Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a366438383a3a2f34382d3438203d3e203136393039.roa
File: 326131343a373538343a366438383a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier: 6ojRY0ZK46kIke+u9woErmGnxrI/0b7TBBgmvR5tEWo=
Subject key identifier: A7:F5:1C:2B:A8:70:3F:80:EA:52:05:38:BD:D0:D7:00:6C:12:05:D8
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 5879B56437FC03AAA784E0DE4ADA44C9DE33BAD6
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a366438383a3a2f34382d3438203d3e203136393039.roa
Signing time: Wed 28 May 2025 21:00:02 +0000
ROA not before: Wed 28 May 2025 20:55:02 +0000
ROA not after: Wed 27 May 2026 21:00:02 +0000
asID: 16909
IP address blocks: 2a14:7584:6d88::/48 maxlen: 48
Validation: Failed, certificate revoked on Sat 31 May 2025 16:36:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
58:79:b5:64:37:fc:03:aa:a7:84:e0:de:4a:da:44:c9:de:33:ba:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: May 28 20:55:02 2025 GMT
Not After : May 27 21:00:02 2026 GMT
Subject: CN=A7F51C2BA8703F80EA520538BDD0D7006C1205D8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:f1:69:98:26:65:fa:b7:4e:4f:70:1e:95:87:
65:bc:57:04:45:06:85:c5:76:19:83:d3:9b:3c:71:
cb:c5:10:d2:a7:f5:6a:41:36:6a:77:1e:6d:e9:d7:
25:43:27:39:7a:3a:6c:ae:d9:09:d7:62:be:60:67:
2d:cf:4c:8b:0a:57:6c:74:54:c4:79:72:6d:4a:ad:
59:69:34:9e:5b:5b:db:7b:3d:94:bf:c9:48:02:0b:
f6:38:b5:65:09:02:4b:2b:80:c1:91:61:a4:6f:9d:
08:2a:08:a2:b8:21:18:dc:c5:d3:43:77:15:12:80:
c6:68:e8:3b:11:55:33:f8:42:56:2e:b6:f2:09:83:
ae:99:88:09:95:9a:37:2d:8c:1c:1d:b3:25:c5:7c:
36:28:0a:6b:c5:69:46:c2:ef:0f:4c:7c:0c:85:e3:
fc:60:bb:44:6c:6e:fc:3d:10:af:8a:48:60:c7:91:
63:59:40:32:fd:01:e3:2e:76:9a:63:1c:cc:53:50:
c0:12:1c:6f:25:b0:15:96:cc:0f:ce:08:3e:0c:23:
93:6a:00:b5:65:30:fc:4f:3c:80:f6:e0:08:ed:6a:
7d:fd:df:ef:32:a2:fc:2a:5d:c2:3a:9e:5b:53:7a:
47:f4:46:67:28:fd:08:b8:e2:a3:49:87:c4:a2:38:
e1:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:F5:1C:2B:A8:70:3F:80:EA:52:05:38:BD:D0:D7:00:6C:12:05:D8
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a366438383a3a2f34382d3438203d3e203136393039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:6d88::/48
Signature Algorithm: sha256WithRSAEncryption
19:6f:15:80:b9:4d:03:d1:b1:fa:b8:a5:58:46:23:42:10:4f:
31:49:5f:b9:83:51:27:14:0b:32:59:f3:d8:be:ab:56:bc:12:
ea:b5:81:4f:c4:08:fc:0b:c1:87:22:c2:92:33:22:df:f4:b6:
20:fb:17:ff:a6:78:49:02:56:68:e8:7d:35:9b:80:52:28:eb:
58:4b:ec:84:20:86:45:58:45:ed:11:b0:09:8b:3d:69:03:dc:
fd:74:db:d9:36:a1:69:2f:69:53:2b:dd:85:6f:22:4f:5d:03:
bf:6f:ed:39:91:5d:c4:5f:7b:d0:54:b7:35:06:ce:35:c0:97:
85:0b:4a:f3:2a:0f:fc:64:d7:32:1a:e3:0a:42:ef:7f:72:9f:
31:c4:3e:93:72:82:87:d2:89:a3:12:a0:36:e1:3d:22:00:5b:
a3:18:ab:27:a7:d4:d3:e5:6a:89:4e:c5:0a:6c:f2:7b:95:57:
99:a1:42:10:af:d2:cd:7b:8c:9b:c4:e5:63:7b:37:89:ac:1b:
e5:a4:99:86:41:a9:e4:2b:e4:cc:43:2e:fd:f4:ef:85:df:75:
c8:88:b9:c8:ea:8b:1b:4a:1f:94:95:e8:95:f7:af:07:e2:a4:
22:10:7c:35:dc:48:4a:4f:ff:ba:86:22:4a:cd:18:19:45:40:
5c:7e:8f:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 14:50:17 2025 by rpki-client