Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a366438323a3a2f34382d3438203d3e203136393039.roa
File: 326131343a373538343a366438323a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier: l1kTgVAiCbAcwVte3MjWJ6k7xh2DP3S/JNMK9QzUpzc=
Subject key identifier: DF:E2:A3:58:7C:3C:A3:56:E1:BE:82:B5:A5:48:3B:2E:75:D2:58:61
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 1F10F6AE4869AB2B34813E21BB4C00482AA3DECD
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a366438323a3a2f34382d3438203d3e203136393039.roa
Signing time: Mon 26 May 2025 03:48:01 +0000
ROA not before: Mon 26 May 2025 03:43:01 +0000
ROA not after: Mon 25 May 2026 03:48:01 +0000
asID: 16909
IP address blocks: 2a14:7584:6d82::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 28 May 2025 20:54:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1f:10:f6:ae:48:69:ab:2b:34:81:3e:21:bb:4c:00:48:2a:a3:de:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: May 26 03:43:01 2025 GMT
Not After : May 25 03:48:01 2026 GMT
Subject: CN=DFE2A3587C3CA356E1BE82B5A5483B2E75D25861
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:b6:66:54:18:6c:36:dc:b0:8a:d9:9d:9a:e8:
a9:a8:bc:6e:7b:f0:70:09:08:46:ce:c9:0b:8a:3e:
63:ba:8a:22:4a:15:93:2e:16:7a:d5:9d:92:eb:5c:
b5:10:0f:18:d2:e6:30:bf:08:13:1d:9f:03:eb:55:
82:87:26:77:10:18:59:98:20:72:86:ec:bb:00:96:
55:1a:34:90:78:88:ba:40:47:6b:99:52:20:c8:03:
63:7e:dc:55:d4:dd:2c:9a:6d:92:88:0c:da:67:9c:
05:09:d9:22:e7:ae:14:96:4f:b3:3d:eb:be:ec:f3:
9b:4d:cd:67:6f:c7:e8:b8:96:fd:96:c7:73:98:62:
05:cb:c0:0a:20:47:63:43:5b:c5:e2:13:e3:a9:ab:
50:4e:56:29:c8:9b:96:d8:ba:ff:b7:88:a0:32:31:
c9:89:d9:00:06:5d:08:93:c8:5d:8b:f9:b5:7f:eb:
25:57:3d:b4:55:78:ef:fd:45:f1:04:75:74:bd:d5:
bf:9a:9a:24:cd:a9:2f:54:18:7f:c2:09:71:09:42:
cb:3f:06:ac:91:04:e3:78:ec:75:c4:bc:9d:56:6d:
80:de:f6:11:36:41:f9:87:90:78:89:76:07:90:f1:
88:90:56:f7:c3:66:f4:28:19:0f:13:1f:b7:c3:8b:
b6:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:E2:A3:58:7C:3C:A3:56:E1:BE:82:B5:A5:48:3B:2E:75:D2:58:61
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a366438323a3a2f34382d3438203d3e203136393039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:6d82::/48
Signature Algorithm: sha256WithRSAEncryption
52:a9:67:b5:f6:c4:78:3d:ac:c2:4e:9b:9d:d1:9f:2c:af:53:
a9:fc:a2:66:d1:ff:53:52:0e:19:b4:e8:7f:6c:fb:46:9c:62:
a4:7f:01:18:ff:20:73:b3:26:ec:d1:63:30:1d:be:29:14:be:
52:4b:27:fc:56:41:40:27:25:ce:28:b6:33:a3:07:c0:c3:9d:
99:e0:14:fd:ce:52:6c:9d:40:57:df:e1:b4:5f:a3:8d:ba:32:
59:b8:cc:42:77:de:9d:75:0a:1c:ea:be:2a:87:d7:29:6e:74:
3b:5b:46:08:eb:f8:2c:64:97:34:b0:b5:f0:fe:07:56:29:9a:
f2:76:e1:5d:f9:bb:a4:a8:a4:38:72:35:93:b6:bf:d3:25:38:
72:28:0f:03:98:fe:86:39:aa:19:2c:e8:5d:e7:76:ed:a2:64:
2f:2d:16:db:99:66:c7:61:54:64:6d:1d:c6:49:6b:7b:1e:1b:
26:cc:0e:ea:65:61:2c:35:2a:85:85:2f:7e:4e:b9:f6:6f:22:
d8:1d:c7:88:a4:1c:79:48:7d:1b:6e:83:1f:e9:28:19:41:2f:
48:c8:a8:dd:2d:f2:aa:cb:07:81:ae:62:88:9c:a6:ae:f4:ec:
85:7a:38:96:c5:bf:1a:7f:76:2f:af:b7:5c:76:d2:cb:95:ed:
e6:a3:e8:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 06:36:42 2025 by rpki-client