Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363262343a3a2f34382d3438203d3e203136393039.roa
File: 326131343a373538343a363262343a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier: z4Ai/VeVTeyDOlReWxE5wdyNjoci1/REc30wdf9k3iE=
Subject key identifier: 6D:17:BF:73:09:11:97:B5:2E:17:29:0B:03:D7:99:7E:FD:AD:38:20
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 581EA5B1807B03FF3B97B082F88388EC5D48D48A
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363262343a3a2f34382d3438203d3e203136393039.roa
Signing time: Sat 17 May 2025 00:36:02 +0000
ROA not before: Sat 17 May 2025 00:31:02 +0000
ROA not after: Sat 16 May 2026 00:36:02 +0000
asID: 16909
IP address blocks: 2a14:7584:62b4::/48 maxlen: 48
Validation: Failed, certificate revoked on Sun 18 May 2025 18:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
58:1e:a5:b1:80:7b:03:ff:3b:97:b0:82:f8:83:88:ec:5d:48:d4:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: May 17 00:31:02 2025 GMT
Not After : May 16 00:36:02 2026 GMT
Subject: CN=6D17BF73091197B52E17290B03D7997EFDAD3820
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:57:2b:d4:fb:d9:b0:4e:d3:86:3b:f1:e3:13:
ff:a6:20:57:e8:63:4d:17:93:80:4d:7f:ae:cb:ed:
f3:07:c5:93:48:cb:22:cc:24:6d:c5:ef:86:7e:47:
54:64:c6:ae:5c:44:40:df:c1:80:65:f2:a6:dd:6d:
b0:e1:30:49:19:15:4d:95:25:90:5b:a4:97:9a:18:
87:4b:5f:c4:d9:56:66:e0:71:8e:4b:0e:36:f4:bd:
fb:c5:84:3b:4d:7a:f6:98:9e:89:d2:aa:a5:c9:64:
fc:4c:a8:94:70:80:46:45:fa:01:dc:28:9e:cd:80:
5b:01:ed:4c:fc:8c:00:e3:26:e6:8b:77:c7:17:8d:
51:81:ae:a9:ee:59:f7:b1:81:7c:04:79:70:8b:15:
e9:3b:cb:58:19:0a:50:a3:06:7b:4a:dd:55:e4:17:
7e:9f:bb:40:75:5e:e9:9e:ea:39:c2:44:60:7a:74:
2b:5f:1a:42:bd:9b:67:68:55:1b:57:7b:df:ce:ba:
7e:44:fe:da:20:33:b2:58:8b:8c:48:c5:d7:e1:76:
99:bf:c0:65:2b:cb:ec:78:0c:f2:7c:93:cb:e1:75:
47:29:47:7c:22:a2:43:6d:e5:05:a4:62:45:b4:b5:
d3:f4:71:c2:b8:9d:e6:30:39:53:6f:41:eb:eb:6b:
53:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:17:BF:73:09:11:97:B5:2E:17:29:0B:03:D7:99:7E:FD:AD:38:20
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363262343a3a2f34382d3438203d3e203136393039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:62b4::/48
Signature Algorithm: sha256WithRSAEncryption
7e:9d:ad:06:d2:02:a9:9f:0a:21:9a:7a:2b:63:6d:80:73:b3:
43:c6:0d:31:d7:b9:ec:74:41:b4:8c:8f:4b:32:60:23:78:ba:
6d:b0:58:ae:69:e7:53:40:d2:26:4d:dc:26:34:8a:85:4d:8d:
64:cb:e1:d0:c1:8e:f2:39:d9:32:5b:05:50:d3:45:25:8f:45:
28:ac:02:61:c7:76:44:b7:b4:48:db:56:12:e8:73:62:45:9a:
44:af:07:0f:fa:09:f8:98:5a:8f:11:42:6e:e3:11:2d:73:d9:
f8:aa:d6:51:a2:dc:9e:58:ec:e0:19:13:33:55:1e:c4:69:33:
f0:c8:86:d3:39:81:d5:5e:99:a2:f1:b3:5c:2a:23:d6:bc:bb:
21:82:44:c7:85:38:6b:f1:99:21:e2:7e:68:31:2a:d3:41:5e:
62:ac:0a:63:23:39:ff:1b:f2:7c:84:dc:50:a6:c5:da:c2:70:
cd:47:75:f0:e5:49:50:a6:8b:f5:b0:a4:74:3b:c0:31:99:22:
91:e8:ee:7e:b1:58:20:28:84:b1:f8:e0:38:8c:59:71:a7:43:
7d:93:e0:c1:75:f2:a0:0b:60:00:c8:c9:95:c4:d5:cf:39:8c:
e9:ac:84:2b:fb:ea:cf:23:d8:ff:e2:1c:8f:cb:0d:78:96:b3:
15:7a:ec:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 07:47:12 2025 by rpki-client