Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363666613a3a2f34382d3438203d3e203136393039.roa
File: 326131343a373538343a363666613a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier: 0I0z9gu63Rlwg/ocp5nZTYDbSx7licEauMgfsI0iEjE=
Subject key identifier: D3:E8:82:83:E0:9A:0E:38:45:CF:3C:A2:11:C6:C4:14:3F:3E:A1:CB
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 6EACF0C0248B0B0A914C8D96E00956EFAF11DDF8
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363666613a3a2f34382d3438203d3e203136393039.roa
Signing time: Sun 25 May 2025 22:06:02 +0000
ROA not before: Sun 25 May 2025 22:01:02 +0000
ROA not after: Sun 24 May 2026 22:06:02 +0000
asID: 16909
IP address blocks: 2a14:7584:66fa::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 28 May 2025 15:18:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6e:ac:f0:c0:24:8b:0b:0a:91:4c:8d:96:e0:09:56:ef:af:11:dd:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: May 25 22:01:02 2025 GMT
Not After : May 24 22:06:02 2026 GMT
Subject: CN=D3E88283E09A0E3845CF3CA211C6C4143F3EA1CB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:28:c8:e0:21:6c:e3:d1:a7:cd:1b:cf:10:71:
83:91:b7:ef:4f:8f:89:6d:73:14:d2:fd:e2:fa:89:
6f:40:6f:64:07:72:65:97:44:a6:06:d1:1f:e5:3f:
41:86:a9:32:e3:9a:5b:e6:0a:7e:b9:96:93:cd:24:
ce:e9:8a:b0:89:d0:77:a5:b4:74:e7:05:15:1b:8a:
64:ed:4b:8b:56:f0:d5:dc:c4:03:df:3b:d4:0b:ef:
74:8f:1e:13:fa:76:42:2d:28:f0:68:b6:8f:fe:cd:
e1:f2:be:50:63:47:4d:49:36:1e:14:f7:03:ff:c4:
22:cf:5d:81:7f:09:5d:9c:9a:93:5e:6f:8a:69:c1:
3c:f9:c3:8e:e7:54:78:fd:dc:54:65:9c:0e:e4:a3:
9d:d3:58:0c:ee:15:31:df:f2:ee:f1:71:93:f9:a5:
13:73:ab:80:3d:14:de:38:69:e5:c9:aa:88:e9:bc:
fd:9e:b2:3b:a2:45:ad:c2:a4:e0:d0:a0:d3:9e:87:
6c:96:69:1f:93:af:17:59:7f:14:6b:bd:6a:28:58:
f6:4e:20:57:40:c4:d9:99:05:16:be:bc:cc:05:83:
e0:97:40:2b:e1:9f:2a:0d:73:ff:1a:cf:00:ea:46:
a5:b6:cd:2b:40:a0:22:b7:71:6e:e8:a4:74:91:44:
56:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:E8:82:83:E0:9A:0E:38:45:CF:3C:A2:11:C6:C4:14:3F:3E:A1:CB
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363666613a3a2f34382d3438203d3e203136393039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:66fa::/48
Signature Algorithm: sha256WithRSAEncryption
92:72:3c:5c:5d:3c:da:32:01:df:c3:88:75:0a:22:24:66:1d:
a3:d8:ea:e1:dd:ce:83:28:e2:4b:a6:79:6d:ef:d3:56:0b:bb:
56:40:93:c3:dd:15:97:68:08:43:3b:88:04:d2:f1:73:7a:1f:
17:83:35:87:09:3b:f9:3c:29:f8:86:3b:82:5b:62:03:7e:52:
6b:6b:d3:e9:6b:ae:13:1d:d2:07:f1:57:89:f8:42:d5:3f:a1:
ba:5a:8e:9c:df:00:9d:68:00:02:13:35:43:37:fd:23:b2:cb:
df:ef:86:5b:21:1c:81:f8:7e:c1:11:b5:28:e5:d4:e6:37:b5:
7d:64:30:4c:59:67:0c:b7:b7:c3:8b:56:90:64:54:c5:95:9a:
bc:dd:25:40:0c:63:6c:cb:16:7a:83:7e:38:80:4a:5e:0e:4e:
13:d6:12:18:58:13:b6:da:5c:5f:24:f5:cc:cd:bf:bc:85:16:
ef:27:22:56:a1:05:c7:18:48:56:84:ba:d9:ef:37:d4:e5:18:
c6:75:84:21:c6:b9:8c:43:73:52:cd:57:5c:a8:81:22:81:0e:
31:79:5a:99:77:e9:53:ce:b3:2e:d8:c0:af:5e:97:10:8f:fc:
c3:ec:d5:3f:d0:c5:d1:88:33:0a:9f:a5:7b:fb:cb:5f:91:55:
2c:d3:00:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 06:15:21 2025 by rpki-client