Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a366133333a3a2f34382d3438203d3e203136393039.roa
File: 326131343a373538343a366133333a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier: z2SliDNIqGsXSL0a8pCLET7Tas3JKU3Bm3qoMgsqkWc=
Subject key identifier: 2A:F3:93:8B:3E:E9:7D:24:33:B9:96:97:48:AA:C0:02:C2:E3:CC:0A
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 2A3A4B196E49A6E3643619568FA8414F6B8DD837
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a366133333a3a2f34382d3438203d3e203136393039.roa
Signing time: Tue 27 May 2025 22:30:02 +0000
ROA not before: Tue 27 May 2025 22:25:02 +0000
ROA not after: Tue 26 May 2026 22:30:02 +0000
asID: 16909
IP address blocks: 2a14:7584:6a33::/48 maxlen: 48
Validation: Failed, certificate revoked on Sat 31 May 2025 11:06:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2a:3a:4b:19:6e:49:a6:e3:64:36:19:56:8f:a8:41:4f:6b:8d:d8:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: May 27 22:25:02 2025 GMT
Not After : May 26 22:30:02 2026 GMT
Subject: CN=2AF3938B3EE97D2433B9969748AAC002C2E3CC0A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:a7:14:84:fb:3d:35:97:40:13:ac:49:e7:f2:
cc:4f:df:f4:25:f8:a5:b0:2a:1e:d6:90:37:cc:89:
96:56:86:73:ab:7d:64:bf:39:b9:94:58:49:3f:1e:
f7:93:bb:ea:5d:98:a0:f0:9a:a1:65:bd:31:ec:a8:
dc:80:c9:ef:7f:bc:7b:44:9a:81:8a:2a:54:0e:eb:
be:6a:04:0f:71:2c:a2:7e:95:c0:10:ac:e3:e0:72:
41:e3:48:95:46:c2:be:cd:5e:90:c4:2f:cb:a7:4b:
07:e0:9e:f1:89:dc:fb:49:06:dd:55:bd:88:a1:07:
b8:6c:b8:a9:e4:9d:43:7e:f6:87:7c:71:68:1e:67:
ab:fc:51:5e:f7:42:ab:a6:93:e1:de:06:e9:9f:be:
b7:59:ea:db:8a:6f:15:53:8a:71:04:6f:f5:2c:4a:
c4:e6:c3:96:81:c5:84:5c:0e:84:76:be:02:7f:01:
57:84:84:ad:48:53:33:8d:5a:72:c5:de:60:6d:78:
8e:34:6c:f3:d3:67:34:38:21:91:58:8e:00:9f:de:
c4:c1:a7:83:b8:1d:93:83:b8:dd:06:28:c1:3c:0c:
cb:08:35:a1:18:88:ae:f5:7f:21:fc:0b:5f:e8:a2:
a7:76:f4:6b:04:8d:c9:89:33:2e:40:95:2a:42:e6:
d6:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:F3:93:8B:3E:E9:7D:24:33:B9:96:97:48:AA:C0:02:C2:E3:CC:0A
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a366133333a3a2f34382d3438203d3e203136393039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:6a33::/48
Signature Algorithm: sha256WithRSAEncryption
83:6a:4c:99:bc:c2:04:a8:30:55:07:90:c8:4c:65:17:69:39:
af:17:46:d0:ad:fd:df:87:40:2f:46:b0:11:d8:0e:a0:df:00:
f2:21:55:fc:12:1a:84:a8:9b:cb:b3:5d:8d:62:c0:9f:ba:02:
01:2c:c3:24:8b:88:2c:25:e3:fc:cf:69:44:ab:7d:3e:26:6e:
79:ce:73:44:7f:f3:42:48:81:89:01:44:33:ee:0e:b2:19:ce:
56:f7:b8:1a:12:16:21:b9:7a:5a:a5:16:4e:86:2c:09:f1:2f:
f6:a4:51:06:27:bb:2c:35:f7:65:ea:5e:f0:e7:be:8b:23:37:
38:df:07:d8:91:a4:1e:08:8f:f3:96:b2:38:26:04:44:f3:3c:
c4:b5:44:53:dc:83:90:f1:5c:a5:38:90:01:e3:59:be:0f:f8:
84:af:5e:f1:e8:9e:06:08:1d:ff:05:8f:ad:25:a2:5c:90:63:
19:45:80:a2:9e:24:df:cc:29:ec:58:ce:b2:02:cb:c7:d4:0e:
12:32:57:8c:b2:ee:c4:a6:92:47:6f:28:c8:57:fd:0a:de:87:
09:cf:e5:a7:60:34:88:19:d6:4e:45:01:fb:d0:49:73:fe:8b:
7c:29:2d:e3:81:f8:fe:b5:bb:26:a5:cb:09:3c:0f:5c:86:d0:
52:be:1c:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 07:30:45 2025 by rpki-client