Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363262393a3a2f34382d3438203d3e203136393039.roa
File: 326131343a373538343a363262393a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier: D4FkL6r2RVK8aQtL0fpYOq7xECv+wNfDe398uGmsGVA=
Subject key identifier: 07:05:68:60:25:0B:EE:58:68:B9:3D:F3:C2:C1:6F:A3:E6:1C:D4:29
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 055C40F9002982A7A13BEADF88753A032730E516
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363262393a3a2f34382d3438203d3e203136393039.roa
Signing time: Sat 17 May 2025 02:36:02 +0000
ROA not before: Sat 17 May 2025 02:31:02 +0000
ROA not after: Sat 16 May 2026 02:36:02 +0000
asID: 16909
IP address blocks: 2a14:7584:62b9::/48 maxlen: 48
Validation: Failed, certificate revoked on Sun 18 May 2025 23:06:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
05:5c:40:f9:00:29:82:a7:a1:3b:ea:df:88:75:3a:03:27:30:e5:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: May 17 02:31:02 2025 GMT
Not After : May 16 02:36:02 2026 GMT
Subject: CN=07056860250BEE5868B93DF3C2C16FA3E61CD429
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:b1:81:5d:da:f4:9e:bc:30:54:48:b5:29:4f:
cf:93:84:34:05:49:e4:44:85:f5:a8:1c:88:81:f7:
df:39:9b:a3:ee:f6:f7:15:35:f9:d2:54:ad:7d:53:
da:84:e2:74:c8:ea:7b:81:42:ea:c0:9b:ff:69:96:
be:61:d9:58:17:a1:b3:fb:22:5e:4b:66:51:b3:61:
34:6f:ef:29:fe:28:41:ca:ea:58:c1:14:3e:c4:5a:
a2:2e:c1:87:76:c4:bb:67:3e:3f:19:be:36:27:ad:
04:73:de:86:70:80:be:21:f1:b2:66:b9:fe:98:23:
ef:7f:d7:a5:0f:49:22:f2:eb:c3:90:d6:6b:18:ce:
08:8e:02:a2:e7:9d:96:63:99:7c:f0:57:67:f9:ca:
3d:59:9d:72:cc:6a:0a:e0:b2:d6:d5:dc:8b:83:67:
f9:10:c8:bf:3c:35:c8:42:9f:6b:42:73:fe:bf:68:
41:53:38:12:40:f3:3a:49:87:73:20:da:2c:7f:63:
9c:15:7e:e7:95:c6:53:ca:10:72:84:d9:0b:16:19:
7b:50:94:ac:6c:2f:66:59:e5:8e:95:ef:06:9b:a2:
7a:41:93:98:d2:1b:f9:85:be:c1:28:fb:5c:1b:de:
64:37:ab:08:e1:64:fd:c7:b6:ba:81:34:0e:ee:14:
74:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:05:68:60:25:0B:EE:58:68:B9:3D:F3:C2:C1:6F:A3:E6:1C:D4:29
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363262393a3a2f34382d3438203d3e203136393039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:62b9::/48
Signature Algorithm: sha256WithRSAEncryption
43:b9:11:46:11:3a:e4:97:f6:3b:82:d4:9c:0f:bd:4f:07:bd:
2a:96:77:50:09:3e:bd:98:02:66:09:df:57:32:5b:68:2a:ed:
67:55:23:39:19:15:dc:f7:86:ca:86:64:c2:12:80:f7:c8:76:
09:b0:59:f2:96:03:c3:e0:69:c1:3d:44:1c:38:5b:28:23:08:
b8:69:a9:b8:f5:24:35:88:7d:59:4b:f3:38:e7:3f:84:47:b9:
d2:e8:ea:81:62:ec:3a:a4:ba:e3:ca:93:7d:22:52:c6:fb:4f:
a5:57:44:e7:29:1e:24:99:c8:af:32:28:a7:13:4a:2b:2d:77:
8e:05:f8:f3:c5:52:44:cd:4d:6a:54:19:4c:f3:d9:26:5f:03:
3f:96:10:99:c5:73:26:d3:b8:5d:87:e3:71:0b:2a:02:60:55:
1f:c8:89:09:67:32:9d:2d:f8:ff:ab:f0:50:3f:83:f9:69:a9:
56:ed:4d:26:85:74:48:34:56:58:1e:b4:43:1c:85:9b:00:ff:
03:84:8c:1d:c5:29:a9:a8:cd:fc:d0:5e:4b:82:fa:2c:64:05:
3c:26:92:ea:2b:4b:8c:04:d1:70:37:2e:3a:55:c2:55:e1:46:
98:bb:70:06:f0:7f:6f:5b:50:f7:d0:be:c5:58:00:9a:42:24:
9f:b0:cc:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 06:40:37 2025 by rpki-client