Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a366234373a3a2f34382d3438203d3e203136393039.roa
File: 326131343a373538343a366234373a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier: /0NoGKGxfSzOO7VOU4marRUsKGyCOvgmUlxHKDgTtds=
Subject key identifier: 00:1A:F5:3A:98:21:3C:3C:B7:52:5F:27:35:55:C9:AE:8A:9E:46:17
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 692EAEFAF8CB26D4A342B3DC7B45DC739E0CD504
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a366234373a3a2f34382d3438203d3e203136393039.roa
Signing time: Mon 26 May 2025 19:54:03 +0000
ROA not before: Mon 26 May 2025 19:49:03 +0000
ROA not after: Mon 25 May 2026 19:54:03 +0000
asID: 16909
IP address blocks: 2a14:7584:6b47::/48 maxlen: 48
Validation: Failed, certificate revoked on Thu 29 May 2025 05:06:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
69:2e:ae:fa:f8:cb:26:d4:a3:42:b3:dc:7b:45:dc:73:9e:0c:d5:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: May 26 19:49:03 2025 GMT
Not After : May 25 19:54:03 2026 GMT
Subject: CN=001AF53A98213C3CB7525F273555C9AE8A9E4617
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:86:a6:7d:93:93:75:1d:ce:0b:48:0e:fa:2e:
01:ff:35:8d:7f:f1:2a:dd:ab:b0:bb:42:e4:6a:b6:
fe:94:6f:4f:91:d3:b5:0e:4e:9e:0b:fb:1e:6d:cf:
df:38:6e:c2:fd:8a:fa:8a:b9:30:9a:3a:44:75:45:
ae:3f:87:54:49:25:50:08:95:9d:2c:ef:3b:56:e4:
ba:ac:78:a1:01:5a:8a:41:ec:1d:68:e5:db:35:00:
ef:49:1e:f9:7a:ed:4c:3b:5b:a8:1c:4b:ce:31:97:
c4:cc:2c:76:d2:d2:83:4c:cd:7a:ee:94:c2:d2:26:
a7:83:55:02:33:a7:7e:ba:cd:7a:13:b2:08:d0:6e:
3e:46:15:27:b1:5b:d2:4e:93:d4:9e:1e:4e:b2:9f:
31:73:1b:d1:53:9d:16:e8:67:f8:99:04:ba:74:40:
fa:c8:88:13:61:16:11:dd:cd:7e:e5:d0:89:08:31:
f7:72:ec:c1:37:94:21:41:8c:72:7e:f0:27:2a:29:
67:52:91:11:cd:5b:8b:98:ac:f1:84:cf:39:0f:24:
6f:b9:6b:10:23:fd:b3:db:34:9d:13:12:8d:0c:ac:
7a:5e:0c:4d:06:b1:65:5e:b3:f0:81:08:9e:33:f5:
71:85:cb:e5:a8:27:ac:32:c7:ed:e1:ab:51:d9:36:
c3:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:1A:F5:3A:98:21:3C:3C:B7:52:5F:27:35:55:C9:AE:8A:9E:46:17
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a366234373a3a2f34382d3438203d3e203136393039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:6b47::/48
Signature Algorithm: sha256WithRSAEncryption
40:b0:6d:d1:d8:1c:85:05:ce:8c:51:c7:a3:79:37:86:76:72:
ea:98:d0:6a:9b:26:8f:2d:d9:7e:52:b7:e2:1c:02:da:0b:01:
72:1f:41:01:81:c1:91:b4:51:c9:f4:f9:0e:14:35:c4:fd:d3:
c1:bc:2b:59:89:0f:ee:d7:c6:71:cb:af:30:c3:30:30:12:d9:
ab:76:c8:d1:1f:25:73:52:03:bc:98:37:2a:99:1f:02:5a:ff:
9a:34:91:a0:90:10:0b:c3:dd:85:12:46:57:a2:38:3c:a5:0d:
4a:4d:39:94:bd:0e:de:85:d3:3a:fa:c9:81:a0:3d:6c:31:22:
18:3a:be:89:b2:a9:49:3d:dd:b7:f3:d2:da:76:ed:ea:4e:8e:
11:51:ce:b4:7e:89:4d:e0:cb:11:29:0e:c1:3b:5a:54:4f:c2:
52:b5:7b:3d:7c:1f:2d:7b:64:cd:95:ad:16:21:02:49:78:48:
3a:f2:f1:9e:6b:50:4a:40:4d:5c:97:0f:03:25:e1:cd:38:5d:
d0:70:66:06:aa:c5:8a:05:9b:83:cf:29:f0:2f:3c:45:40:84:
4e:ae:e9:69:12:b9:d3:fb:69:b2:3c:e0:ae:4b:1d:92:f0:ec:
a4:10:55:c2:0b:6f:73:bf:72:1a:46:54:59:64:32:32:97:fd:
6c:05:86:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 06:09:00 2025 by rpki-client