Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363261323a3a2f34382d3438203d3e203136393039.roa
File: 326131343a373538343a363261323a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier: CHgy6kPT3Ne4rj+0NaiiFba7QEcNKOgU86APGIPvmM8=
Subject key identifier: 2D:BD:7C:3C:72:C6:50:33:0A:96:B7:0B:1D:C5:39:CB:55:9F:74:AB
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 6A09D0AA988608FB8E7F9AB40ED559EC3CE2895B
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363261323a3a2f34382d3438203d3e203136393039.roa
Signing time: Fri 16 May 2025 08:12:02 +0000
ROA not before: Fri 16 May 2025 08:07:02 +0000
ROA not after: Fri 15 May 2026 08:12:02 +0000
asID: 16909
IP address blocks: 2a14:7584:62a2::/48 maxlen: 48
Validation: Failed, certificate revoked on Sun 18 May 2025 00:18:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6a:09:d0:aa:98:86:08:fb:8e:7f:9a:b4:0e:d5:59:ec:3c:e2:89:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: May 16 08:07:02 2025 GMT
Not After : May 15 08:12:02 2026 GMT
Subject: CN=2DBD7C3C72C650330A96B70B1DC539CB559F74AB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:0d:5c:48:a1:89:25:b5:75:19:42:0d:cf:e7:
f4:3a:61:b1:a9:10:61:40:55:93:eb:45:f4:6c:23:
9c:b6:d0:dd:23:42:1d:7a:da:80:d0:b2:0d:cf:d4:
0f:2e:5f:a4:ab:49:7a:8e:af:a0:4e:ad:62:fe:bb:
0d:05:60:44:a0:a8:6e:8c:4f:34:70:ae:f0:4e:69:
74:be:f0:fe:69:e5:70:1c:4d:83:6b:28:12:4e:5b:
da:cb:05:51:35:1c:67:93:bd:2b:06:38:7e:c8:87:
47:87:5b:ad:ef:4e:80:8d:e4:ea:07:c4:95:a1:7b:
77:e1:f8:91:f4:8d:b0:61:42:07:89:83:ad:25:e0:
40:72:f8:d6:9e:6b:18:44:c0:60:66:f2:77:35:de:
20:d6:54:a1:29:41:ba:a7:5e:60:f9:d0:3c:d5:81:
e3:32:a9:85:50:18:b6:19:2e:f8:19:d2:33:44:41:
ec:a8:72:08:f0:66:85:b9:49:34:a4:a6:4d:03:6f:
ed:7f:51:e6:0e:91:60:b0:33:6c:ad:ef:d4:48:40:
d1:cc:6c:5f:31:21:8f:ce:aa:a2:0b:ee:76:f5:d6:
41:94:b9:0e:5f:10:f7:90:d3:fd:be:76:ec:96:7f:
49:84:96:d6:c8:58:4c:48:ce:dc:cf:59:0a:f9:67:
a1:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:BD:7C:3C:72:C6:50:33:0A:96:B7:0B:1D:C5:39:CB:55:9F:74:AB
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363261323a3a2f34382d3438203d3e203136393039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:62a2::/48
Signature Algorithm: sha256WithRSAEncryption
78:7b:92:5d:00:61:2c:c2:c0:f0:cb:57:89:39:66:30:27:62:
17:f4:55:41:48:a1:a4:87:fb:4a:1c:40:f1:ed:d4:58:f6:ea:
d0:5d:51:43:d3:13:de:e5:01:30:92:ce:80:30:d6:66:60:79:
89:a2:ac:30:54:48:fa:e1:d9:c0:f0:6c:03:ea:fd:71:ed:26:
2e:e0:18:5b:ae:0f:aa:7c:94:fc:75:e9:19:a0:07:69:e9:c6:
6f:e0:e8:f1:c2:f1:4e:e0:71:90:17:22:e6:98:12:10:d8:4a:
d5:64:0f:3d:b3:49:0b:4f:64:b8:49:cd:91:32:d6:53:f1:c1:
1a:e9:e6:c7:60:12:78:c3:12:a6:f1:b3:e0:a2:e5:b9:c7:58:
b4:4d:25:52:07:11:79:74:4c:d9:31:e8:d5:6b:67:28:f1:19:
0c:00:d7:d0:c5:3d:3d:91:83:5e:85:08:5a:9a:a8:b4:85:10:
b2:af:7a:6f:3e:4c:a8:49:29:af:54:08:0f:ac:29:5d:73:53:
33:4d:2b:3f:6c:23:4f:18:b0:b8:7c:a6:c0:f3:ad:f9:90:ad:
a0:68:1f:20:3f:15:2c:06:42:23:39:bd:6a:58:7c:ae:f0:1c:
db:9e:b2:26:30:bc:20:c4:7a:3a:76:c6:2f:df:a6:88:9c:80:
2f:df:8a:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 05:52:56 2025 by rpki-client