Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363263663a3a2f34382d3438203d3e203136393039.roa
File: 326131343a373538343a363263663a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier: 1I5TG6VdK2n5ASnB55MnQYj04og0jy6i9u/50eowpD0=
Subject key identifier: 9E:EC:62:E1:92:CB:39:65:FE:31:A8:A6:51:96:CF:7E:1F:92:8F:EE
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 1C40CB62DDA065ACD26A783C194EAA6B8C7EF375
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363263663a3a2f34382d3438203d3e203136393039.roa
Signing time: Sat 17 May 2025 23:48:02 +0000
ROA not before: Sat 17 May 2025 23:43:02 +0000
ROA not after: Sat 16 May 2026 23:48:02 +0000
asID: 16909
IP address blocks: 2a14:7584:62cf::/48 maxlen: 48
Validation: Failed, certificate revoked on Mon 19 May 2025 20:30:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1c:40:cb:62:dd:a0:65:ac:d2:6a:78:3c:19:4e:aa:6b:8c:7e:f3:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: May 17 23:43:02 2025 GMT
Not After : May 16 23:48:02 2026 GMT
Subject: CN=9EEC62E192CB3965FE31A8A65196CF7E1F928FEE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:fb:2e:ef:3b:48:84:b2:5e:7d:7a:88:d3:a5:
07:84:4f:59:1b:db:27:31:c7:5d:5e:aa:41:49:a2:
a4:08:7e:bc:40:d7:3e:d7:e7:35:c5:a3:6d:aa:e9:
52:68:13:c4:e8:d1:5e:78:b8:61:ad:9f:f9:12:c7:
de:17:c5:a0:3e:c8:e8:49:ce:b2:6c:e1:c1:40:12:
fe:71:d0:7a:28:7a:d3:4c:6a:de:0d:4a:ce:40:3a:
c0:75:34:43:47:6f:9e:f3:a4:61:b0:ab:c3:b0:86:
28:e4:3a:a4:a5:67:c6:59:a3:67:47:72:ca:1f:32:
98:5c:47:1a:40:d8:1c:9d:de:a4:2e:ca:5c:8d:94:
34:34:6d:49:bf:77:f1:a5:9e:ec:38:88:e8:e3:d4:
f0:5b:0d:7a:ad:74:7e:e1:d2:f1:c6:4f:27:b8:f8:
93:6e:2d:b2:86:b3:06:9a:39:4a:d4:d2:b3:43:5d:
d3:2f:53:1b:71:1a:e6:b1:52:ff:f7:97:47:ad:1f:
6b:42:7e:ee:8a:5b:08:43:1e:59:06:ba:25:78:93:
8b:75:3f:b5:30:30:cf:63:02:05:3a:05:42:1d:89:
b8:11:68:99:46:0e:80:cb:a7:1c:a5:f0:e6:0a:ff:
1c:b5:dc:5c:ac:b5:ec:3d:2f:71:9f:96:43:50:9c:
bc:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:EC:62:E1:92:CB:39:65:FE:31:A8:A6:51:96:CF:7E:1F:92:8F:EE
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363263663a3a2f34382d3438203d3e203136393039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:62cf::/48
Signature Algorithm: sha256WithRSAEncryption
11:60:bb:cd:b5:0a:e7:a2:58:99:cc:a0:c0:c1:60:82:78:24:
4f:f7:b4:33:dc:12:83:9a:c4:5c:9b:f3:e1:4f:24:b5:d7:c9:
87:f0:f5:4f:08:b0:fb:ef:a0:ec:28:d5:6d:97:5b:24:99:75:
dc:8f:81:12:57:c6:7d:e8:e4:86:66:10:22:1f:b5:11:38:50:
64:75:57:ed:83:52:99:68:8a:87:8a:c3:b9:e2:20:3f:49:e1:
8f:3c:1c:da:4e:98:21:05:9d:b4:60:a2:c5:c5:f5:1b:6c:53:
2d:05:e4:aa:2c:75:d6:78:80:68:2d:6a:6c:0c:28:73:fb:be:
da:62:fd:e6:2e:8d:b7:ca:9c:be:53:48:69:cd:00:12:21:93:
0c:a9:48:fe:d4:cf:4f:c1:2c:20:59:87:26:0c:54:cb:b1:14:
e5:de:cb:6f:8e:fa:f2:c3:6d:4b:65:7b:a8:ec:85:07:3c:97:
fd:db:73:31:e8:cb:55:ce:88:fc:65:e5:c8:b0:fc:f5:6f:06:
f5:ca:66:9b:bd:f3:72:c4:ca:fc:d7:60:e4:e7:c0:44:68:47:
32:e4:ff:74:39:2f:cc:75:aa:96:53:f0:77:32:de:12:16:21:
b7:8f:83:73:9b:7a:b8:2f:b8:29:f2:75:c2:f6:ad:f9:22:b6:
54:cd:d3:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 04:57:17 2025 by rpki-client