Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363837313a3a2f34382d3438203d3e203136393039.roa
File: 326131343a373538343a363837313a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier: G9L9jmawomFrpfNOxPWoTmmVTtjBVpJlyqB033Tpu/8=
Subject key identifier: E7:26:83:C9:65:FC:62:62:07:86:D3:BA:3E:55:E0:85:43:42:4B:B8
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 07D8AF8EB84B64FE3E04CD0224094437A68840E4
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363837313a3a2f34382d3438203d3e203136393039.roa
Signing time: Sun 25 May 2025 05:54:01 +0000
ROA not before: Sun 25 May 2025 05:49:01 +0000
ROA not after: Sun 24 May 2026 05:54:01 +0000
asID: 16909
IP address blocks: 2a14:7584:6871::/48 maxlen: 48
Validation: Failed, certificate revoked on Tue 27 May 2025 06:30:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
07:d8:af:8e:b8:4b:64:fe:3e:04:cd:02:24:09:44:37:a6:88:40:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: May 25 05:49:01 2025 GMT
Not After : May 24 05:54:01 2026 GMT
Subject: CN=E72683C965FC62620786D3BA3E55E08543424BB8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:52:c8:d4:b1:e5:aa:a6:be:f5:11:de:53:ba:
5d:7b:6d:a0:25:78:b8:24:99:ca:fb:7a:52:6c:29:
97:e8:6f:17:9f:98:16:78:21:a7:3d:1c:00:9c:3a:
0a:0a:74:a3:b5:15:8c:8c:4d:31:11:94:b8:3b:fb:
8d:fc:91:52:b3:fa:10:d0:c3:8c:a4:39:7f:78:d8:
fa:7b:3e:73:14:ec:7e:45:b0:54:6e:cc:f8:61:78:
73:64:f1:52:43:ce:9d:f4:89:20:85:32:1c:4f:04:
2d:8b:a9:66:f0:ab:df:ef:48:6c:ea:38:47:9b:58:
03:94:55:3c:49:88:13:cb:e3:94:9a:08:55:c3:78:
c3:5d:d7:62:ea:70:9a:17:22:ab:44:e8:9e:34:97:
0d:a8:67:9c:3f:9a:08:c1:5e:c1:9e:76:e4:64:0b:
f6:f8:ef:51:50:72:c9:02:06:e1:da:8a:9b:d8:1a:
cf:86:e4:1b:8e:e4:03:da:d3:10:6f:15:d4:35:15:
e1:d5:06:40:f9:49:12:7a:2c:d8:9b:16:15:8c:12:
ea:55:64:db:45:3b:08:bd:03:31:b2:fa:12:c5:23:
d3:2e:b2:52:c5:d1:b8:89:b6:ed:97:72:4d:3c:c0:
ee:bb:0f:64:dd:72:b4:6c:30:12:6c:65:ba:5a:40:
43:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:26:83:C9:65:FC:62:62:07:86:D3:BA:3E:55:E0:85:43:42:4B:B8
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363837313a3a2f34382d3438203d3e203136393039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:6871::/48
Signature Algorithm: sha256WithRSAEncryption
89:38:a5:33:64:fe:d6:fe:1e:6a:74:4f:ad:dd:fc:a5:6f:a1:
85:c6:97:cc:55:97:81:13:67:1f:a1:9a:ff:d2:a2:00:5b:74:
c8:0e:e1:17:7d:74:f1:8f:7b:75:45:80:cf:3a:32:7a:4c:48:
9c:d7:8f:ad:e0:fd:5c:8c:5f:ff:0d:c2:4c:d5:c8:66:7e:3e:
e1:8f:d5:11:ea:06:ac:b3:01:ed:75:07:dc:ff:db:be:a4:ab:
4e:8a:f0:0a:a5:bf:b3:85:f3:33:ef:50:7b:e1:35:9a:fb:b0:
20:cc:5e:3c:df:14:36:0b:2b:97:95:54:f4:2c:f2:97:df:46:
12:36:9f:56:88:0c:32:f5:20:68:dc:c5:72:60:a0:80:1e:a7:
34:a3:90:9b:ec:2c:0c:13:b4:02:63:51:4d:b4:e3:ca:b4:92:
be:66:0e:32:25:dd:80:ec:70:12:df:4c:fe:ec:2c:20:10:44:
6f:a3:06:80:eb:35:fc:30:16:c5:59:10:1e:e4:c1:7b:e2:9f:
7b:2f:88:b6:aa:12:04:f0:5a:c6:e7:69:98:80:ad:67:42:f9:
4a:3f:df:0d:33:45:b2:5a:95:99:db:46:82:6b:7f:a9:9a:9a:
78:e4:1d:4f:5c:33:9e:dc:c1:4f:f9:27:cc:00:f1:b1:42:22:
a1:c2:7b:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 06:35:41 2025 by rpki-client