Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363636613a3a2f34382d3438203d3e203136393039.roa
File: 326131343a373538343a363636613a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier: gguqFWngULgep3Z2TFKZI77Cc6wXI1qfuTL7ihJSmTc=
Subject key identifier: CB:FA:99:31:5B:18:F8:C2:BC:2A:3E:D6:55:50:39:9E:C1:BA:0F:C1
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 315F65F2B99709915E3285176E828632FCD564AD
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363636613a3a2f34382d3438203d3e203136393039.roa
Signing time: Thu 29 May 2025 10:36:01 +0000
ROA not before: Thu 29 May 2025 10:31:01 +0000
ROA not after: Thu 28 May 2026 10:36:01 +0000
asID: 16909
IP address blocks: 2a14:7584:666a::/48 maxlen: 48
Validation: Failed, certificate revoked on Sat 31 May 2025 17:16:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
31:5f:65:f2:b9:97:09:91:5e:32:85:17:6e:82:86:32:fc:d5:64:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: May 29 10:31:01 2025 GMT
Not After : May 28 10:36:01 2026 GMT
Subject: CN=CBFA99315B18F8C2BC2A3ED65550399EC1BA0FC1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:d0:5e:94:1b:e1:58:6a:aa:cd:93:f2:b4:6c:
8a:c8:82:e4:79:ad:a2:93:37:1d:0c:e0:c2:5d:6c:
3a:e5:64:04:bc:03:99:87:bb:32:f1:2b:33:72:df:
53:76:0a:c6:ff:de:48:b9:44:99:69:17:8e:06:1a:
2d:9b:60:51:21:ee:e2:5c:c7:61:38:8e:c6:13:76:
f9:8a:34:69:99:f3:2e:13:42:40:d8:c9:fe:70:97:
37:44:04:b6:66:e6:27:79:d2:09:ba:f5:f3:28:bf:
c2:b1:5e:6b:44:b5:df:10:a7:e2:e7:e0:43:bb:61:
18:66:53:a0:eb:3c:6c:34:80:61:0a:b8:14:ee:83:
24:1f:dc:ed:e8:be:d0:9e:e3:49:9d:4a:f5:9a:8e:
08:26:48:54:2a:b0:41:b3:a3:4a:fc:58:91:c4:80:
cf:73:bc:28:99:9c:82:d3:03:82:c3:f0:4b:d7:ee:
59:7b:b8:6a:82:a9:f2:7e:3a:27:f3:d6:14:92:e1:
b1:4d:75:e7:b0:88:f2:5f:12:59:3a:6d:be:22:f7:
05:03:f4:99:73:2a:1d:d9:6c:34:49:1c:d8:fb:11:
63:5d:37:30:c2:35:f3:70:24:44:c8:75:ca:ea:55:
1f:29:9c:55:b1:18:3c:81:f9:c8:12:8f:df:3f:16:
4c:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:FA:99:31:5B:18:F8:C2:BC:2A:3E:D6:55:50:39:9E:C1:BA:0F:C1
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363636613a3a2f34382d3438203d3e203136393039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:666a::/48
Signature Algorithm: sha256WithRSAEncryption
18:14:77:f5:6e:52:28:d9:66:47:10:99:2e:0b:c0:6b:39:2a:
6c:47:1c:50:44:50:9c:39:f4:21:5a:9c:85:a7:44:9f:c0:67:
4e:bb:4b:11:2f:09:6e:fa:2c:33:40:d5:e6:74:c9:a5:c8:2a:
08:c0:1a:d9:20:1a:c9:ef:b0:7a:34:cf:44:9b:bb:92:d0:1e:
f4:44:c0:4c:28:24:e0:06:34:0a:b9:d2:e2:b8:f2:a8:4d:d5:
4a:96:d3:86:6e:32:71:67:9b:f4:74:fa:34:5b:6a:51:ce:a8:
1f:84:6d:23:ce:31:47:69:45:49:f0:f9:65:20:35:1c:22:df:
bc:2f:f1:3b:6e:96:48:3e:b3:18:76:42:06:38:13:85:e0:fa:
8f:af:39:09:71:ce:cb:65:0a:c6:8b:0d:4b:27:3f:d3:89:dd:
7a:85:a2:6e:d6:09:20:02:c2:8a:10:92:9d:be:92:d4:6f:51:
ee:2b:2a:37:49:45:ed:a5:fc:b0:39:f7:93:37:2c:19:38:a2:
34:7d:c5:fc:f4:ff:bb:26:11:c0:64:1f:57:1a:a4:d8:7d:b5:
3a:b0:dc:0e:05:31:bc:3f:00:5d:59:57:32:2b:0f:33:3a:31:
bd:28:9e:4f:fd:5a:b7:04:93:b2:64:22:6d:1b:0c:9d:48:f5:
7b:66:d5:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 06:05:34 2025 by rpki-client