Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a366338393a3a2f34382d3438203d3e203136393039.roa
File: 326131343a373538343a366338393a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier: haAmQatQZfIh9v/01VKK5UNBGwOeL0j5p22oDHgx8JE=
Subject key identifier: 66:13:9E:5A:79:EA:6A:83:77:28:73:D4:EF:BB:47:55:CD:B7:7D:EC
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 3E177EC87F22084C21456C1EF8620229EA35A5EE
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a366338393a3a2f34382d3438203d3e203136393039.roa
Signing time: Sat 31 May 2025 11:12:01 +0000
ROA not before: Sat 31 May 2025 11:07:01 +0000
ROA not after: Sat 30 May 2026 11:12:01 +0000
asID: 16909
IP address blocks: 2a14:7584:6c89::/48 maxlen: 48
Validation: Failed, certificate revoked on Sat 31 May 2025 17:16:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3e:17:7e:c8:7f:22:08:4c:21:45:6c:1e:f8:62:02:29:ea:35:a5:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: May 31 11:07:01 2025 GMT
Not After : May 30 11:12:01 2026 GMT
Subject: CN=66139E5A79EA6A83772873D4EFBB4755CDB77DEC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:03:89:86:42:4b:fb:3d:4b:fe:dc:cd:76:19:
32:f2:41:53:a9:57:a6:b8:05:0a:f1:d2:e4:55:ad:
f7:a4:47:a0:1e:05:39:61:cc:2f:ba:a5:bd:49:ae:
0d:31:bd:42:26:c9:6f:4d:fc:b0:6c:6a:43:7f:a2:
85:97:f1:a4:6e:ed:4f:4f:a4:ad:65:29:c6:2a:cc:
f8:ed:ee:96:ab:ee:35:82:56:66:ac:c0:ae:d5:1c:
91:79:40:6c:d7:29:0d:e3:02:6b:28:87:a3:d9:8d:
0f:1e:1a:6c:2c:cf:f3:f2:7f:9f:3b:95:84:86:62:
b3:3f:62:ad:be:04:1e:60:3b:a5:9e:53:11:c8:dc:
f9:d0:31:92:bc:af:57:bf:a3:66:36:91:59:19:de:
14:b5:ac:f8:97:c5:85:7e:ce:5b:0f:8a:ae:a4:4f:
1f:75:b4:b5:c4:5a:c1:4b:e5:9f:e3:06:d7:0d:03:
72:19:b9:f6:2c:00:00:95:cb:84:6a:e6:95:94:30:
27:f3:7f:4c:72:af:1d:79:ab:5e:76:dd:03:bc:58:
c7:11:a3:69:0c:84:9d:cd:4e:28:77:ee:fd:7b:c5:
9d:f5:09:4e:9d:ad:49:39:33:06:5c:7c:4a:6e:0e:
cc:0d:a7:6c:ab:9b:bb:09:68:3f:80:d9:72:a1:fb:
9a:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:13:9E:5A:79:EA:6A:83:77:28:73:D4:EF:BB:47:55:CD:B7:7D:EC
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a366338393a3a2f34382d3438203d3e203136393039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:6c89::/48
Signature Algorithm: sha256WithRSAEncryption
8b:13:9d:87:8a:79:39:b9:a9:db:9f:13:10:33:74:df:76:5e:
30:57:73:2f:30:cf:26:b2:28:ee:0d:38:ef:38:f2:d1:5a:ba:
6b:c9:8c:ea:8b:d9:0c:3a:21:81:61:72:01:94:d1:82:f2:22:
d7:8a:bb:6c:d6:2c:aa:96:d2:fc:ff:c9:48:e5:fb:d4:59:38:
15:d2:f3:90:c1:b1:22:a5:5f:51:d7:a9:8a:7d:65:89:51:1a:
cd:13:db:f9:4e:5a:83:ed:f8:6e:10:ce:af:f2:7b:e3:4d:2d:
a3:01:e1:60:bf:71:9f:21:ad:0f:21:17:41:3b:ee:f2:2a:b6:
5b:a3:2d:0a:d6:91:79:ed:e5:d8:6d:54:f3:4e:07:02:da:7a:
3b:7f:71:7a:94:24:16:39:d6:ce:23:7d:53:c9:4f:a7:f5:b0:
67:1f:17:86:21:0f:28:bc:77:ba:aa:3e:63:10:0c:f5:2d:60:
21:20:c6:b9:34:2e:e3:5a:3f:83:ca:ee:64:85:51:f1:3e:2c:
83:33:03:3d:90:cf:d4:a8:0c:65:11:f6:d4:88:f6:1e:08:1e:
91:bb:b5:e8:26:e8:16:72:5d:62:1f:55:87:46:bb:0e:1d:eb:
36:16:b5:86:ea:5a:a0:e0:8b:bf:92:52:39:a7:20:d7:10:7e:
8c:7d:5b:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 07:27:20 2025 by rpki-client