Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a366434613a3a2f34382d3438203d3e203136393039.roa
File: 326131343a373538343a366434613a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier: XlwhwzwJd4Znvjfd58u1P5HIgZv+7cDbQIO5uRXJ3cw=
Subject key identifier: CB:17:5F:BB:95:2A:8A:97:17:BB:42:58:1A:68:BF:30:03:5D:75:38
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 5C6B3849350B19BCA6FA4DA4844EB6A2DAC86F61
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a366434613a3a2f34382d3438203d3e203136393039.roa
Signing time: Sun 25 May 2025 05:18:02 +0000
ROA not before: Sun 25 May 2025 05:13:02 +0000
ROA not after: Sun 24 May 2026 05:18:02 +0000
asID: 16909
IP address blocks: 2a14:7584:6d4a::/48 maxlen: 48
Validation: Failed, certificate revoked on Mon 26 May 2025 20:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5c:6b:38:49:35:0b:19:bc:a6:fa:4d:a4:84:4e:b6:a2:da:c8:6f:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: May 25 05:13:02 2025 GMT
Not After : May 24 05:18:02 2026 GMT
Subject: CN=CB175FBB952A8A9717BB42581A68BF30035D7538
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:f0:75:09:76:8a:bd:b5:b1:52:31:88:c9:4f:
fd:8f:c9:8d:fb:40:99:d9:99:8f:5a:f8:99:44:2e:
58:b8:41:ed:b5:26:75:35:72:85:3f:d9:98:a8:b1:
b6:ec:4f:fc:6b:b6:13:bf:db:6e:62:5b:67:13:9a:
34:42:f0:29:95:d6:f1:a9:15:8c:ca:09:f8:9b:e5:
4d:46:04:34:b3:26:4d:2e:dc:c5:e7:13:1c:c9:0b:
29:71:1a:c1:32:34:d1:fe:0b:f0:ec:42:fd:f7:48:
fb:8c:a0:60:62:4e:35:95:5f:84:2c:96:86:ee:4d:
d4:ab:36:85:50:17:ca:f7:e4:3f:53:50:c5:14:05:
75:e4:d1:22:b3:3e:76:27:04:75:03:fe:7d:bd:5c:
54:22:70:23:35:79:72:d7:37:ce:61:cb:4e:5b:d6:
f2:71:2b:1d:38:20:f5:27:4b:5e:97:8d:1f:63:a5:
3a:2a:5f:ea:82:f2:c6:42:1b:2c:5e:e1:16:18:4f:
9c:68:7f:88:1d:cf:0a:e9:60:2c:72:3e:10:d3:6b:
c2:4b:64:09:62:c7:af:76:6f:08:b2:22:a2:9d:e5:
65:b3:ee:2d:d2:92:75:ca:e0:77:94:cd:bd:96:8d:
c7:b6:84:0d:76:87:5e:89:b3:e2:d2:7f:b1:fb:2f:
e9:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:17:5F:BB:95:2A:8A:97:17:BB:42:58:1A:68:BF:30:03:5D:75:38
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a366434613a3a2f34382d3438203d3e203136393039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:6d4a::/48
Signature Algorithm: sha256WithRSAEncryption
17:96:81:92:50:f9:d3:f2:ec:d6:8d:2e:ed:76:39:cc:62:a7:
5f:a7:33:fa:2f:c3:4c:46:9d:88:cd:8a:b8:21:77:9c:db:17:
26:92:b6:4b:9c:a4:dc:51:27:f5:22:4e:ee:fb:2e:64:a5:d4:
c3:b6:c4:90:04:c8:b1:06:f0:cd:4f:1c:ad:d9:17:e2:a3:30:
a0:4d:6d:37:d2:97:b5:65:5e:b7:cd:fa:6b:af:22:37:11:d5:
94:a3:a9:00:f3:22:c5:99:6b:43:53:50:46:da:04:4d:a1:77:
bd:b2:de:67:0a:ce:0f:3b:ab:b9:32:82:80:0f:25:02:81:b8:
b8:cc:ea:dd:09:21:70:49:1a:68:73:03:59:91:10:6f:a2:f7:
ff:2c:3c:06:fb:e0:86:b1:72:4c:87:6f:5f:f9:da:5c:b1:53:
8e:0e:74:19:b6:be:1f:27:53:48:ec:1b:28:5b:b1:bf:c3:00:
dd:fb:80:2a:98:5e:d5:7c:e0:44:52:a8:69:81:2e:a2:15:44:
be:40:45:cc:e9:cc:79:6b:38:25:01:e5:06:4f:6d:96:6c:e4:
3b:a2:16:f7:38:94:59:9b:9b:03:33:c6:61:90:2f:35:7d:c1:
2c:81:dc:0c:e0:57:49:b6:2c:a2:73:47:4b:00:75:b7:13:48:
f0:a6:6b:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 01:24:26 2025 by rpki-client