Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363334363a3a2f34382d3438203d3e203136393039.roa
File: 326131343a373538343a363334363a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier: EvMqCSgjSlOEV6n9l3Kqa6VLHnR98Ww1s2qowqWPVKE=
Subject key identifier: 52:C8:E3:8F:A1:30:72:2C:33:4E:F1:43:69:C7:A1:73:1F:3F:6E:F1
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 6CE53B7384468B1A9C666454DEB177B39F52540E
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363334363a3a2f34382d3438203d3e203136393039.roa
Signing time: Thu 22 May 2025 14:54:02 +0000
ROA not before: Thu 22 May 2025 14:49:02 +0000
ROA not after: Thu 21 May 2026 14:54:02 +0000
asID: 16909
IP address blocks: 2a14:7584:6346::/48 maxlen: 48
Validation: Failed, certificate revoked on Fri 23 May 2025 20:36:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6c:e5:3b:73:84:46:8b:1a:9c:66:64:54:de:b1:77:b3:9f:52:54:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: May 22 14:49:02 2025 GMT
Not After : May 21 14:54:02 2026 GMT
Subject: CN=52C8E38FA130722C334EF14369C7A1731F3F6EF1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:64:a2:d1:5b:1b:27:76:e9:8d:10:36:63:ab:
be:aa:ac:73:8d:a9:f7:dd:4a:c2:77:50:e3:f5:ef:
02:79:30:5f:c5:37:13:53:7c:e5:f5:ac:8b:f4:0c:
cf:27:c4:47:88:08:3c:4d:9b:4a:0e:08:bf:8a:9b:
24:d3:a5:55:1c:74:fc:91:92:da:2c:f6:24:d9:67:
33:9e:ea:0c:eb:94:be:47:62:2d:70:77:cd:3c:e8:
01:0b:92:1c:b3:9f:f4:70:47:18:42:b0:7c:7a:a8:
10:16:79:96:5e:53:52:49:43:64:a0:4b:20:ff:25:
c2:ad:2a:b5:2d:10:65:66:0d:9d:42:62:38:21:38:
e3:fb:fc:53:74:07:23:43:06:8d:7b:0b:af:36:4f:
35:af:38:0b:97:34:c1:ba:ad:6f:35:33:5d:27:49:
54:d8:ff:c2:dd:8c:39:ef:ae:a7:ec:aa:df:dc:f0:
21:56:ec:ae:ca:2e:1a:2f:55:ce:12:fc:4e:b8:25:
18:48:b6:d0:f7:47:59:df:85:f8:f2:f2:f3:c5:2f:
a3:ec:ec:04:7b:8b:c2:d6:f0:f7:49:f1:39:06:a2:
fe:e4:f3:d9:17:ae:a4:ea:45:3d:62:e4:9d:11:22:
67:f0:46:cf:d4:89:f6:b4:80:0d:8a:16:13:fb:bd:
b1:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:C8:E3:8F:A1:30:72:2C:33:4E:F1:43:69:C7:A1:73:1F:3F:6E:F1
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363334363a3a2f34382d3438203d3e203136393039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:6346::/48
Signature Algorithm: sha256WithRSAEncryption
71:75:70:97:ab:a0:fd:27:41:2a:2b:30:62:0e:a7:04:e6:1a:
c4:b5:ba:05:95:71:23:19:cf:cb:95:3d:7c:4c:50:61:a5:04:
b7:08:12:6b:85:fd:d7:cb:56:f1:4b:cb:f0:1f:36:31:b7:9a:
c3:ac:b7:b5:3d:b4:2f:d7:ff:29:7e:7e:54:26:da:29:8e:ad:
97:23:88:2e:d5:27:90:f9:12:68:75:ff:dc:7e:9e:c5:29:bd:
05:a6:e9:55:4d:07:16:bf:d0:66:40:09:15:62:bb:2f:aa:61:
1c:1f:a2:86:12:76:ca:a7:21:ff:00:3f:85:c0:8f:ef:c3:14:
b4:15:56:2e:22:1e:9e:6e:68:f6:4b:f3:8f:29:d2:db:af:16:
46:13:15:3a:3d:7a:5e:30:ee:f3:39:ef:c4:4a:42:c3:6b:a6:
34:0c:66:bb:a0:ab:4a:b7:f6:e9:b8:e7:c1:8e:a5:ec:7a:13:
58:d8:06:60:9c:00:6c:1a:f8:35:11:51:2c:72:06:87:ee:34:
93:c9:c7:a6:0d:73:86:ff:d8:ab:b0:57:3d:8b:88:f3:a4:f9:
ca:70:51:f8:da:d8:4a:35:a2:56:dd:20:94:6b:5e:19:cc:f2:
3c:71:0b:6c:9a:7d:a3:ec:7b:32:10:98:f3:f0:b4:63:a4:51:
6f:d9:30:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 16:42:34 2025 by rpki-client