Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363836633a3a2f34382d3438203d3e203136393039.roa
File: 326131343a373538343a363836633a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier: qY0sPHIvhNDKhK0gVjVM22CmQRquFoeyMqOTAYMK4d4=
Subject key identifier: 3D:63:C8:A2:A3:AC:C8:D5:47:0B:AC:DF:F4:17:89:C5:CD:D9:33:F0
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 64CD2B0E03B27D2DDA07F005280F99B06555DB73
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363836633a3a2f34382d3438203d3e203136393039.roa
Signing time: Sat 31 May 2025 13:57:38 +0000
ROA not before: Sat 31 May 2025 13:52:38 +0000
ROA not after: Sat 30 May 2026 13:57:38 +0000
asID: 16909
IP address blocks: 2a14:7584:686c::/48 maxlen: 48
Validation: Failed, certificate revoked on Sat 31 May 2025 17:16:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
64:cd:2b:0e:03:b2:7d:2d:da:07:f0:05:28:0f:99:b0:65:55:db:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: May 31 13:52:38 2025 GMT
Not After : May 30 13:57:38 2026 GMT
Subject: CN=3D63C8A2A3ACC8D5470BACDFF41789C5CDD933F0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:06:40:ad:15:6a:4d:f1:6e:17:ad:8d:f4:9e:
09:75:bc:da:10:55:2c:2e:89:a0:6c:b7:51:e3:75:
28:11:c5:74:8d:f0:fd:c3:23:61:c9:21:e3:2f:9f:
f4:20:b1:b5:11:9c:3c:c5:44:93:95:80:95:2b:04:
23:07:84:36:42:77:b8:4b:75:16:b5:f5:df:4d:10:
23:a0:d4:80:2e:fc:79:a6:45:87:8a:2c:3f:f2:63:
e5:c5:38:e2:1d:a1:e6:fa:81:5b:f5:94:9c:bf:1b:
08:3b:40:08:7c:1b:48:df:e3:b9:04:21:29:ee:f4:
74:0f:b0:dc:66:ed:16:41:06:71:fe:58:ac:2f:e9:
6d:dc:eb:80:42:3f:c5:6a:7b:ab:08:6c:67:84:37:
c5:44:cb:73:7a:15:a9:ba:30:6d:80:ef:f9:15:65:
cc:b9:59:f1:18:cf:10:09:c3:68:05:5f:6d:17:09:
a1:67:46:35:c6:de:48:5a:0f:dd:79:ad:2d:1b:60:
35:89:8b:a5:e7:09:bf:16:32:1d:2d:25:51:a4:09:
70:e0:aa:30:76:33:79:7a:f5:a5:c1:ac:16:2f:87:
f0:64:7f:d2:43:f6:34:55:84:57:40:0d:58:6f:0d:
9c:4c:89:72:6c:84:a1:b7:d3:59:64:e6:b3:04:44:
66:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:63:C8:A2:A3:AC:C8:D5:47:0B:AC:DF:F4:17:89:C5:CD:D9:33:F0
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363836633a3a2f34382d3438203d3e203136393039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:686c::/48
Signature Algorithm: sha256WithRSAEncryption
28:dd:cd:47:eb:09:b5:65:a5:58:1f:d4:b7:b5:f4:02:8e:db:
df:aa:39:bb:ef:2b:96:bd:96:a6:d0:70:d2:f0:48:ad:34:44:
c3:c3:b4:28:83:41:0a:e0:7c:b9:8e:af:a6:bc:0b:b2:46:14:
48:d2:c3:4e:ab:74:58:1b:c9:b6:b3:f2:c1:14:2d:f4:37:07:
7b:8c:01:fd:82:33:3c:49:9a:23:00:e1:5f:de:00:e7:90:bb:
8a:0a:8e:b0:79:f6:9d:0d:57:4f:14:09:a9:cc:c9:69:16:64:
d2:1e:59:a5:e7:11:bc:b8:13:f0:7e:cd:18:61:37:0e:8a:c9:
47:c5:a6:bc:25:c3:83:27:60:7b:34:1e:3b:af:99:14:ef:e1:
01:5a:8a:94:0f:97:38:dc:59:7f:19:11:59:7b:78:74:9d:f3:
a2:a0:99:28:60:eb:b0:3e:ec:2f:46:0c:a6:c5:55:c1:d1:8f:
32:7f:be:d3:ae:ea:6e:37:08:c9:e3:9d:e3:4a:9f:8f:0e:1c:
5b:b4:b4:64:aa:9f:16:65:3a:74:5e:02:ee:6d:75:d3:9f:ca:
46:47:04:10:6d:5b:6a:3d:71:be:fc:5e:23:46:95:04:88:13:
5b:bb:7b:a6:df:b4:fe:e8:34:3e:6c:26:f9:72:d8:b7:5b:f5:
e5:67:5c:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 04:18:33 2025 by rpki-client