Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363239363a3a2f34382d3438203d3e203136393039.roa
File: 326131343a373538343a363239363a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier: 7q7cHFwTCEnA2gokpyXgUs3GBwUNqRvW9s2+NCX6gi4=
Subject key identifier: 79:68:3B:28:02:02:85:26:DD:0F:D6:00:C0:50:3F:A7:DC:EC:D2:62
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 6F2ED293AADB43F923ABA6AAA20B768060A69EBD
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363239363a3a2f34382d3438203d3e203136393039.roa
Signing time: Thu 15 May 2025 20:18:02 +0000
ROA not before: Thu 15 May 2025 20:13:02 +0000
ROA not after: Thu 14 May 2026 20:18:02 +0000
asID: 16909
IP address blocks: 2a14:7584:6296::/48 maxlen: 48
Validation: Failed, certificate revoked on Sat 17 May 2025 18:30:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6f:2e:d2:93:aa:db:43:f9:23:ab:a6:aa:a2:0b:76:80:60:a6:9e:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: May 15 20:13:02 2025 GMT
Not After : May 14 20:18:02 2026 GMT
Subject: CN=79683B2802028526DD0FD600C0503FA7DCECD262
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:83:95:86:50:0f:ce:87:c3:c3:b1:4e:13:a7:
28:92:0d:4f:a5:aa:2d:8d:0d:8a:01:8e:57:3f:41:
63:ec:92:46:e1:0c:aa:60:fd:a7:21:07:7b:92:e1:
38:51:3b:00:3f:fd:4e:41:10:52:6f:42:50:a0:2b:
ec:0f:5b:ce:b2:a0:1a:fb:ec:e1:d5:b4:47:0e:b0:
f5:db:54:6e:f9:63:79:6d:6f:f3:75:3c:29:cf:40:
f8:50:0c:ff:a5:79:f0:53:10:4d:d8:f2:bb:49:9a:
82:f6:6c:ed:57:60:c2:61:5e:65:43:4f:94:3a:56:
8c:6c:29:9b:fb:21:30:17:3d:09:a8:45:f6:3d:69:
bd:97:47:8e:51:5c:44:f8:f7:c0:db:fa:19:38:fd:
68:1d:ec:83:42:dd:ff:c7:2d:d0:97:56:4d:8a:20:
f3:07:7c:5e:c6:93:11:40:b8:52:83:d6:06:4a:bd:
cf:9a:83:51:05:d4:5a:2f:66:9b:1a:3e:bf:49:74:
81:a3:d4:a6:d8:75:1a:38:2f:32:90:9a:0f:2c:42:
bc:a1:cc:cf:c9:2c:0d:b9:80:f6:dc:62:d9:ac:8e:
62:f9:3e:b9:7c:11:23:45:74:19:38:fb:ce:d6:33:
14:c7:58:e0:3c:49:9c:f2:fd:90:97:88:18:9f:c4:
a8:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:68:3B:28:02:02:85:26:DD:0F:D6:00:C0:50:3F:A7:DC:EC:D2:62
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363239363a3a2f34382d3438203d3e203136393039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:6296::/48
Signature Algorithm: sha256WithRSAEncryption
05:70:5d:b3:ad:2f:c3:49:fc:a4:cd:17:3b:66:ce:0e:11:c8:
58:14:ce:51:0f:71:02:6e:0c:64:79:5b:f6:46:ff:d1:50:f8:
f6:05:cc:88:6a:53:4a:7c:d3:b6:73:80:2a:19:4e:52:bf:b7:
78:0c:57:68:45:4d:59:91:b9:9f:d8:af:36:bc:2b:74:3d:e4:
a8:02:03:d0:fd:aa:3e:ea:c2:27:c4:ba:0a:fe:a5:ed:7b:cb:
de:69:23:ac:eb:ed:b4:77:52:4f:1c:66:5c:c7:7c:61:37:a4:
57:e0:6f:b1:b8:35:da:88:38:d0:91:57:2e:48:59:12:39:d0:
58:7c:7f:71:99:8c:6a:fb:42:db:7e:4f:48:9c:f3:d7:8c:f5:
54:79:24:c2:4d:6c:f5:2d:7d:77:0f:f0:b0:71:ae:b5:da:0a:
30:8d:61:17:b8:a8:c2:b8:71:54:45:43:a1:c8:39:a6:9b:ca:
d3:fe:84:e8:4e:3e:a1:8d:f8:7c:7f:8f:76:5d:80:e8:a3:bc:
80:3b:41:5e:c6:2d:57:9e:8f:72:66:73:e7:72:0c:5c:8a:0c:
23:c5:6f:9f:80:6b:b5:15:d2:36:17:bf:d8:17:9a:48:75:bf:
a1:a7:4c:e7:66:ec:bd:16:8e:35:44:0c:d8:67:e1:89:48:95:
0b:02:d2:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 07:44:33 2025 by rpki-client