Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a366564323a3a2f34382d3438203d3e203136393039.roa
File: 326131343a373538343a366564323a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier: /gHArhFCz/wYcziHHrLulAZyjCw3UyJEUTCHr3U0rvs=
Subject key identifier: 86:F5:28:FD:16:1C:82:82:53:9F:DE:0D:6B:EA:65:3A:07:E4:09:B1
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 480AE8DC099E3911B0C4515ED8F24DF9903D250E
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a366564323a3a2f34382d3438203d3e203136393039.roa
Signing time: Sun 25 May 2025 02:42:02 +0000
ROA not before: Sun 25 May 2025 02:37:02 +0000
ROA not after: Sun 24 May 2026 02:42:02 +0000
asID: 16909
IP address blocks: 2a14:7584:6ed2::/48 maxlen: 48
Validation: Failed, certificate revoked on Mon 26 May 2025 19:48:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
48:0a:e8:dc:09:9e:39:11:b0:c4:51:5e:d8:f2:4d:f9:90:3d:25:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: May 25 02:37:02 2025 GMT
Not After : May 24 02:42:02 2026 GMT
Subject: CN=86F528FD161C8282539FDE0D6BEA653A07E409B1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:60:90:35:b5:03:d3:47:f5:59:1a:03:00:f1:
ce:3b:fb:3b:be:bc:37:6a:74:8e:ee:a1:14:f7:2d:
c4:1e:7f:25:5f:91:63:77:69:ce:f6:08:be:1d:a3:
26:9c:1f:be:00:cf:50:50:0d:43:65:8f:34:94:4d:
d4:51:89:c9:c2:c3:90:cd:c0:a5:25:b1:53:3c:85:
51:26:a3:a5:56:3c:47:7a:7d:e4:96:67:49:e0:e6:
2a:40:b4:d7:0a:d9:97:93:70:b4:95:e1:59:07:4d:
43:d9:1e:79:71:71:d6:e3:2e:c1:6f:e7:a5:26:ec:
2c:bb:61:fc:a5:b4:51:a2:99:5c:83:75:58:17:8b:
e9:09:c0:29:17:a7:83:a4:f7:48:71:b2:bb:8f:26:
8c:79:58:39:14:5a:05:03:34:0b:24:32:b1:92:9f:
94:b1:33:a4:06:ed:1a:ed:b8:a4:e7:27:01:eb:9c:
65:72:0a:4d:4c:d3:af:37:f9:9b:b6:97:ab:9a:ea:
b7:44:82:4e:cc:65:47:c8:8a:dd:c8:7d:e7:e6:92:
21:3b:8c:32:98:37:d5:39:f3:b7:26:b9:bf:99:8d:
bf:0e:52:48:b0:97:76:b7:e4:90:b6:b6:46:36:7f:
e8:7c:fd:79:3e:d8:97:c5:26:43:26:f9:72:0f:64:
ae:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:F5:28:FD:16:1C:82:82:53:9F:DE:0D:6B:EA:65:3A:07:E4:09:B1
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a366564323a3a2f34382d3438203d3e203136393039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:6ed2::/48
Signature Algorithm: sha256WithRSAEncryption
92:34:3c:b7:79:c8:68:07:b9:32:c0:83:d6:c1:17:ec:f1:58:
77:6b:c9:c6:e9:79:e7:ba:06:d4:e4:4b:78:d0:0b:50:03:83:
8c:85:73:9f:bb:e9:d9:91:cc:93:39:87:45:b4:9e:f6:e3:35:
e5:c9:d0:4f:1c:38:df:46:9c:3d:a4:09:13:8f:64:ca:1b:0b:
e9:3f:6a:ad:36:7a:6d:21:5e:25:10:87:56:c0:0c:97:03:02:
e3:62:7c:b2:21:55:c4:6d:79:98:86:a9:8b:d2:59:fc:8b:99:
49:69:a3:67:7a:76:31:c1:0d:1d:1f:ed:3a:92:15:42:f0:80:
f5:c2:01:d4:a2:2f:5f:4f:b9:9f:c6:6e:3b:1a:be:11:c1:72:
9d:5d:4b:06:f2:d8:61:1c:1f:4c:07:5a:b7:98:98:da:4e:85:
e3:35:e3:84:a8:f5:b2:e1:bf:cf:1c:63:8c:cb:bf:ee:74:d9:
38:9a:f4:94:d3:b8:10:ca:09:0e:f7:d7:f6:79:d9:c2:78:4c:
99:67:32:99:83:73:a1:5d:43:f7:39:ea:49:e9:f6:5a:70:b8:
75:7b:b1:2c:76:d2:1b:93:8c:b0:a3:a9:35:b4:ca:fe:a6:be:
4a:cb:fa:5b:8c:4a:d0:33:76:d6:e0:f0:4c:35:28:77:b6:67:
a6:aa:8a:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 12:44:31 2025 by rpki-client