Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a366430333a3a2f34382d3438203d3e203136393039.roa
File: 326131343a373538343a366430333a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier: 9U4/Ss/ooZ1esyato1oDpqp+rcWuKthBJYWVrgfHU1M=
Subject key identifier: 36:26:B1:69:89:92:EC:7C:E9:8E:33:9E:69:7E:00:6C:8C:D9:D8:A7
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 5BB2BE833434B59306E619D939FAD698935B2619
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a366430333a3a2f34382d3438203d3e203136393039.roa
Signing time: Sun 25 May 2025 22:06:02 +0000
ROA not before: Sun 25 May 2025 22:01:02 +0000
ROA not after: Sun 24 May 2026 22:06:02 +0000
asID: 16909
IP address blocks: 2a14:7584:6d03::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 28 May 2025 20:42:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5b:b2:be:83:34:34:b5:93:06:e6:19:d9:39:fa:d6:98:93:5b:26:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: May 25 22:01:02 2025 GMT
Not After : May 24 22:06:02 2026 GMT
Subject: CN=3626B1698992EC7CE98E339E697E006C8CD9D8A7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:7f:94:3c:08:75:43:c0:09:28:2b:f2:cf:38:
dd:f6:4c:37:a9:0b:03:46:c5:4f:92:bf:ff:f8:fa:
2d:d8:cd:d1:d2:dd:11:e1:f9:99:9c:1a:1c:41:83:
9c:5c:50:8b:c8:c9:49:21:d2:40:99:ca:d7:75:69:
f5:56:6c:11:c3:4f:be:9e:9d:1e:bf:84:66:eb:eb:
67:62:80:7e:83:47:d7:d3:ba:4e:2a:13:8a:9d:89:
55:f2:20:45:43:5b:f7:03:1e:a0:f9:c7:3c:98:29:
6d:68:5f:03:6d:86:f2:ea:39:fe:ad:34:c2:67:0a:
31:7f:9e:72:a8:69:4b:5e:57:f6:4f:73:d4:bd:f2:
05:ab:08:c2:5c:ba:05:1b:04:71:eb:7a:9b:c5:5f:
99:60:53:67:8c:03:e4:4c:9c:2b:8c:4a:7c:6f:13:
eb:e0:9f:ec:4f:f7:99:8e:47:fc:68:50:14:f9:7a:
8c:7b:0a:8e:4d:b6:83:5d:41:25:32:42:e8:21:9a:
51:ce:f8:fc:51:41:c2:12:ee:e4:e5:74:e7:13:ef:
f7:0c:22:83:c0:84:85:ad:50:b4:5f:70:64:cb:83:
ed:f2:d4:08:bb:ac:ae:f3:ad:8e:54:03:d6:7e:a7:
2c:04:e1:b4:52:49:86:44:af:b7:9f:49:c3:23:28:
c9:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:26:B1:69:89:92:EC:7C:E9:8E:33:9E:69:7E:00:6C:8C:D9:D8:A7
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a366430333a3a2f34382d3438203d3e203136393039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:6d03::/48
Signature Algorithm: sha256WithRSAEncryption
b1:f0:15:27:b2:9d:db:bc:93:3a:f6:b3:7e:58:19:ee:23:33:
7c:7a:f9:00:e2:61:f6:c3:8a:46:72:8d:fe:f5:73:d9:c5:52:
13:3f:3c:f0:b7:a3:94:74:6a:16:1c:61:7f:9d:9d:05:0e:e8:
8e:fe:af:15:3d:c1:1e:75:95:7a:8d:a8:c4:9b:61:16:3a:67:
2d:c4:f0:21:81:52:f9:1b:e3:a7:9d:df:1d:44:35:6e:e5:6d:
ae:f4:1c:45:04:d3:84:c1:93:f1:48:5d:fa:0e:46:f9:b3:ae:
75:3a:db:39:70:e9:93:e6:79:98:11:92:b1:bd:b2:13:3c:40:
28:f3:c3:10:0c:aa:ee:ea:40:77:73:c0:b5:18:ae:80:72:83:
a2:86:99:97:8b:f9:28:41:7a:23:79:4d:c3:77:b6:a5:76:47:
88:d6:3b:09:77:b7:e3:82:cc:02:d2:9a:dd:9b:ba:74:f2:3e:
ac:41:dd:04:86:19:b0:b3:2d:b7:6b:f9:dc:69:b6:f6:35:d7:
f7:79:6b:e5:ed:05:47:a9:bb:b6:99:ba:68:5a:e8:86:ec:fc:
b2:34:3e:40:0b:2a:ea:3e:92:ec:40:59:81:58:2d:ab:ec:2b:
6d:80:04:c0:5e:79:1a:a8:c7:03:af:f8:0c:11:11:db:99:4f:
92:a4:fd:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 06:12:27 2025 by rpki-client