Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a366238393a3a2f34382d3438203d3e203136393039.roa
File: 326131343a373538343a366238393a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier: ewW1vNkZVITs0/RGDWPIAi9eVoy4byJ6c7b2WzYvm3U=
Subject key identifier: 0A:56:39:2A:FC:C6:9F:BE:D4:A9:62:C0:6A:BC:15:B8:F8:D9:EB:19
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 5AE76DE5FED2D042003DD12CDA9E1EE9050B6AC7
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a366238393a3a2f34382d3438203d3e203136393039.roa
Signing time: Sun 25 May 2025 03:06:02 +0000
ROA not before: Sun 25 May 2025 03:01:02 +0000
ROA not after: Sun 24 May 2026 03:06:02 +0000
asID: 16909
IP address blocks: 2a14:7584:6b89::/48 maxlen: 48
Validation: Failed, certificate revoked on Fri 30 May 2025 11:24:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5a:e7:6d:e5:fe:d2:d0:42:00:3d:d1:2c:da:9e:1e:e9:05:0b:6a:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: May 25 03:01:02 2025 GMT
Not After : May 24 03:06:02 2026 GMT
Subject: CN=0A56392AFCC69FBED4A962C06ABC15B8F8D9EB19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:92:92:17:81:e0:6a:bd:a4:79:79:fe:30:35:
d2:34:f9:42:de:b2:b4:be:36:66:2a:04:f4:b0:b9:
49:77:59:65:53:2e:a7:fb:93:60:d3:8c:bb:2e:0a:
9e:1f:86:47:31:d4:3b:90:c3:41:a9:14:2a:f4:95:
94:09:64:d3:bd:9b:7a:35:08:01:57:fa:df:01:61:
bb:f0:53:92:2b:ad:92:b6:e7:42:c8:c7:4a:2d:90:
47:20:12:38:c1:ee:9d:dc:db:d0:9d:04:a6:78:4c:
00:64:47:95:f0:1d:24:53:a3:04:4b:d2:25:56:5a:
64:fa:42:63:05:3a:ee:66:c0:13:fe:ba:54:8a:28:
b4:00:02:19:6c:d1:23:fc:bd:b1:4e:08:48:10:22:
db:91:96:94:20:17:f7:ca:91:90:5c:1e:aa:d6:ee:
31:14:9a:61:8e:47:77:6e:da:76:a5:7d:3e:24:74:
75:56:80:a7:6d:38:9f:11:ae:00:a5:22:8a:7a:fe:
0a:bb:63:cd:0a:66:fd:7a:ee:e6:c0:49:0c:1c:91:
51:8e:06:09:d3:e5:d2:16:1a:b3:12:1d:fd:1b:9b:
73:ef:b2:72:b4:44:ae:a2:98:ad:94:86:98:fa:b7:
c4:f3:85:5f:91:f1:5a:0e:54:5b:61:fc:f3:1c:c1:
7f:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:56:39:2A:FC:C6:9F:BE:D4:A9:62:C0:6A:BC:15:B8:F8:D9:EB:19
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a366238393a3a2f34382d3438203d3e203136393039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:6b89::/48
Signature Algorithm: sha256WithRSAEncryption
3c:a4:17:45:56:73:36:a5:3f:64:dc:c4:55:e1:87:97:07:ab:
d1:27:8b:53:81:13:67:a0:37:54:82:c2:c0:59:66:8c:4d:f4:
a4:5e:40:ba:c0:fc:41:01:ac:51:7b:f0:d1:e0:31:a4:eb:52:
33:f0:8e:3b:a8:3a:ed:16:db:7d:65:42:7b:8e:9a:f3:45:b1:
f2:cb:cf:a4:23:0a:ca:e3:e6:e9:34:77:9c:52:5e:25:23:e8:
13:91:62:f4:94:44:0e:f9:2d:4b:60:46:63:10:21:40:93:8b:
14:7e:0f:7a:66:d9:a1:71:96:5c:cf:d5:88:2f:9a:66:88:16:
63:f6:2b:a2:9b:01:a1:95:30:14:fb:ed:58:9c:70:a8:4d:f6:
5d:58:41:37:b1:16:9b:ee:cd:4e:3d:4c:a8:2c:3c:21:02:88:
b3:11:89:c6:9b:e4:00:5c:fa:4a:4f:42:e2:65:9f:ab:e2:dd:
a3:75:77:1e:85:e4:e2:5a:d3:00:e7:46:0a:b6:44:f6:08:a5:
2e:9b:8c:93:f8:09:e9:07:fc:dc:4f:40:de:a2:8f:17:d9:69:
63:24:19:6b:21:1e:b5:94:f5:de:1b:3b:c1:24:4a:2c:d7:6f:
fe:eb:9c:35:ca:5b:c9:16:61:bb:40:7d:c0:a8:dc:a2:c7:43:
af:86:fb:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 07:30:04 2025 by rpki-client