Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363333343a3a2f34382d3438203d3e203136393039.roa
File: 326131343a373538343a363333343a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier: A0j7d/OnRM8z7oAX7q3ETA4DuxmNwM1p2en0CoEi408=
Subject key identifier: 6A:35:6F:D5:B8:2F:72:01:82:A2:0F:61:88:BE:68:95:0A:2C:8B:84
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 4237ED94A4756D31150AB3E84DDF4BEE2CE86341
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363333343a3a2f34382d3438203d3e203136393039.roa
Signing time: Wed 21 May 2025 09:18:01 +0000
ROA not before: Wed 21 May 2025 09:13:01 +0000
ROA not after: Wed 20 May 2026 09:18:01 +0000
asID: 16909
IP address blocks: 2a14:7584:6334::/48 maxlen: 48
Validation: Failed, certificate revoked on Sat 24 May 2025 06:06:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
42:37:ed:94:a4:75:6d:31:15:0a:b3:e8:4d:df:4b:ee:2c:e8:63:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: May 21 09:13:01 2025 GMT
Not After : May 20 09:18:01 2026 GMT
Subject: CN=6A356FD5B82F720182A20F6188BE68950A2C8B84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:93:f1:a2:19:46:5f:b5:1d:e8:75:07:0a:cd:
fd:42:59:0c:df:53:4a:94:77:c5:fb:c4:93:c6:9e:
af:c9:ab:75:e6:b7:09:99:79:73:e7:0d:f4:bd:4e:
ba:1d:12:0a:24:8f:79:41:6a:07:5b:f6:5e:83:ad:
71:10:a0:e8:c6:74:e0:12:49:94:87:1c:5c:1b:ee:
af:8e:56:25:5d:0d:04:30:1d:c8:66:f5:e3:47:ee:
f5:d5:48:e7:6c:3e:4d:2e:ff:21:35:dd:4c:b9:58:
b8:71:2d:74:bc:2c:c8:05:d2:8a:62:15:7e:13:65:
90:f1:6c:76:14:cf:06:0d:39:a8:e9:34:1d:1c:cf:
87:c8:b8:32:67:42:0a:bd:a8:26:ec:fa:63:bd:2b:
90:4e:35:94:c5:32:07:db:48:12:84:35:7d:2d:9d:
5f:06:3b:33:c0:65:1c:03:88:7e:a5:e1:96:0c:74:
ea:0a:03:07:10:72:be:ba:f7:33:cd:eb:39:f6:1c:
22:96:78:4f:72:46:bb:42:4e:88:76:c1:5c:10:c6:
00:19:57:5b:f1:0a:23:0d:ff:10:0a:12:38:ea:e8:
5b:30:e7:ef:6a:3e:83:77:66:a1:ab:b0:d1:46:1d:
4d:7d:95:26:c8:5c:e1:49:3b:03:ab:62:06:e2:6a:
ef:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:35:6F:D5:B8:2F:72:01:82:A2:0F:61:88:BE:68:95:0A:2C:8B:84
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363333343a3a2f34382d3438203d3e203136393039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:6334::/48
Signature Algorithm: sha256WithRSAEncryption
15:f2:29:80:59:c6:ef:ab:40:88:d1:cd:98:af:1c:cd:35:b9:
36:6e:71:32:29:cc:0b:b1:0a:d6:d0:97:40:22:d5:3e:eb:65:
d1:40:b5:7b:17:9f:ab:37:03:11:9a:a6:31:77:3e:0d:09:45:
f6:8f:93:94:76:d5:f1:b9:a6:ee:c1:84:68:6c:fb:19:01:83:
ed:c8:03:8c:09:4b:2b:ac:80:88:5e:32:ba:b9:a8:db:e2:15:
67:04:7e:0a:44:85:f8:3a:2f:5f:b1:6b:a1:8c:94:f6:82:c6:
51:a4:cd:93:83:e6:96:52:af:78:9b:bd:d8:cf:d3:29:29:52:
c1:76:0d:b0:93:61:a6:89:dc:8d:30:0f:ea:72:95:08:89:b1:
c0:14:f3:81:8d:9a:30:9b:99:59:dc:2a:03:17:10:f3:f0:12:
e7:d2:e4:cf:15:11:43:52:a2:5e:74:07:e3:96:7e:35:4c:ed:
92:c5:b8:a0:3a:50:ad:f2:b6:1c:af:91:a8:10:be:31:2a:d5:
80:3c:ca:0f:07:4e:ec:d3:29:10:7e:83:13:13:10:81:f1:af:
89:13:cc:55:7f:dd:b4:89:15:a6:58:17:53:4a:18:26:63:32:
e1:ab:0e:2e:a8:6a:6e:23:93:61:cf:82:f9:25:9d:4a:34:17:
91:35:6e:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 07:37:37 2025 by rpki-client