Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363261373a3a2f34382d3438203d3e203136393039.roa
File: 326131343a373538343a363261373a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier: AbKY5jXgxICC6VuNo/435ttwUEY6Tprg6Icg9DeSflk=
Subject key identifier: D2:0B:51:F2:74:8B:07:B6:F5:9C:DE:C5:63:35:36:FD:A0:E7:46:4A
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 266018D76E55BE78E8841FA0F08C5EA8FE715C0C
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363261373a3a2f34382d3438203d3e203136393039.roa
Signing time: Fri 16 May 2025 15:54:02 +0000
ROA not before: Fri 16 May 2025 15:49:02 +0000
ROA not after: Fri 15 May 2026 15:54:02 +0000
asID: 16909
IP address blocks: 2a14:7584:62a7::/48 maxlen: 48
Validation: Failed, certificate revoked on Sat 17 May 2025 23:42:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
26:60:18:d7:6e:55:be:78:e8:84:1f:a0:f0:8c:5e:a8:fe:71:5c:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: May 16 15:49:02 2025 GMT
Not After : May 15 15:54:02 2026 GMT
Subject: CN=D20B51F2748B07B6F59CDEC5633536FDA0E7464A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:36:d7:d4:7d:e3:34:9f:0f:ef:5a:15:7f:61:
8f:b7:db:78:7c:39:01:ef:3b:e9:17:ba:f6:da:7a:
a0:1b:65:19:7c:1c:27:08:34:d9:19:76:bf:a4:47:
81:05:66:fa:9a:ce:ee:29:28:a0:1c:6b:73:49:10:
6f:a2:94:30:72:42:78:67:30:f9:89:9a:04:e3:f2:
e6:20:c9:37:7b:48:21:48:31:58:72:c4:78:7a:b4:
c5:b5:c0:c9:66:af:70:a8:90:b6:8e:05:f9:b8:0a:
e0:ae:5e:a2:c8:a5:80:dc:bc:39:33:35:25:90:46:
f3:73:1d:70:8c:1f:d1:53:fc:e5:61:64:74:29:b3:
37:99:2d:61:7e:64:4a:74:7b:94:64:52:ba:df:20:
c8:5e:d7:38:e0:c2:11:21:e8:b1:0c:a4:8b:bb:5d:
aa:b7:82:e2:52:c6:81:f1:8e:94:15:b7:ed:41:6a:
8e:3b:34:29:fb:56:4e:4d:b1:52:96:40:12:6d:5e:
07:3e:dc:95:f9:f0:c5:5b:ce:d0:43:3c:a8:01:8a:
95:47:c0:2e:ea:13:d9:8e:0c:a3:d8:ac:60:ba:e6:
20:d0:78:39:b8:26:43:ed:86:7f:fb:d8:cc:03:7d:
53:a1:dc:3f:08:9e:04:f8:45:16:fa:76:ae:0b:6f:
27:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:0B:51:F2:74:8B:07:B6:F5:9C:DE:C5:63:35:36:FD:A0:E7:46:4A
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363261373a3a2f34382d3438203d3e203136393039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:62a7::/48
Signature Algorithm: sha256WithRSAEncryption
03:45:d0:ca:fb:5a:ac:d3:a0:7a:0b:6f:9a:74:cc:2e:ea:32:
e8:4b:fa:30:0e:a5:1f:ba:10:68:56:74:5d:a5:69:ef:25:9b:
a5:8c:9c:c8:54:22:79:a4:03:02:23:ae:27:c3:0b:f1:42:1b:
27:af:e8:16:38:25:3d:0b:a2:9b:5d:53:46:b2:b3:b3:14:6e:
6f:77:45:f1:36:2b:bb:bc:92:d0:e6:99:a0:a7:a7:68:d7:b6:
8f:4a:8b:50:4e:44:16:78:1d:d9:ec:f5:da:03:a5:e4:ed:2d:
04:59:4e:2b:0c:5e:72:cc:1a:d4:2c:bb:ac:1c:a7:df:3f:82:
32:87:31:e1:fb:8c:b7:98:80:bd:bc:a4:8f:33:7e:ee:56:3c:
22:ad:48:d4:db:57:1b:c6:a6:bf:24:6d:f7:07:0b:b0:9f:c2:
e9:c1:6a:85:69:30:40:0b:61:65:5a:66:2f:a9:8c:71:3c:7b:
3b:32:e7:73:ee:24:3a:39:b3:91:5b:39:e1:8b:c4:6c:6f:95:
c0:8c:f2:10:1a:8a:35:d9:28:0c:5e:12:00:f4:51:76:ab:5d:
bf:09:bc:b9:d4:3a:ff:03:22:dd:ad:ac:0c:38:15:eb:0e:b7:
95:44:ec:e5:a4:b4:b4:c7:f2:39:ff:fd:d8:fb:de:10:55:88:
7d:6e:b5:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 07:37:32 2025 by rpki-client