Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a366331363a3a2f34382d3438203d3e203136393039.roa
File: 326131343a373538343a366331363a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier: 78rbBq2qJWQr7LQkEJ9NYWKiBjRPOYbDSWiNhAb89wo=
Subject key identifier: 6B:8D:BB:B7:09:C4:6E:17:5C:99:66:D0:FF:BC:3F:8F:C7:9B:0E:92
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 381A28ABB8AF5053BDA56A60A4F9C4D7C45F237E
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a366331363a3a2f34382d3438203d3e203136393039.roa
Signing time: Sun 25 May 2025 06:18:02 +0000
ROA not before: Sun 25 May 2025 06:13:02 +0000
ROA not after: Sun 24 May 2026 06:18:02 +0000
asID: 16909
IP address blocks: 2a14:7584:6c16::/48 maxlen: 48
Validation: Failed, certificate revoked on Tue 27 May 2025 21:18:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
38:1a:28:ab:b8:af:50:53:bd:a5:6a:60:a4:f9:c4:d7:c4:5f:23:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: May 25 06:13:02 2025 GMT
Not After : May 24 06:18:02 2026 GMT
Subject: CN=6B8DBBB709C46E175C9966D0FFBC3F8FC79B0E92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:a5:eb:c8:5f:5d:cd:bd:5c:d6:7c:42:78:97:
55:f9:b0:2f:66:8f:9a:5c:f8:a8:24:a2:87:e9:07:
3b:6f:d2:60:12:ef:c4:a6:9b:e4:03:3a:de:9e:9b:
38:be:ee:7f:9b:fe:97:d1:50:50:b0:f7:ff:9e:c8:
0b:cb:77:cd:20:f6:99:aa:98:f4:e8:b4:bd:52:09:
af:a9:e9:e9:49:d9:e3:bd:65:8a:1c:22:9d:e9:0c:
74:1b:9a:d7:e1:91:2f:6c:e3:5d:82:cc:3f:1a:69:
0d:93:dc:96:8f:01:32:c0:bb:e0:9d:f8:42:8a:1e:
3b:13:c8:5a:2f:11:0d:a1:53:01:9a:41:fb:8d:c5:
a3:3f:49:12:50:ff:d6:ef:d8:1f:32:f0:3f:99:03:
33:4a:5c:f6:ba:f6:ff:97:d4:00:56:16:89:26:4a:
96:1e:5e:8d:72:87:96:ff:fc:8e:6f:ba:a0:b2:8d:
25:b8:76:fe:e2:e1:65:04:2c:ca:f5:7d:75:18:b8:
9b:63:09:8b:0f:ef:01:61:d1:0e:16:bb:e6:a1:7f:
fb:bd:ea:f3:1f:ce:18:5d:b5:52:9f:90:f2:55:7d:
15:55:a3:62:f6:a3:f0:9c:7b:1f:a5:d3:19:7f:1b:
9a:0c:2d:52:ab:29:8d:18:87:92:3e:af:64:91:86:
d1:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:8D:BB:B7:09:C4:6E:17:5C:99:66:D0:FF:BC:3F:8F:C7:9B:0E:92
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a366331363a3a2f34382d3438203d3e203136393039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:6c16::/48
Signature Algorithm: sha256WithRSAEncryption
97:43:8c:c7:95:d6:a4:8e:99:e6:f8:49:b9:a4:ea:ab:ce:4c:
79:d5:6c:0c:8c:1d:5a:87:71:29:f9:d6:ed:17:ad:e3:51:06:
4e:37:99:8d:3a:0e:32:b3:e7:10:24:09:53:27:63:5a:ce:2f:
02:59:c0:fb:7d:39:16:54:c4:3a:e1:7e:ec:6f:8c:99:92:0b:
01:c2:77:70:5a:e2:39:71:be:53:8c:ea:00:e1:66:3f:58:0e:
b6:88:02:95:5d:7d:f9:7a:70:2f:a2:c9:1a:ea:95:3f:aa:62:
64:5e:c7:0e:6a:5f:e9:ad:8f:e5:3a:23:e6:58:96:22:15:81:
a7:72:aa:4e:14:1a:f3:d7:c5:5c:5d:15:c4:ed:63:0e:90:56:
f7:6f:e2:73:d3:d4:0d:26:b9:06:3f:03:56:4c:3f:1a:e2:fa:
6d:85:d1:2d:4a:f6:72:45:a1:7f:04:06:23:2b:b3:39:d1:7f:
2a:f9:f6:84:e7:27:2e:8f:69:df:8b:87:c4:45:fe:4c:61:07:
fa:de:73:54:70:a3:bf:4f:cd:70:85:01:9b:b6:67:cb:a5:35:
4c:ad:5a:18:e8:e1:ed:d2:17:12:ae:7e:d6:4f:5d:e2:f5:fc:
8b:c8:d0:cb:4e:b3:fe:72:23:23:c9:db:21:65:33:24:72:91:
24:34:9f:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 00:15:16 2025 by rpki-client