Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a366434353a3a2f34382d3438203d3e203136393039.roa
File: 326131343a373538343a366434353a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier: YXYJTR7oFn3SR7bEOldIseRoo2vPsWhBp61yroZeAQM=
Subject key identifier: FA:EF:4E:CF:99:12:25:67:F5:F0:76:40:34:4F:7A:95:82:09:6C:5E
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 6B3F0006ADA22770562ACBBBCF42E5BE02ABEED3
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a366434353a3a2f34382d3438203d3e203136393039.roa
Signing time: Sat 31 May 2025 02:54:01 +0000
ROA not before: Sat 31 May 2025 02:49:01 +0000
ROA not after: Sat 30 May 2026 02:54:01 +0000
asID: 16909
IP address blocks: 2a14:7584:6d45::/48 maxlen: 48
Validation: Failed, certificate revoked on Sat 31 May 2025 17:16:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6b:3f:00:06:ad:a2:27:70:56:2a:cb:bb:cf:42:e5:be:02:ab:ee:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: May 31 02:49:01 2025 GMT
Not After : May 30 02:54:01 2026 GMT
Subject: CN=FAEF4ECF99122567F5F07640344F7A9582096C5E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:e3:86:36:18:58:d2:99:e1:d6:55:e0:85:74:
d2:9d:70:21:8e:3b:28:a6:f5:ad:b7:bf:ed:5e:af:
6c:88:05:2f:c5:ed:5c:4b:3c:16:37:3f:66:12:64:
fd:ba:83:7c:2b:0a:a5:fd:d3:ca:17:9e:b7:5d:5b:
20:f4:ce:e9:56:84:3c:7f:54:27:ab:91:f9:b8:cf:
ea:56:17:97:5d:ca:24:a8:99:24:09:d6:9f:c7:8f:
0a:9a:04:d5:bd:77:26:e7:09:cc:c3:c8:b7:be:15:
33:64:44:5a:02:05:fa:b6:f2:f3:51:84:55:23:54:
dc:14:8e:75:89:08:c7:f8:30:65:dc:60:c5:2e:7e:
76:2e:36:9f:dc:a2:69:94:57:30:7f:0a:8a:8d:0a:
db:db:41:07:a9:e2:60:12:f8:f5:b6:4a:b7:2f:e1:
e8:93:a8:17:b9:32:5c:c7:f9:0b:aa:be:71:59:52:
2d:64:65:57:05:d3:ee:72:22:95:2a:1c:cf:40:ad:
ec:45:5b:35:15:fa:4d:26:07:86:4c:d0:42:0e:d6:
76:16:65:90:2c:eb:6e:3b:05:cc:3b:f2:94:d1:bd:
89:1e:d3:5b:d5:4e:6d:19:e2:e2:d5:ee:5b:0e:74:
7a:db:20:05:2d:e7:dd:e6:55:67:80:5d:b7:63:b4:
3a:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:EF:4E:CF:99:12:25:67:F5:F0:76:40:34:4F:7A:95:82:09:6C:5E
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a366434353a3a2f34382d3438203d3e203136393039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:6d45::/48
Signature Algorithm: sha256WithRSAEncryption
41:08:ff:f7:36:d4:c1:7c:3d:0b:57:7a:f3:69:94:90:ff:a4:
0d:24:91:31:82:d5:15:94:19:b6:a3:94:70:ce:16:ec:ac:e6:
d0:74:8d:6f:41:a7:73:54:97:27:2e:6c:9e:73:90:63:1d:2e:
40:94:1f:87:bb:f4:18:22:2b:04:6c:79:8d:a5:a2:fd:c0:bf:
bc:c6:a8:78:4d:f8:37:6d:8c:6f:13:ff:0d:cf:4e:23:9a:df:
64:53:ac:7d:f2:1b:6e:06:fd:3c:6b:72:42:1c:08:91:bb:eb:
35:93:d3:9d:20:a0:64:68:61:16:94:71:1f:f1:29:bf:16:c0:
50:04:6e:b6:c0:6a:9b:ba:7e:b0:ad:88:e7:50:13:ff:65:02:
64:c6:a1:a6:70:72:44:71:94:db:f0:5c:81:48:87:ff:57:ac:
ca:de:63:5d:dd:13:9e:54:35:e8:4a:0c:5f:29:0b:24:4e:8a:
c9:8a:34:6d:5c:12:08:de:48:94:35:93:6a:6d:d2:55:c8:7b:
9c:6a:7d:f0:5e:b4:15:a6:a3:d6:a5:c3:2e:dd:82:da:4d:72:
f9:7e:8a:c5:2d:c3:b0:a9:6a:fc:9f:c8:be:2d:7c:3c:9a:24:
d5:a0:30:b0:dd:4d:bf:19:4b:81:45:9d:e6:b4:f1:30:e1:a0:
21:e7:53:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 06:15:09 2025 by rpki-client