Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a366235633a3a2f34382d3438203d3e203136393039.roa
File: 326131343a373538343a366235633a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier: MBsVMpKF+rcnL8ObNTi+mWhDoPQxrcxVyCiVPPBa6Zk=
Subject key identifier: 1C:C3:67:BC:00:02:5E:FF:BE:3A:A3:22:6E:4E:07:F0:DB:A3:4A:5B
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 1E58E315689B6848B3502A414339F50F3FF4E554
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a366235633a3a2f34382d3438203d3e203136393039.roa
Signing time: Mon 26 May 2025 19:54:02 +0000
ROA not before: Mon 26 May 2025 19:49:02 +0000
ROA not after: Mon 25 May 2026 19:54:02 +0000
asID: 16909
IP address blocks: 2a14:7584:6b5c::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 28 May 2025 21:06:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1e:58:e3:15:68:9b:68:48:b3:50:2a:41:43:39:f5:0f:3f:f4:e5:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: May 26 19:49:02 2025 GMT
Not After : May 25 19:54:02 2026 GMT
Subject: CN=1CC367BC00025EFFBE3AA3226E4E07F0DBA34A5B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:93:32:c8:c4:96:4b:a5:40:17:5c:be:0a:05:
df:1d:26:54:73:8f:f6:c1:97:3e:fb:15:7b:93:15:
b3:2e:9f:35:f7:05:53:c5:21:be:fa:4e:3e:8d:45:
71:ce:7f:cc:67:ec:41:8c:e3:cd:a4:86:da:41:52:
6e:bb:1a:9c:eb:74:97:ef:1d:03:0e:ec:f1:0b:bb:
b7:04:c8:4e:9e:df:a0:b4:f7:ac:74:89:e3:9b:cf:
c3:58:07:ae:c8:36:16:e0:9a:01:74:b6:77:e7:04:
a2:29:04:bd:cc:f7:a6:8d:f9:0d:8b:07:b0:89:88:
80:92:98:42:bc:3a:2f:86:f4:93:d9:82:ff:f0:8e:
56:b2:57:99:a2:ac:ba:fd:37:b0:60:a5:e6:1c:7d:
a0:1a:7c:09:e5:00:8d:3e:d4:5f:13:43:d9:3c:7f:
21:67:e2:13:5c:04:2d:d3:15:57:a4:4b:ea:65:40:
ad:fd:48:ed:14:4e:c8:47:db:b0:66:a6:f0:72:f3:
27:c6:46:49:42:4e:19:a4:d7:1e:5e:ad:fe:7c:d0:
14:5f:a0:c4:ed:3b:19:47:cd:0e:12:ad:04:26:11:
9b:a7:76:c2:80:16:30:bf:e8:7e:ff:55:32:b9:f5:
5a:1b:20:c5:cb:cf:65:6b:c1:71:a6:27:7f:00:69:
0d:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:C3:67:BC:00:02:5E:FF:BE:3A:A3:22:6E:4E:07:F0:DB:A3:4A:5B
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a366235633a3a2f34382d3438203d3e203136393039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:6b5c::/48
Signature Algorithm: sha256WithRSAEncryption
2a:0f:d8:a3:3f:73:ea:9d:d0:4d:52:16:42:34:4a:62:94:33:
d7:8b:80:57:c8:d5:93:f1:98:c4:20:cc:9c:e7:f0:35:d5:21:
12:dd:f4:4e:fd:9e:fb:9d:2e:b8:b9:d4:a1:43:b2:30:8b:be:
9c:33:c4:e5:aa:22:cb:79:0d:91:04:fd:41:b3:12:db:d8:c9:
74:96:81:1c:51:25:af:26:fa:e0:ac:c4:50:88:3a:75:d3:61:
73:43:c3:14:7c:bf:c9:99:80:a2:12:23:7b:80:78:ed:51:fa:
69:0e:d2:8a:e6:56:3f:1a:f0:48:8b:1b:3b:01:93:54:eb:ae:
40:05:36:1f:a9:ea:13:e2:c0:b0:f7:19:fe:03:94:e8:2c:81:
f7:d4:ad:a6:0b:06:e4:a1:d6:a7:36:e7:9d:75:4c:17:71:37:
63:3f:d5:6e:49:64:e0:5e:25:29:b0:50:6f:db:50:77:70:d4:
af:91:1f:83:16:5e:d5:80:d9:4f:11:b3:c3:92:f5:c4:b9:8e:
2f:53:a5:8a:3d:cd:9d:db:d9:5c:e5:67:38:77:09:27:06:d0:
9b:53:4c:d9:b8:33:f4:77:ed:8a:f8:a7:a9:46:c2:ed:fd:74:
b1:fd:d0:a6:11:2b:32:4c:29:7d:c0:0b:18:72:cd:b7:47:11:
d7:c9:7a:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 21:50:18 2025 by rpki-client