Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363265393a3a2f34382d3438203d3e203136393039.roa
File: 326131343a373538343a363265393a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier: +4AtQ9cr4AkctDQvi8zZpFPt0errt6YLdvrYGSje5eM=
Subject key identifier: 2D:BD:35:F0:8B:7E:AF:0F:43:01:E7:79:41:B4:FB:B4:1C:FC:45:B8
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 6C73A6049A81F37CDCFE5DBE15A9F0CF981F2223
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363265393a3a2f34382d3438203d3e203136393039.roa
Signing time: Sun 18 May 2025 22:54:02 +0000
ROA not before: Sun 18 May 2025 22:49:02 +0000
ROA not after: Sun 17 May 2026 22:54:02 +0000
asID: 16909
IP address blocks: 2a14:7584:62e9::/48 maxlen: 48
Validation: Failed, certificate revoked on Tue 20 May 2025 07:18:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6c:73:a6:04:9a:81:f3:7c:dc:fe:5d:be:15:a9:f0:cf:98:1f:22:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: May 18 22:49:02 2025 GMT
Not After : May 17 22:54:02 2026 GMT
Subject: CN=2DBD35F08B7EAF0F4301E77941B4FBB41CFC45B8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:b9:9e:b0:d5:3c:2f:7e:d8:8b:7e:8d:82:f9:
53:e6:0e:5c:f1:ef:31:ed:5c:62:7c:1f:4d:70:1f:
b1:f3:5f:ff:7c:9b:21:f3:b0:d7:26:a1:8b:a6:6c:
ff:7b:b6:a8:e2:5d:d0:ef:47:30:5f:a8:b7:42:c1:
a2:66:4e:05:fd:a6:14:df:b1:ea:e1:a5:7c:e7:e9:
48:bf:b5:56:65:60:05:a7:1c:17:8c:27:2c:45:2f:
84:03:74:77:6d:3b:2a:44:c6:30:2f:f0:a5:f7:80:
8f:d2:f6:c6:a1:14:87:35:99:39:b7:ef:9c:6a:13:
de:5f:ad:78:a3:49:37:ee:4f:0f:ac:03:41:27:50:
07:16:b4:1c:e6:da:b3:d9:99:e1:4a:5f:4b:e1:f9:
2f:37:04:94:bc:12:ea:9e:48:ce:22:98:60:e2:c4:
88:6f:86:94:bc:d2:56:82:c7:8c:00:9e:eb:a5:36:
d9:50:07:e1:15:3f:a2:a8:42:6d:72:85:f9:1d:6d:
fa:8f:27:06:5e:1d:e0:d5:92:36:88:12:09:8b:c3:
e6:b7:64:f3:1d:13:72:fb:a1:e7:ef:00:03:fc:cd:
59:e7:3b:f0:ab:e3:2b:5c:ca:ba:08:17:89:52:f6:
37:39:0a:18:2f:db:2f:2c:99:2a:6f:c8:f1:33:33:
1b:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:BD:35:F0:8B:7E:AF:0F:43:01:E7:79:41:B4:FB:B4:1C:FC:45:B8
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363265393a3a2f34382d3438203d3e203136393039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:62e9::/48
Signature Algorithm: sha256WithRSAEncryption
0a:65:74:69:f8:ef:14:e0:13:34:b4:46:eb:14:c3:b1:b6:7b:
68:14:35:06:13:10:46:69:26:1b:91:ee:7f:e7:b8:fb:f8:15:
ef:52:c5:bf:b7:31:dd:87:3a:e8:78:03:8d:d1:29:50:c8:9b:
00:b6:6e:f6:45:03:54:78:be:7e:ae:99:b1:d8:53:28:56:dd:
27:aa:e9:29:40:98:5d:19:f9:fc:ca:c0:a5:f6:7e:54:57:48:
42:f0:94:5b:7c:b9:0e:c4:e7:85:75:fa:b8:14:75:ef:6a:dd:
83:a1:4c:78:bb:42:e2:7a:18:b6:02:a9:e9:c3:67:bc:07:ec:
9d:91:eb:64:e3:38:59:db:04:fe:33:02:a3:bb:ab:ed:97:e8:
7f:a9:d7:48:d0:dd:23:50:0f:53:96:a6:6b:f5:89:35:00:ed:
82:18:8e:40:3a:47:e0:ef:1c:42:7e:84:18:66:b2:61:51:47:
ae:0e:00:bb:19:92:17:af:e2:0e:ae:2b:6b:9f:c9:93:3a:80:
e9:a0:26:60:94:62:69:9b:8c:d4:14:6d:6d:a5:92:16:29:f5:
36:92:3e:09:92:b1:46:82:6e:ed:8a:58:f4:63:d6:a1:16:c7:
4a:13:e0:dd:69:37:cf:f1:0a:86:fb:e2:94:09:16:e9:8f:5b:
fe:82:64:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 07:41:52 2025 by rpki-client