Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363262363a3a2f34382d3438203d3e203136393039.roa
File: 326131343a373538343a363262363a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier: wep014JYol5886QBORVHxBnb+M2EfFnUk+Kp5nIgDHE=
Subject key identifier: 72:55:EA:C6:6A:32:5F:1D:DE:8F:E8:9D:44:AD:B3:69:59:FE:C1:60
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 076BFA3D699C901F229EE08B65CA247ED5F508D1
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363262363a3a2f34382d3438203d3e203136393039.roa
Signing time: Sat 17 May 2025 00:36:03 +0000
ROA not before: Sat 17 May 2025 00:31:03 +0000
ROA not after: Sat 16 May 2026 00:36:03 +0000
asID: 16909
IP address blocks: 2a14:7584:62b6::/48 maxlen: 48
Validation: Failed, certificate revoked on Sun 18 May 2025 21:30:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
07:6b:fa:3d:69:9c:90:1f:22:9e:e0:8b:65:ca:24:7e:d5:f5:08:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: May 17 00:31:03 2025 GMT
Not After : May 16 00:36:03 2026 GMT
Subject: CN=7255EAC66A325F1DDE8FE89D44ADB36959FEC160
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:bb:a4:64:b0:cd:8e:be:06:5c:52:bb:54:8d:
3c:16:a0:e1:b8:15:a6:fa:63:21:5b:6c:19:5e:24:
f4:b5:09:ca:6d:72:7c:9e:e9:09:b5:ec:45:e3:fc:
39:3e:a7:bb:1e:ef:bc:41:8d:cd:dd:bf:3d:c8:d0:
be:ad:d5:da:8a:d8:0d:8a:17:10:06:7b:a8:90:56:
7b:6b:e6:a6:c2:6a:dd:f3:30:ad:8c:f4:49:28:f6:
56:b6:bf:de:84:6a:83:5a:51:75:5c:9c:94:31:07:
5e:f1:f8:09:87:3c:9d:52:f1:8e:66:6d:0d:79:9b:
36:c7:16:c8:ae:85:b0:f3:90:4d:a5:db:d1:b3:13:
bf:c4:f2:76:6c:39:6b:9a:74:0d:80:cc:9e:34:81:
30:5e:b7:8f:97:79:0e:4c:f6:78:47:85:34:3a:f6:
82:e2:6b:83:54:09:0c:75:d9:03:27:3c:84:72:46:
c5:8a:3c:6f:f6:01:4f:60:52:d7:ac:3d:01:5a:60:
2b:f8:66:1b:5a:80:07:fd:5d:83:90:8b:79:03:44:
da:f8:04:e1:23:48:93:e9:4c:9f:b7:16:6d:9f:c2:
b9:00:a5:8e:6c:a7:db:dc:1c:04:2a:87:78:d2:bf:
19:5d:23:57:cd:fe:20:50:ef:a1:c3:55:9e:55:46:
55:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:55:EA:C6:6A:32:5F:1D:DE:8F:E8:9D:44:AD:B3:69:59:FE:C1:60
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363262363a3a2f34382d3438203d3e203136393039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:62b6::/48
Signature Algorithm: sha256WithRSAEncryption
a2:ad:10:44:a2:24:36:4b:19:ca:6a:90:57:59:e3:e3:2a:1f:
9a:bd:94:fe:e5:bd:4a:ba:2d:0e:fc:f9:73:3f:b8:ed:75:24:
c4:6a:4a:fd:d9:c6:f8:04:0d:a2:c2:c8:5d:2b:2d:96:ae:eb:
9e:4d:2f:c1:ce:95:01:d3:11:6f:13:30:79:d0:5a:83:92:c0:
78:c9:2b:41:c9:2c:11:7f:9e:be:b8:4a:43:79:97:71:33:7d:
96:4a:09:92:4e:65:4e:62:ae:2b:1c:12:22:81:19:79:f6:44:
5f:7e:36:6c:c3:34:b9:12:00:42:50:66:ff:32:b0:61:c0:f0:
4a:80:f2:c6:44:90:20:a5:60:73:ae:ce:d6:35:c0:9c:3f:c3:
58:d0:21:95:e2:39:8d:79:f4:3b:75:0c:33:b8:57:c7:fb:80:
5b:fa:fb:14:56:e2:f1:05:2a:5b:a4:8b:89:f4:e3:fa:9a:7d:
60:a1:a8:c9:59:b7:5f:f6:85:23:27:a2:c6:3f:e3:c3:b2:28:
93:1a:a8:e4:0a:0f:cc:f4:fe:25:85:94:68:ad:8f:55:c7:10:
fc:03:9b:6c:d2:0e:15:7d:60:1a:7d:31:3f:13:3b:e2:2d:a8:
db:4f:2a:41:ca:b1:3f:09:93:3b:63:0f:b6:83:04:66:e0:a5:
1f:3f:ed:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 11:06:36 2025 by rpki-client