Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363236313a3a2f34382d3438203d3e203136393039.roa
File: 326131343a373538343a363236313a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier: FT56XnnRMpm2d8ZPY1cEhSIML/Cv72jIUAoH3B+7Gxs=
Subject key identifier: 06:2D:2F:DE:53:19:5C:8A:B9:DE:A5:97:C4:CB:6B:A4:AF:CE:EB:27
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 253C697C831373746B0F549A8D2040779074C540
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363236313a3a2f34382d3438203d3e203136393039.roa
Signing time: Mon 12 May 2025 16:18:03 +0000
ROA not before: Mon 12 May 2025 16:13:03 +0000
ROA not after: Mon 11 May 2026 16:18:03 +0000
asID: 16909
IP address blocks: 2a14:7584:6261::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 14 May 2025 00:18:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
25:3c:69:7c:83:13:73:74:6b:0f:54:9a:8d:20:40:77:90:74:c5:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: May 12 16:13:03 2025 GMT
Not After : May 11 16:18:03 2026 GMT
Subject: CN=062D2FDE53195C8AB9DEA597C4CB6BA4AFCEEB27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:21:84:7e:2f:56:8d:02:41:d0:50:f2:4b:38:
6f:bb:6f:af:c1:7a:b0:53:9e:08:67:a9:ad:f5:0c:
01:89:73:a0:39:73:cd:75:2b:7e:55:c1:f7:09:fb:
05:f8:d4:5d:eb:a0:4d:12:10:b4:13:a8:ce:6f:80:
63:99:eb:4a:08:45:5d:a1:6a:aa:b3:9f:a9:a4:58:
ba:2f:26:ad:83:06:27:e7:55:68:f3:a3:3b:97:d7:
a3:47:a4:18:39:df:b4:94:bb:f6:79:d1:28:08:0e:
d5:ac:ff:a8:a7:93:73:f5:ca:8b:93:63:1b:d9:67:
07:90:dd:a6:70:bd:c4:a7:27:b4:24:a0:69:e5:ab:
5f:31:8d:0e:1d:56:b3:20:c6:56:1c:c3:21:1b:dc:
9e:f5:d8:99:18:45:20:e8:c9:d7:eb:0e:1a:92:cc:
88:45:64:a0:e2:77:09:f8:48:b6:36:ef:9d:be:28:
31:e5:a9:5d:10:3b:d4:a6:8b:e0:57:18:f2:18:36:
7d:d1:be:b7:4a:a8:f6:ee:6c:f6:fe:61:e7:63:c4:
b8:bb:99:3c:aa:7b:eb:43:b7:33:67:31:ed:29:ce:
93:17:e2:0f:58:c3:a3:f1:a3:21:26:fa:4f:f0:61:
2f:12:c5:4b:a3:0a:07:83:ec:0a:98:94:1b:7b:6b:
34:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:2D:2F:DE:53:19:5C:8A:B9:DE:A5:97:C4:CB:6B:A4:AF:CE:EB:27
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363236313a3a2f34382d3438203d3e203136393039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:6261::/48
Signature Algorithm: sha256WithRSAEncryption
7b:10:1e:ec:1c:d2:b3:41:1a:dc:b2:c3:c2:6a:cc:b6:2a:cf:
c9:e5:da:ab:7c:4c:3f:09:39:f0:83:87:09:63:78:44:1d:22:
f7:3e:4c:ef:06:78:f7:08:4d:16:d3:48:c0:25:4d:90:2b:fe:
15:39:ed:5f:24:8c:53:5d:0f:49:c4:cb:0d:c0:f6:99:62:dc:
90:62:34:5f:68:10:19:4e:a1:40:d3:4b:95:8e:7e:24:ed:4d:
4c:e3:29:21:31:60:19:2b:01:fb:be:39:67:91:0a:88:dd:2e:
39:e3:88:2a:69:44:e9:a5:00:e8:f7:2c:13:aa:93:0d:61:fd:
7b:ef:da:1e:41:01:e8:45:43:5e:ed:cf:9c:6b:c8:59:da:9b:
a9:9a:45:a3:27:d0:a2:43:b0:58:21:85:a1:32:db:b5:87:93:
41:d7:2a:8b:67:f3:a9:4c:be:27:28:49:b0:97:e3:dd:2f:8f:
89:1e:fe:44:28:4e:04:34:fe:f6:c4:42:90:35:40:77:3e:85:
78:03:24:ff:00:1f:fc:88:a9:d0:a4:f1:d7:57:43:68:ac:fc:
68:ec:cf:d0:d2:d7:b8:fc:46:ce:48:9a:da:a9:6f:13:e6:cd:
e5:c6:01:5c:f8:88:65:41:ff:b8:0b:12:38:92:8b:4e:0f:8e:
52:0f:c3:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 02:40:34 2025 by rpki-client