Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363862333a3a2f34382d3438203d3e203136393039.roa
File: 326131343a373538343a363862333a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier: zLrE1QUEsoXcCp7ciYuD1GRrXmyd1CgZDP0yrkr0g7s=
Subject key identifier: 1D:E8:6E:DD:42:D3:7C:4A:8F:6C:05:AF:4A:68:31:33:E0:CF:FA:8B
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 599B95D92702F82AABC8BFEBCF6271939E77A049
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363862333a3a2f34382d3438203d3e203136393039.roa
Signing time: Sat 24 May 2025 18:00:02 +0000
ROA not before: Sat 24 May 2025 17:55:02 +0000
ROA not after: Sat 23 May 2026 18:00:02 +0000
asID: 16909
IP address blocks: 2a14:7584:68b3::/48 maxlen: 48
Validation: Failed, certificate revoked on Sun 25 May 2025 05:54:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
59:9b:95:d9:27:02:f8:2a:ab:c8:bf:eb:cf:62:71:93:9e:77:a0:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: May 24 17:55:02 2025 GMT
Not After : May 23 18:00:02 2026 GMT
Subject: CN=1DE86EDD42D37C4A8F6C05AF4A683133E0CFFA8B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:e6:8a:8e:6a:3b:04:1c:6b:bb:34:b5:24:4d:
08:6c:e2:6c:ce:46:42:90:33:44:9c:1c:61:7d:8b:
50:c0:2a:8e:51:98:be:c2:08:65:94:45:3a:de:21:
9a:20:4f:0e:46:7f:04:2d:c5:69:ad:e9:65:fc:73:
36:87:cb:71:ca:7d:fd:2d:5c:6d:a6:ad:93:03:bb:
18:3a:7f:56:32:96:af:fb:b6:a9:64:ed:a5:ab:b3:
ae:d3:ba:9f:8f:07:ff:25:c2:76:7f:b4:31:af:37:
2c:78:7e:7b:69:8a:9d:bf:84:33:2d:d4:df:89:55:
44:25:da:2e:c6:3a:42:0d:dd:bd:28:93:89:72:11:
3b:bc:56:35:22:c9:d6:8b:c9:1e:40:b9:7a:af:95:
ec:a5:49:a1:c1:e9:58:17:62:89:8c:3b:a5:81:a4:
b0:e4:1e:b8:d5:c7:b3:06:5f:32:17:ee:f1:16:38:
a2:b6:c1:ee:24:8c:01:4b:0e:eb:be:12:66:44:13:
65:64:1a:1d:37:a2:1e:86:29:6d:1d:ad:5f:08:6e:
60:82:15:79:ea:99:89:18:4f:49:9b:ef:1d:c6:c2:
ae:2d:7b:3a:e3:13:2c:12:b5:f7:12:39:6a:3d:eb:
e9:08:73:c4:6a:44:3b:9e:24:1b:99:23:30:33:f9:
09:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:E8:6E:DD:42:D3:7C:4A:8F:6C:05:AF:4A:68:31:33:E0:CF:FA:8B
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363862333a3a2f34382d3438203d3e203136393039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:68b3::/48
Signature Algorithm: sha256WithRSAEncryption
5f:1c:fa:51:28:c7:9f:1d:a5:b2:18:8e:b0:bd:d9:f1:b4:c2:
00:c1:fa:5f:90:ee:d8:46:b7:93:00:31:35:5c:a5:b4:53:34:
b3:eb:5c:80:2e:3d:5f:c3:57:34:ec:03:23:f1:87:7d:2e:72:
3b:eb:9b:31:3f:75:3e:cf:1a:e6:7c:03:8a:e6:0a:65:5e:10:
cc:ea:a0:1e:c0:13:cd:35:bf:d5:01:c1:26:a6:03:76:c1:b9:
77:0b:0f:6f:a8:53:d2:d5:06:48:f4:4c:66:16:07:67:9b:99:
75:75:82:50:c1:c4:fa:7d:28:4b:e5:4f:bb:10:89:23:85:bb:
fa:f8:80:37:66:6b:74:33:e0:da:76:6c:8a:9e:cc:28:d2:73:
d7:8e:ab:5b:27:11:b6:55:3b:1d:61:4f:21:97:27:70:ad:a4:
66:16:51:4d:35:7e:e0:3d:71:b6:fd:4a:c9:1e:c4:59:b6:e6:
7c:c4:f0:ba:94:06:81:25:2b:9a:0b:ae:db:a9:c7:a7:5a:6a:
4a:19:f2:a0:ff:e1:b5:27:e8:69:a8:07:26:9a:84:bd:c0:da:
03:62:c9:d9:43:28:25:c2:96:af:02:46:99:c4:6e:aa:3e:a8:
61:65:d2:d2:99:cc:63:68:a0:30:96:f4:2f:03:43:6a:ad:e6:
ef:68:fc:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 06:25:26 2025 by rpki-client