May 24 05:36:02 2026 GMT
Subject: CN=61817C212860564DB3482A10589DD08447A8EF9C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:d8:c7:67:70:15:53:32:53:6d:aa:32:13:a5:
d7:29:dd:49:4a:cd:25:84:bb:08:75:be:56:c5:c4:
8f:11:02:4c:7a:2a:16:f6:4b:a9:ef:3f:c6:71:19:
95:6c:aa:71:12:9b:5d:87:34:80:79:6b:cd:df:af:
66:d8:a8:16:13:f1:00:4f:b1:d1:0e:57:7b:5d:e4:
b7:d8:cc:7a:c6:d5:ef:49:f0:5e:9d:fe:95:ad:7e:
ab:1c:75:a9:30:e6:1f:bd:7c:52:4c:0c:5e:ee:d7:
91:fa:66:62:b6:24:be:6b:a0:b2:88:17:92:32:dc:
4b:c3:8f:31:2e:76:a4:31:99:7d:40:28:dc:d9:e6:
0a:b4:e3:2b:d2:00:1a:4d:6e:9e:ad:1e:0f:e9:7d:
8d:9c:fb:b3:5a:79:1e:22:32:18:f1:3d:a9:3b:e2:
a0:31:88:4e:c8:5b:4d:30:44:0f:1e:02:18:6b:93:
ec:3c:bd:e9:a2:40:2e:43:18:77:e7:49:7a:40:a3:
f0:14:d4:a4:aa:f5:72:52:1d:f6:ab:fd:e4:9d:d7:
82:aa:6f:49:f3:f0:d5:49:77:6c:d3:98:ea:40:64:
f4:2f:ed:fe:00:36:37:bd:5c:77:6a:3a:b7:d3:30:
bf:b1:d7:58:e8:08:5f:00:8f:f6:7e:cd:38:4f:65:
f2:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:81:7C:21:28:60:56:4D:B3:48:2A:10:58:9D:D0:84:47:A8:EF:9C
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a366461643a3a2f34382d3438203d3e203136393039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:6dad::/48
Signature Algorithm: sha256WithRSAEncryption
4f:eb:38:a1:e2:8b:eb:40:47:31:d0:8c:84:07:06:6d:33:3f:
77:3f:8f:92:32:b1:a2:c8:17:27:b8:22:1c:ed:62:50:53:15:
ff:e1:10:98:69:f8:ca:88:59:3c:75:4a:23:02:3a:6e:d5:3f:
47:72:8c:3b:bc:dd:b9:15:02:43:13:64:dc:4e:7c:21:6a:a0:
33:1c:a1:a4:b6:34:b1:f7:4d:65:f9:4b:b3:57:27:ce:7a:91:
fc:d0:c8:a1:2a:4a:c5:42:d3:bd:05:07:d6:65:5b:62:2b:28:
62:86:c0:5e:2e:ba:7a:fe:61:4a:e8:0a:aa:d2:e1:01:c0:c9:
27:b8:d4:fc:e0:c4:13:dd:d1:5e:69:e8:2c:60:66:1d:19:b8:
35:ab:9f:43:dd:79:0a:96:bd:4e:4f:e6:08:12:70:2d:c3:e8:
78:79:56:5f:d9:7c:2a:4c:b4:04:5d:50:70:0e:bb:05:28:66:
cf:29:bf:5e:4e:d7:d5:3a:cd:79:34:2a:2b:1b:22:a6:fa:11:
4a:9a:e3:2e:c5:47:b2:d7:10:26:db:b1:ec:07:2c:c9:d4:c3:
11:0e:b2:72:4c:bb:f7:ac:19:bf:f2:0e:b7:db:c3:77:ae:cb:
08:68:d4:8c:10:86:0c:c1:e7:ca:30:e0:b8:3b:09:40:59:c7:
f0:56:12:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 23 23:54:19 2025 by rpki-client