Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363262323a3a2f34382d3438203d3e203136393039.roa
File: 326131343a373538343a363262323a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier: BsOTZLHd0s4loltkPbt38HIUoCYuf9DOw73Y+ks5564=
Subject key identifier: 6B:DB:A3:2C:0D:26:6A:14:94:C7:DD:B2:E0:1C:9D:05:37:D9:7A:2E
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 110411EC1899E75B8D9B6EBF2B9CF867BA1AC846
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363262323a3a2f34382d3438203d3e203136393039.roa
Signing time: Sat 17 May 2025 00:24:02 +0000
ROA not before: Sat 17 May 2025 00:19:02 +0000
ROA not after: Sat 16 May 2026 00:24:02 +0000
asID: 16909
IP address blocks: 2a14:7584:62b2::/48 maxlen: 48
Validation: Failed, certificate revoked on Sat 17 May 2025 20:30:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
11:04:11:ec:18:99:e7:5b:8d:9b:6e:bf:2b:9c:f8:67:ba:1a:c8:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: May 17 00:19:02 2025 GMT
Not After : May 16 00:24:02 2026 GMT
Subject: CN=6BDBA32C0D266A1494C7DDB2E01C9D0537D97A2E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:ad:9f:9f:c3:ef:ae:85:b3:1b:a8:22:1b:91:
0d:2b:71:ec:0b:30:fe:81:d0:7c:a9:a4:61:d4:d1:
99:dd:d6:e9:99:a2:35:39:b0:48:04:8d:2c:76:25:
be:a0:1a:74:9d:04:1d:2f:84:19:10:f7:38:79:74:
22:55:40:0d:03:2b:da:93:95:ef:48:a9:ab:e8:3e:
9d:a8:16:cf:75:46:9d:e0:06:50:32:d8:b9:9f:0c:
6d:96:30:9f:06:7a:12:97:0a:13:e6:ba:d7:d0:8d:
10:82:c6:50:f7:f5:56:11:78:d9:e7:54:a5:55:14:
4a:0c:99:58:42:f4:ee:4c:47:b3:3a:65:98:ae:a4:
ee:ad:a3:8b:f3:78:18:60:87:72:99:b2:92:d8:a1:
65:aa:2f:d3:7c:b9:a0:66:03:6f:5d:b8:77:8b:59:
1b:b7:51:29:5b:f1:a4:c3:fe:a6:e3:bc:8a:48:6c:
d5:01:70:b9:c2:78:3b:20:f2:f9:cd:b3:f4:d0:2e:
a4:23:ea:1b:4b:4b:d6:58:b3:84:a2:f5:5b:a9:be:
21:ff:3e:0f:b3:4f:fa:3a:12:a5:34:60:ce:8c:03:
cd:01:82:d1:25:95:f9:88:f2:42:5b:0f:c5:10:00:
f6:83:5d:43:1d:78:86:f0:87:6f:d8:a6:49:59:2d:
9b:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:DB:A3:2C:0D:26:6A:14:94:C7:DD:B2:E0:1C:9D:05:37:D9:7A:2E
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363262323a3a2f34382d3438203d3e203136393039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:62b2::/48
Signature Algorithm: sha256WithRSAEncryption
1e:4a:45:62:a5:b7:d1:e3:bb:f9:07:45:55:36:ee:2f:d4:9a:
d0:63:3b:68:c4:90:20:fb:97:42:ac:34:ef:9e:3d:a2:ce:10:
a8:06:c5:62:d4:65:16:a8:ec:91:e8:5f:99:17:47:15:28:45:
46:11:49:40:ea:97:84:51:89:ca:1b:1e:0f:d4:4c:78:7f:78:
64:e9:77:27:f3:41:91:80:3a:9f:44:25:94:d5:79:2b:c9:da:
39:d6:ae:91:8f:0d:3e:88:e5:08:79:62:3e:1d:e3:c3:c2:1a:
cd:26:b8:3c:26:01:9d:90:05:2a:d8:8b:63:38:cc:7d:05:fe:
db:8d:02:4a:83:97:15:f3:f8:9a:3d:40:bf:bf:bc:13:c1:d9:
52:37:4c:c1:b9:4b:e2:eb:26:97:a7:39:d8:f6:ce:3f:70:a2:
b5:16:74:4b:b6:70:5f:f0:6a:e9:85:ae:44:2e:29:d9:87:b3:
4e:cb:c6:35:9d:37:e1:45:76:77:4c:ff:98:84:53:fb:77:60:
b7:3c:f6:09:79:db:ab:e4:d9:36:de:82:76:f1:1e:3f:7f:be:
6d:09:cb:fb:15:7a:da:6f:b4:14:f1:e8:1d:29:e9:c0:9b:63:
55:aa:e5:64:01:c6:73:ec:18:2d:b2:91:0b:aa:a3:6f:40:fb:
60:15:61:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 14:39:52 2025 by rpki-client