Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363331393a3a2f34382d3438203d3e203136393039.roa
File: 326131343a373538343a363331393a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier: U0uDGXJ5iFpYPgdgteODpPek4FAAaXxeHakT6s72yWI=
Subject key identifier: EB:71:A8:F1:60:C6:22:5B:E9:DB:1E:A7:10:F9:04:52:42:C5:57:F2
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 0B58E56448A9660C5522CDB5F0003429BC2F7355
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363331393a3a2f34382d3438203d3e203136393039.roa
Signing time: Tue 20 May 2025 02:00:02 +0000
ROA not before: Tue 20 May 2025 01:55:02 +0000
ROA not after: Tue 19 May 2026 02:00:02 +0000
asID: 16909
IP address blocks: 2a14:7584:6319::/48 maxlen: 48
Validation: Failed, certificate revoked on Fri 23 May 2025 05:06:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0b:58:e5:64:48:a9:66:0c:55:22:cd:b5:f0:00:34:29:bc:2f:73:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: May 20 01:55:02 2025 GMT
Not After : May 19 02:00:02 2026 GMT
Subject: CN=EB71A8F160C6225BE9DB1EA710F9045242C557F2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:6f:eb:52:24:0b:22:94:ad:0f:aa:0b:da:fb:
5f:9d:1c:e9:57:41:03:40:6a:3e:64:66:9d:6a:b2:
ea:f4:d1:ec:32:d2:b6:59:bc:84:e1:c5:ab:c6:23:
78:64:94:06:48:95:e5:e9:8d:17:8a:fc:d4:52:3e:
b3:23:d4:99:ad:1c:ad:37:c5:a4:fc:45:f2:21:3e:
11:73:26:dc:4c:ed:3b:9a:4d:74:ce:be:91:f7:6e:
8b:f7:8f:05:91:b0:7f:ca:d4:36:d6:ab:e5:36:1b:
4e:cb:b7:80:e4:c6:f3:bc:47:d8:ab:ec:84:7f:e2:
25:bc:2c:e7:4c:4b:80:60:b4:de:c9:4b:0d:88:76:
d2:37:2b:13:95:14:4f:19:56:66:06:a0:42:98:30:
dd:da:e4:75:c5:13:1a:de:de:cd:ce:7e:2b:59:da:
eb:ee:97:c3:b6:28:e2:4a:60:53:1d:c1:6f:34:58:
dd:b0:a8:33:aa:83:8f:80:4c:a8:76:65:7d:77:e7:
88:34:c9:8c:73:d8:c5:6a:9d:08:db:d3:43:4b:88:
0e:15:be:25:45:b1:89:b4:21:cc:f6:b9:bc:4f:94:
65:3f:3c:57:79:f7:82:31:a2:8e:1f:ea:83:85:c5:
78:43:09:d9:f3:2a:e7:ac:49:dd:26:49:a1:3e:29:
8e:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:71:A8:F1:60:C6:22:5B:E9:DB:1E:A7:10:F9:04:52:42:C5:57:F2
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363331393a3a2f34382d3438203d3e203136393039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:6319::/48
Signature Algorithm: sha256WithRSAEncryption
39:ff:39:88:61:d3:ef:d4:c8:cc:de:11:25:d9:62:be:64:a5:
46:72:06:ef:c3:32:35:bc:65:cb:6c:be:e8:00:e0:0b:0a:05:
00:01:e3:87:0d:af:36:56:48:53:44:72:aa:91:bb:ce:f8:33:
52:ac:01:1e:4b:8f:2c:d0:58:e1:a4:bd:e3:99:69:85:03:bb:
e7:d2:66:75:2b:78:d8:92:64:21:22:c2:cb:19:c4:c7:42:a4:
29:21:6e:96:f0:b3:c5:07:05:1b:39:d1:4c:d3:2a:b1:7c:ad:
46:76:16:ec:8f:8d:aa:e6:e9:47:20:79:e1:45:22:8f:fe:63:
1c:1e:d6:65:6a:30:87:34:0f:ff:2e:f3:87:18:e3:26:16:8e:
ef:ae:fd:59:c3:4e:71:26:dc:b9:39:c0:1a:b4:dc:5b:0c:ed:
c0:0f:a7:63:3c:4a:c5:f9:ee:40:83:89:6c:fb:0f:d7:33:e9:
04:5c:14:c2:c4:70:df:0f:f5:84:ff:ba:dc:2a:7a:6d:e3:59:
fb:05:b4:ff:60:2f:1e:1c:fd:b0:ab:5e:b0:ac:d0:1f:99:00:
39:c9:62:7d:da:63:89:de:b6:65:1a:e7:74:e1:b1:42:0b:f1:
6a:25:c4:72:86:ac:ee:58:e1:15:9d:8d:20:67:d6:a5:e2:9e:
5a:57:e0:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 06:12:19 2025 by rpki-client