Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363263373a3a2f34382d3438203d3e203136393039.roa
File: 326131343a373538343a363263373a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier: sKTP2ddq3zAZs2ctcBX15ZvIP0T6JzImDi6u/I98Uj8=
Subject key identifier: 69:B7:96:17:90:11:DF:CF:5F:90:FB:98:39:5E:8A:12:1A:47:CF:A2
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 02AA02D35FC244A6861EB89241C56277CA24D706
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363263373a3a2f34382d3438203d3e203136393039.roa
Signing time: Sat 17 May 2025 18:36:02 +0000
ROA not before: Sat 17 May 2025 18:31:02 +0000
ROA not after: Sat 16 May 2026 18:36:02 +0000
asID: 16909
IP address blocks: 2a14:7584:62c7::/48 maxlen: 48
Validation: Failed, certificate revoked on Sun 18 May 2025 23:12:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
02:aa:02:d3:5f:c2:44:a6:86:1e:b8:92:41:c5:62:77:ca:24:d7:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: May 17 18:31:02 2025 GMT
Not After : May 16 18:36:02 2026 GMT
Subject: CN=69B796179011DFCF5F90FB98395E8A121A47CFA2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:e8:3a:02:57:ff:37:a0:57:73:85:88:01:1b:
4a:a7:ec:68:ff:4f:e9:27:5a:e3:6b:85:33:cf:3e:
65:90:45:e3:97:d2:9b:38:cc:85:d4:13:dc:95:7b:
87:14:d7:24:45:29:a5:66:50:b6:65:e2:e9:39:4c:
00:e0:d7:e9:53:b4:32:0b:e3:e5:fb:39:3d:d2:54:
51:c9:08:73:ad:00:42:9e:0e:ce:f7:04:7d:e5:2b:
b4:8d:37:10:56:c8:9b:54:c8:34:42:23:d0:e8:16:
c2:a3:b3:27:18:b3:2f:40:45:96:f0:aa:c0:9b:56:
23:3d:ea:26:2f:9b:02:62:ca:b0:cd:de:8e:66:8d:
13:3b:cf:e0:9b:c9:24:e7:be:55:36:bf:48:7d:94:
20:a0:1b:f5:01:1b:87:5f:c3:52:86:d3:15:00:61:
f0:f4:e4:ba:e7:d1:07:26:52:5e:79:81:f0:8e:67:
cf:f6:06:19:f7:62:fb:d2:57:e7:45:6c:08:37:f6:
2a:3b:fe:f2:69:45:69:48:0a:be:e0:57:b9:1c:c9:
9f:35:1e:3e:a0:7e:36:21:fa:bf:03:f5:c4:8a:80:
4f:d0:cb:45:d9:74:d2:3f:3d:89:10:72:94:e2:34:
b6:f2:8c:4a:fd:73:e8:b1:d3:95:4d:c0:d7:84:13:
03:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:B7:96:17:90:11:DF:CF:5F:90:FB:98:39:5E:8A:12:1A:47:CF:A2
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363263373a3a2f34382d3438203d3e203136393039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:62c7::/48
Signature Algorithm: sha256WithRSAEncryption
b8:be:b7:61:28:f2:33:55:99:e5:fb:da:7d:df:87:67:59:21:
04:2f:99:a8:c6:25:2b:47:a1:08:04:6c:27:8d:30:11:d5:2f:
01:61:84:08:06:d6:0c:0d:b9:ae:a2:34:0b:08:4e:48:a4:04:
89:cb:45:9a:04:54:01:f8:0f:d0:8f:d3:24:61:e2:1b:01:30:
0c:8d:c9:3b:03:af:46:38:6a:57:f6:42:28:93:f6:3f:06:bc:
e7:f6:65:0a:ba:93:63:10:77:1c:0e:48:b8:5b:a6:37:fb:af:
06:75:13:20:4d:26:98:3f:13:7f:b9:8c:2d:28:dd:6b:42:3e:
08:eb:c7:af:ed:e2:85:37:24:45:58:b6:fc:e4:26:08:fd:2b:
1c:f5:54:66:da:cb:5a:17:5b:7a:81:46:f7:d7:fc:1b:0c:1d:
1a:40:f2:92:31:7a:21:53:34:f6:da:aa:df:89:41:98:3c:67:
d8:d2:1d:7a:f3:56:59:28:93:7a:ad:39:f4:72:a3:ec:58:86:
20:16:29:4c:9b:fb:68:9d:8b:00:9f:2f:ce:16:16:28:3e:2e:
14:34:be:72:4f:32:db:1c:ac:b5:88:b4:51:4d:75:f2:c4:36:
19:65:ae:9a:78:06:ee:2e:93:7b:02:cc:26:aa:d9:bb:fc:4c:
67:55:a0:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 06:27:13 2025 by rpki-client