Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a366161623a3a2f34382d3438203d3e203136393039.roa
File: 326131343a373538343a366161623a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier: jb5XO3H4RdBcfBMNiHlScUDdSL6L9MyOwfCwG5JeA0k=
Subject key identifier: DC:73:EC:3F:BE:0F:69:DE:62:67:0E:7F:3B:96:64:1D:5B:ED:D7:C0
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 51249D407FB1142F4EFD60CAEA1EEEBAD9915DD2
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a366161623a3a2f34382d3438203d3e203136393039.roa
Signing time: Fri 30 May 2025 17:54:02 +0000
ROA not before: Fri 30 May 2025 17:49:02 +0000
ROA not after: Fri 29 May 2026 17:54:02 +0000
asID: 16909
IP address blocks: 2a14:7584:6aab::/48 maxlen: 48
Validation: Failed, certificate revoked on Sat 31 May 2025 17:16:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
51:24:9d:40:7f:b1:14:2f:4e:fd:60:ca:ea:1e:ee:ba:d9:91:5d:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: May 30 17:49:02 2025 GMT
Not After : May 29 17:54:02 2026 GMT
Subject: CN=DC73EC3FBE0F69DE62670E7F3B96641D5BEDD7C0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:06:2b:4b:90:30:0d:97:e5:a5:ac:1d:61:36:
e8:f8:81:a6:7f:4f:3e:21:50:ea:d1:4b:e0:38:c4:
4f:77:e5:be:cd:dc:4b:d0:7c:d6:5e:a6:12:5b:a5:
0b:32:fc:c2:23:13:56:5b:5b:f9:65:2d:c7:4f:c2:
f1:6a:ab:db:c6:13:3f:0e:b2:18:cc:fd:62:6a:f9:
bc:a2:b6:95:c3:55:8d:f3:00:4c:03:56:54:c8:47:
d5:a1:05:62:8b:38:20:00:79:51:f3:ab:fc:f9:bf:
44:9a:8b:13:c0:78:55:22:8c:86:25:b2:25:0e:ce:
57:f9:31:7c:5e:bf:fe:67:08:72:03:01:86:ce:1d:
17:12:71:e2:24:6c:53:10:45:f8:ef:ab:b1:ad:27:
d2:d5:cd:d0:1c:5a:e6:49:d9:41:ee:67:b4:c5:ba:
f0:fd:26:c6:b1:5c:5a:18:37:84:8a:81:08:3b:b2:
25:a3:b4:f2:d9:3c:c9:ac:18:65:13:b7:50:ca:12:
13:04:4b:ff:f2:01:fe:da:e2:4b:a9:ce:63:31:61:
da:83:82:91:22:27:b5:90:3a:a0:cf:8c:61:29:4c:
34:83:17:d7:62:79:3a:f6:3a:ec:bb:7b:59:a8:87:
d1:ad:9d:61:d3:bd:eb:b2:67:48:7e:60:2c:af:6b:
1d:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:73:EC:3F:BE:0F:69:DE:62:67:0E:7F:3B:96:64:1D:5B:ED:D7:C0
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a366161623a3a2f34382d3438203d3e203136393039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:6aab::/48
Signature Algorithm: sha256WithRSAEncryption
b9:8b:64:95:68:08:0d:a6:4a:63:8a:67:19:24:ff:a5:08:9e:
ae:5c:b2:a3:2d:ee:f3:8f:23:81:b6:f0:e3:4f:d3:05:36:27:
fa:88:1a:7d:04:c3:8d:c3:0a:58:95:e2:9b:60:8b:6d:1b:b1:
0e:b1:4b:6e:6b:ce:27:85:d8:78:2f:ca:a7:5d:64:ae:b9:48:
cc:43:67:2a:ca:26:50:29:39:ac:98:ca:fe:b7:43:6a:bb:47:
4b:7e:5c:76:8b:94:63:42:22:66:1c:89:10:1e:ba:74:38:88:
e6:46:30:f7:cc:6b:99:82:8d:59:3f:11:71:3e:50:95:e7:5e:
a5:18:f5:c2:a8:47:11:11:5e:a4:9f:05:2b:e4:2a:3b:96:b1:
db:e6:d5:2d:ef:6d:13:da:fc:2d:83:db:9c:cf:9c:64:6c:d5:
e3:e0:8e:78:b8:d6:05:1e:50:ab:c7:a8:42:bd:fe:b7:b5:6f:
c0:bf:41:2b:e6:80:93:ea:07:fe:4f:43:e5:8c:03:76:07:cb:
69:52:b3:f8:51:76:33:8d:6a:29:73:a5:02:3d:32:e1:fa:64:
ac:fe:fd:4e:04:c9:1a:3b:db:39:45:8d:b2:f8:f5:2f:8f:29:
89:b2:c9:8d:5e:dc:06:37:b8:4a:0f:06:32:fa:b9:05:e5:ce:
79:15:b0:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 04:15:49 2025 by rpki-client