Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363232363a3a2f34382d3438203d3e203136393039.roa
File: 326131343a373538343a363232363a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier: lOv81k68N0lj7dMS3mFRlC2SEBUvO8T+8eJ64+emu0U=
Subject key identifier: 2E:BC:55:CC:C0:CA:9D:4D:11:0A:8C:6A:99:C1:51:F6:65:E6:FE:BD
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 2BC75DC49A1E6FC0BBE37AE3959FE819A76A1DFA
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363232363a3a2f34382d3438203d3e203136393039.roa
Signing time: Mon 12 May 2025 16:18:04 +0000
ROA not before: Mon 12 May 2025 16:13:04 +0000
ROA not after: Mon 11 May 2026 16:18:04 +0000
asID: 16909
IP address blocks: 2a14:7584:6226::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 14 May 2025 08:42:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2b:c7:5d:c4:9a:1e:6f:c0:bb:e3:7a:e3:95:9f:e8:19:a7:6a:1d:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: May 12 16:13:04 2025 GMT
Not After : May 11 16:18:04 2026 GMT
Subject: CN=2EBC55CCC0CA9D4D110A8C6A99C151F665E6FEBD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:21:ab:ab:48:f7:8b:79:86:99:a3:8c:92:c5:
cb:22:f9:8a:0b:b9:1d:09:e2:6b:18:b9:c6:c9:b9:
64:a6:36:ab:71:81:2f:b5:64:b4:56:14:22:6b:71:
6b:17:7b:2c:0b:91:15:4a:4d:85:bc:fd:35:a2:37:
79:ec:8b:17:14:a8:30:f4:ad:d5:c1:fc:5e:8e:70:
5f:f1:32:04:df:a1:42:d9:41:55:c3:22:c9:47:26:
af:6e:d6:21:02:05:48:16:82:72:cc:db:48:ba:1d:
dd:08:39:2e:55:73:5c:ad:68:b4:89:de:ac:83:07:
00:b3:8b:9d:51:97:1b:3c:5c:47:44:70:1c:76:e5:
30:2d:ef:be:a8:52:37:56:92:58:b9:f9:8d:a9:8b:
03:8e:6e:b1:0e:8d:20:ff:6f:f5:20:e3:9b:82:0f:
7e:7f:07:c8:03:ae:7a:7f:be:a7:65:7b:19:d5:d9:
45:1b:e1:05:ea:63:b2:46:0b:d2:7a:dd:cf:80:9f:
11:ca:bd:21:ff:65:e4:66:7d:a2:a0:eb:14:fc:e3:
a4:a1:ad:30:d0:2f:58:85:37:a1:e7:02:eb:ab:19:
67:e1:c2:bf:71:bf:e6:8e:41:5f:dc:e5:3f:4b:d8:
97:43:3f:c5:ad:75:45:f7:12:93:5b:de:65:b5:ef:
af:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:BC:55:CC:C0:CA:9D:4D:11:0A:8C:6A:99:C1:51:F6:65:E6:FE:BD
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363232363a3a2f34382d3438203d3e203136393039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:6226::/48
Signature Algorithm: sha256WithRSAEncryption
5a:76:7a:50:cc:2d:f5:a8:6e:e5:bc:3b:73:8e:7a:a2:37:75:
d8:51:4e:30:25:2a:b5:57:2d:4d:27:56:08:df:8b:6c:8e:79:
1e:1d:79:a6:67:1f:80:1e:f7:da:c2:b8:92:24:d4:b6:88:e6:
ba:d1:90:aa:a5:27:b4:3a:90:bd:d1:dc:92:71:b0:77:12:02:
5d:e4:5c:1f:f6:77:4a:3e:3b:a0:63:eb:88:df:14:b4:47:f2:
f9:ad:88:da:9b:da:b8:d9:2f:10:ac:c2:f6:5b:84:b7:d3:ec:
cb:55:71:6f:f3:c4:d1:00:c3:21:b6:9b:ea:4e:91:3a:6e:b3:
cc:e1:f3:58:67:d2:7f:0b:0a:2d:e1:bc:7a:2d:9e:a6:2d:51:
03:5c:a0:11:ce:e7:49:e3:2c:db:18:30:8a:29:63:39:ec:fd:
10:ee:e0:12:43:e1:e4:12:4d:3d:b6:f7:8e:8e:c8:93:af:8b:
e9:f0:f6:cc:98:23:3c:55:9a:65:f9:db:d3:d5:c5:30:03:6d:
2f:2a:67:cf:5a:a3:92:b9:13:71:9c:30:a6:a7:14:e4:13:1f:
af:5f:15:1e:5a:59:f6:65:3f:4a:35:ed:62:65:80:44:6e:e3:
df:04:49:ce:4f:05:7b:55:22:30:0f:23:a4:a7:07:03:4d:2f:
ea:83:b8:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 07:35:47 2025 by rpki-client