Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363239623a3a2f34382d3438203d3e203136393039.roa
File: 326131343a373538343a363239623a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier: IzmP25aa2sXOzoGYX9KQq5kCkielKUxce/hW7VgNEGs=
Subject key identifier: A8:3E:7B:86:D6:5C:81:D3:BC:FA:AB:8F:6C:7B:47:FE:EC:1E:AB:C0
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 0DD0C112291CD3C35FE76EAC54ECB74BC4C5C4E8
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363239623a3a2f34382d3438203d3e203136393039.roa
Signing time: Thu 15 May 2025 21:06:02 +0000
ROA not before: Thu 15 May 2025 21:01:02 +0000
ROA not after: Thu 14 May 2026 21:06:02 +0000
asID: 16909
IP address blocks: 2a14:7584:629b::/48 maxlen: 48
Validation: Failed, certificate revoked on Sun 18 May 2025 00:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0d:d0:c1:12:29:1c:d3:c3:5f:e7:6e:ac:54:ec:b7:4b:c4:c5:c4:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: May 15 21:01:02 2025 GMT
Not After : May 14 21:06:02 2026 GMT
Subject: CN=A83E7B86D65C81D3BCFAAB8F6C7B47FEEC1EABC0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:3e:82:8d:9f:37:47:6b:56:c1:3a:62:69:9d:
97:19:e2:79:dd:81:28:1e:81:e0:af:94:84:80:d5:
d3:de:75:68:e6:3d:f3:34:d2:a2:d1:94:97:72:fd:
ca:cb:55:31:ed:09:51:8a:7b:43:57:aa:f8:66:37:
26:d7:03:f5:c0:48:d4:fa:e7:e3:c8:27:c1:88:89:
97:a5:50:6c:3e:72:7a:49:cb:90:34:97:4d:9e:54:
1f:7d:a2:b6:b5:94:3a:c4:d6:6a:1f:31:a3:88:ae:
f3:75:7c:f3:b0:2d:2a:63:87:fd:30:6a:01:2b:51:
a4:72:c7:f5:6c:0e:f1:92:1d:52:22:35:2e:3b:39:
94:26:b2:5b:d4:92:61:e9:1d:01:53:05:d1:d2:dc:
de:68:f5:1d:dc:b2:e4:9c:73:a4:c5:6e:db:ee:a9:
f7:c6:7a:54:ce:9e:b8:08:b2:da:8d:42:bf:ee:7a:
2a:39:48:c7:9b:fa:4f:b4:0c:54:5b:97:47:7b:f0:
e3:cd:ed:a7:78:bc:96:2e:ab:8b:85:82:31:d4:ed:
0c:89:44:a2:eb:84:c7:86:ac:d4:f9:8e:af:c0:3f:
61:f7:5f:d0:28:a5:67:cc:42:55:8f:4e:cc:ab:42:
29:2f:7f:23:b2:33:a5:a0:88:a4:82:35:b6:5c:83:
c4:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:3E:7B:86:D6:5C:81:D3:BC:FA:AB:8F:6C:7B:47:FE:EC:1E:AB:C0
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363239623a3a2f34382d3438203d3e203136393039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:629b::/48
Signature Algorithm: sha256WithRSAEncryption
34:22:f6:d3:d0:51:70:4b:1c:0f:40:b6:81:a8:f8:75:cc:79:
1c:9f:3a:03:dc:38:bf:e4:71:86:e8:6a:ee:d9:dc:2f:36:f8:
0a:a6:b8:b5:9a:8b:48:79:dd:00:9e:c1:63:86:df:e4:4d:10:
44:75:83:0e:a1:c9:e0:ce:ee:64:0c:e0:6e:4e:a5:60:17:c1:
38:39:43:c4:9d:bf:3b:78:22:38:12:c0:06:a0:7f:41:d1:09:
70:63:be:54:41:34:25:7b:22:5b:68:37:b0:80:02:e9:69:7c:
d9:ec:3a:30:6c:72:ce:b6:2a:9c:6e:b5:a2:da:47:6a:95:4d:
72:41:a2:36:45:bf:5d:d3:cf:15:11:88:b7:4d:67:9a:79:cb:
c9:6f:8c:0e:2d:13:cc:53:6b:1b:de:72:6c:07:b1:ed:73:31:
4a:1d:d9:77:9c:cd:00:ef:87:91:1a:52:82:5f:31:55:c1:b7:
07:85:8c:ef:fb:a9:e0:04:64:e1:2b:6b:50:25:9a:5a:6f:7b:
d9:26:1d:b3:32:1a:25:97:40:ef:3e:28:3f:3a:04:64:9e:e7:
0a:88:da:0c:1c:07:25:9f:34:d3:94:13:b7:d7:d4:b1:45:0f:
29:4c:27:16:19:08:f1:0a:ce:fe:b2:69:4a:96:7a:2b:00:57:
0d:65:38:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 07:16:18 2025 by rpki-client