Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a366566313a3a2f34382d3438203d3e203136393039.roa
File: 326131343a373538343a366566313a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier: 2mtM2GzrA3zv9Nr9Uvy2ABWWfl26pgoyzD1gXkAHd0s=
Subject key identifier: 27:05:70:F6:C2:85:24:4C:2E:92:03:92:BA:51:96:DA:29:E4:C4:4A
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 0E8223B3DFC32A3B5172B1A8835E5CF4F07EF46C
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a366566313a3a2f34382d3438203d3e203136393039.roa
Signing time: Fri 30 May 2025 03:30:01 +0000
ROA not before: Fri 30 May 2025 03:25:01 +0000
ROA not after: Fri 29 May 2026 03:30:01 +0000
asID: 16909
IP address blocks: 2a14:7584:6ef1::/48 maxlen: 48
Validation: Failed, certificate revoked on Sat 31 May 2025 17:16:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0e:82:23:b3:df:c3:2a:3b:51:72:b1:a8:83:5e:5c:f4:f0:7e:f4:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: May 30 03:25:01 2025 GMT
Not After : May 29 03:30:01 2026 GMT
Subject: CN=270570F6C285244C2E920392BA5196DA29E4C44A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:cb:94:fd:d8:d6:12:86:59:79:58:43:a9:c4:
96:e0:43:08:ee:e1:fe:96:f7:03:08:f1:f1:b1:32:
e1:e9:c3:f0:7f:f3:72:3e:ce:06:43:21:dc:54:eb:
ca:d4:9b:ca:f4:5b:e8:9b:48:73:f5:6e:8a:31:35:
11:6f:e2:a0:66:39:67:87:d3:4b:e1:ef:9c:63:2f:
c7:04:f7:a2:58:f4:0a:72:ac:38:19:1a:8b:77:8e:
92:ae:7c:7d:73:c1:e5:f8:03:fc:b6:59:7c:e4:7f:
f3:59:c6:2f:ea:38:00:57:eb:63:96:bf:cc:de:c7:
d3:ed:34:1f:b5:ca:6b:08:24:e9:75:8d:62:3a:ad:
53:2e:6f:ac:12:21:b9:9c:12:ba:c7:9f:9d:12:ee:
8b:c6:c0:1b:23:ab:85:d0:26:45:65:d8:fd:44:1d:
b1:6b:8a:b6:56:68:f0:47:0c:8b:d2:96:c8:09:d6:
62:70:34:d8:da:7e:c7:95:f8:d4:64:bb:e8:96:70:
2c:7d:15:50:0d:58:1e:a3:43:ce:6d:0f:99:fe:fa:
77:49:4a:73:ea:45:33:e4:92:70:c3:23:13:5a:22:
19:fa:6d:42:f6:df:cf:2d:4a:08:fb:ad:f0:e7:42:
48:32:88:35:cf:3b:1d:03:99:79:e3:a4:d3:b9:e0:
6c:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:05:70:F6:C2:85:24:4C:2E:92:03:92:BA:51:96:DA:29:E4:C4:4A
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a366566313a3a2f34382d3438203d3e203136393039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:6ef1::/48
Signature Algorithm: sha256WithRSAEncryption
b8:ce:cd:59:6e:0b:b5:3b:6c:c2:0a:68:10:65:45:22:d3:60:
42:68:54:72:08:5f:e8:0a:8f:d5:8e:dd:b7:48:cb:9b:db:cb:
9e:ce:10:81:53:6d:4a:7f:67:79:a1:1e:f5:16:25:9b:ce:8b:
46:69:b9:85:36:45:f0:55:e6:1e:ac:cf:85:48:80:86:ca:7d:
1e:51:93:fd:fb:a2:ba:5f:11:38:21:51:b2:93:44:0f:a8:e4:
8b:43:c3:81:4f:06:7c:ab:0b:1c:b5:51:0e:96:59:a4:38:93:
9c:d4:3f:e0:3b:1a:f8:2d:f6:cb:a3:4b:63:4d:70:60:13:b7:
84:62:0c:7e:b4:cd:03:a4:ea:f1:bd:ab:19:8c:f1:35:ca:92:
3a:e6:dc:fb:25:54:ab:74:eb:71:fb:34:0c:b2:82:e2:16:60:
ae:54:12:96:12:14:c3:f6:4a:fe:56:e4:bd:bc:d0:43:bd:91:
7b:6d:02:fd:5d:85:6b:c0:16:c6:9f:40:80:ce:a6:55:37:aa:
42:e3:06:08:37:80:cd:35:00:7c:d4:a5:d3:62:5b:0f:7f:ed:
5b:df:c6:57:ac:1b:25:00:7b:5a:e8:c4:71:56:f4:6c:1f:1d:
69:a9:cf:0e:c0:99:38:90:b2:fd:3a:b1:95:08:60:ae:2e:75:
d5:dd:53:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 07:38:15 2025 by rpki-client