Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363333313a3a2f34382d3438203d3e203136393039.roa
File: 326131343a373538343a363333313a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier: SYIEBnDFOq0GjebAQ2gQfhkfvmoFJ87eSEuw5DuDtsg=
Subject key identifier: A6:AD:EA:01:DF:89:E6:3B:36:C2:63:00:3D:B8:0C:08:3A:84:4F:1D
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 64CFB2E59E055E81006FFA58FDCF710A7B685A6B
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363333313a3a2f34382d3438203d3e203136393039.roa
Signing time: Wed 21 May 2025 03:54:03 +0000
ROA not before: Wed 21 May 2025 03:49:03 +0000
ROA not after: Wed 20 May 2026 03:54:03 +0000
asID: 16909
IP address blocks: 2a14:7584:6331::/48 maxlen: 48
Validation: Failed, certificate revoked on Fri 23 May 2025 13:06:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
64:cf:b2:e5:9e:05:5e:81:00:6f:fa:58:fd:cf:71:0a:7b:68:5a:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: May 21 03:49:03 2025 GMT
Not After : May 20 03:54:03 2026 GMT
Subject: CN=A6ADEA01DF89E63B36C263003DB80C083A844F1D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:fe:35:26:c9:0a:40:63:3a:d6:75:03:ca:ad:
c8:3f:1d:24:34:9c:1b:8d:ab:f9:ab:e4:29:1e:ac:
22:a1:ae:8e:0a:b2:1b:7c:ea:3f:2f:97:f7:16:08:
80:4a:c6:82:e1:0d:bf:3e:37:ee:62:28:0c:ab:6b:
b0:d3:2a:42:e5:c1:b3:6e:9e:59:61:ba:ff:45:d4:
a2:03:c3:06:ba:a6:99:66:f5:e4:5b:3c:34:fd:3d:
76:e0:b5:16:5d:75:5d:9b:95:0b:dd:95:25:7a:fc:
ef:78:c5:9c:98:ba:86:a9:91:03:22:73:1f:7c:f0:
ce:17:24:ca:17:13:2d:d3:17:c4:e5:4a:fe:36:9c:
1c:87:59:5b:6e:81:cf:d6:8f:15:4b:60:9e:55:e2:
6d:9c:44:b6:d0:59:3c:7e:c2:39:38:d0:74:c1:75:
d2:98:c4:28:fb:c1:da:b2:fa:dd:51:fc:d7:fe:cf:
95:f7:8f:cf:c0:d3:cd:a2:5e:65:ef:22:be:8e:4d:
13:80:8e:4d:e2:9c:18:29:fc:a6:fc:e1:25:fc:32:
a0:9a:bd:34:b1:f6:1f:b1:04:ed:15:98:e2:af:b5:
10:89:2f:d7:6a:94:7a:27:e2:e3:8c:68:bf:0b:5d:
07:74:f7:d8:1d:e1:a5:6c:8c:1f:3b:c6:95:9a:e1:
06:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:AD:EA:01:DF:89:E6:3B:36:C2:63:00:3D:B8:0C:08:3A:84:4F:1D
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363333313a3a2f34382d3438203d3e203136393039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:6331::/48
Signature Algorithm: sha256WithRSAEncryption
0c:d4:3f:f1:b5:de:3c:f5:97:ef:2e:0e:bc:85:16:d3:87:21:
ef:20:0d:6b:8e:92:8e:3c:f7:19:fd:ab:41:10:11:7d:a6:08:
38:8e:1f:89:45:0a:d6:f8:51:75:a4:cf:f6:58:63:8a:96:71:
db:75:93:2d:6c:62:e6:d9:5d:e2:f4:46:7f:0e:66:3b:80:5a:
df:77:d0:75:4c:fd:1b:86:43:c5:b9:19:36:52:ca:a5:09:f1:
24:46:5c:4f:c4:37:95:a7:4d:88:26:a7:4b:5a:a6:68:62:50:
2d:07:0e:c1:65:42:2a:51:2e:4e:fb:04:9c:6e:3d:ee:51:a8:
00:e8:e0:db:7a:63:8e:f0:d4:02:04:e2:6b:5c:70:34:39:36:
ed:6f:43:6e:df:62:c5:11:23:5b:27:5c:63:67:d4:02:f1:e0:
32:a3:bb:1a:34:dd:00:f2:ea:07:80:2e:2d:bf:a9:a5:1a:6a:
36:3b:3b:17:0c:90:8d:52:58:94:a7:30:a6:60:3d:e5:c6:c1:
91:36:d9:37:20:3a:10:17:43:02:e1:73:ee:b9:9c:8e:d7:47:
61:c0:0c:5c:1e:70:fe:8d:a7:46:28:6f:fe:c3:ce:49:f8:58:
c5:8c:39:99:c0:44:0b:ef:96:1c:fb:c8:29:b4:4f:9a:72:b2:
fb:a6:b8:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 05:58:25 2025 by rpki-client