Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363638313a3a2f34382d3438203d3e203136393039.roa
File: 326131343a373538343a363638313a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier: VUyiBsbPiCy9NzGOKTrvMa9k9hppbuRQPK9ReDqEiBM=
Subject key identifier: 68:F5:1A:39:5C:3C:15:B0:0B:D8:D3:3E:BF:49:EF:4F:F2:F5:68:F7
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 04107592FB52647F23273EA5E06A58721E885E99
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363638313a3a2f34382d3438203d3e203136393039.roa
Signing time: Sat 31 May 2025 13:57:38 +0000
ROA not before: Sat 31 May 2025 13:52:38 +0000
ROA not after: Sat 30 May 2026 13:57:38 +0000
asID: 16909
IP address blocks: 2a14:7584:6681::/48 maxlen: 48
Validation: Failed, certificate revoked on Sat 31 May 2025 17:16:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
04:10:75:92:fb:52:64:7f:23:27:3e:a5:e0:6a:58:72:1e:88:5e:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: May 31 13:52:38 2025 GMT
Not After : May 30 13:57:38 2026 GMT
Subject: CN=68F51A395C3C15B00BD8D33EBF49EF4FF2F568F7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:1e:a5:0c:2a:f3:7e:76:c0:ed:07:52:3a:6d:
b7:df:f0:58:e7:59:5f:49:21:74:1d:e5:70:ed:5d:
c4:f6:29:74:94:2f:ab:34:e4:90:39:0d:74:ff:2c:
52:77:90:e5:30:6e:26:1a:28:ef:47:7c:6d:9e:5b:
93:f9:e2:f7:eb:b7:cf:17:73:5f:e8:22:dd:e8:5e:
c4:92:5b:e9:46:80:8f:2c:05:73:3e:5e:0b:c0:55:
2c:8a:68:0b:11:7c:f3:d5:ce:30:e1:51:ce:5e:13:
4b:89:3c:02:e8:eb:17:3d:cd:8b:39:b0:5d:a0:7e:
fe:32:b9:d2:34:51:2b:bd:32:0d:9a:ad:06:13:55:
b4:e9:02:8a:31:42:3a:b0:1e:9f:94:17:c6:dc:18:
ac:45:a3:e7:af:d5:98:31:d5:6f:99:7b:2b:1d:22:
b8:a0:14:04:ad:96:2e:f2:21:13:22:87:37:46:33:
c4:5c:a1:15:4f:9f:de:39:ce:33:9f:77:3a:d6:90:
02:f3:1d:1f:ac:93:5e:23:b8:fe:2c:49:e6:5e:2d:
fc:25:4d:da:2e:c2:57:e3:6f:2b:69:a8:81:3c:bd:
8b:65:cc:cf:4e:f3:c6:8c:73:e4:86:f5:65:86:03:
e8:1a:0f:a0:17:ee:ce:48:a6:fd:a7:13:e8:7e:5a:
90:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:F5:1A:39:5C:3C:15:B0:0B:D8:D3:3E:BF:49:EF:4F:F2:F5:68:F7
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363638313a3a2f34382d3438203d3e203136393039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:6681::/48
Signature Algorithm: sha256WithRSAEncryption
71:9e:9a:a9:39:6f:fc:9d:46:c5:1c:91:eb:9b:0a:64:d5:aa:
24:51:d8:b4:e7:8d:54:94:91:59:cd:63:37:51:67:15:83:b5:
93:40:a2:98:0d:b7:90:47:6d:7b:26:d6:a6:ed:4a:a2:bf:f1:
9b:4c:4b:68:c9:ec:09:f5:be:7c:d6:c3:e9:ea:95:1c:04:f6:
24:ec:1c:ab:6e:2a:cd:d2:ae:96:3d:86:f4:a1:eb:70:2d:5e:
0e:16:66:2c:a8:8c:f2:48:df:5e:11:b0:92:4f:f2:0d:8f:85:
e8:08:39:c8:82:b9:6d:93:55:80:f4:19:df:66:f2:3f:dc:48:
97:21:4f:26:db:bc:5b:21:68:6a:f0:cb:36:8f:63:26:fd:10:
3c:6f:8d:a9:ca:d5:3c:75:de:e0:28:9c:62:f4:09:5e:54:0c:
40:89:7b:86:07:06:48:cd:24:03:3a:cd:f6:0e:66:56:6b:dd:
df:8e:70:b1:d9:59:01:e2:cc:de:7d:1d:b9:d9:53:8e:30:b7:
85:cf:e3:92:3d:e5:9a:ea:21:a8:74:91:2c:f1:a0:01:bc:d8:
19:04:c9:26:3a:79:ac:46:55:35:66:20:8b:a7:dd:e9:9a:da:
36:9f:60:4e:86:3b:3f:6b:c2:c3:ed:5a:fa:b1:d6:f2:0a:ed:
bc:ba:02:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 14:48:30 2025 by rpki-client