Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a366666313a3a2f34382d3438203d3e203136393039.roa
File: 326131343a373538343a366666313a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier: fwgW7zLqehWj7BbWHyNJX/CCwubBWilLN+/qNiFtvnU=
Subject key identifier: D0:11:BC:F4:C7:90:08:5A:C4:53:AE:10:0E:61:C7:B1:8F:24:1B:9A
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 40B67A1F4A294BA41F3ECD9CCD18EDF8AB8233D6
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a366666313a3a2f34382d3438203d3e203136393039.roa
Signing time: Mon 26 May 2025 20:06:02 +0000
ROA not before: Mon 26 May 2025 20:01:02 +0000
ROA not after: Mon 25 May 2026 20:06:02 +0000
asID: 16909
IP address blocks: 2a14:7584:6ff1::/48 maxlen: 48
Validation: Failed, certificate revoked on Thu 29 May 2025 13:18:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
40:b6:7a:1f:4a:29:4b:a4:1f:3e:cd:9c:cd:18:ed:f8:ab:82:33:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: May 26 20:01:02 2025 GMT
Not After : May 25 20:06:02 2026 GMT
Subject: CN=D011BCF4C790085AC453AE100E61C7B18F241B9A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:2d:10:9a:8b:5b:3a:e2:64:86:9d:02:45:5d:
2d:a2:09:11:fe:8c:b2:39:0c:e9:5e:63:e6:79:06:
e4:d9:ba:bb:e7:77:4f:44:1e:26:f8:75:06:b8:80:
f1:27:7f:74:1e:9d:5f:ab:98:e7:c6:75:0a:b6:c4:
7f:df:92:26:aa:1a:bd:60:4e:01:48:0b:cf:2c:ea:
fe:4b:25:8b:1d:08:0b:79:f8:01:b6:de:ab:33:16:
a6:6b:0d:82:57:d2:83:69:fd:1d:6e:ea:b6:44:fe:
bb:3b:5d:ba:73:f6:b6:ba:8e:61:26:61:dd:fc:0a:
2a:95:66:b6:28:ea:e8:d8:d5:63:90:79:36:0f:26:
82:c9:04:7f:1b:44:16:75:7f:7a:ad:fb:b1:56:37:
68:79:93:97:13:41:51:8d:28:e8:2c:40:40:a7:ad:
3a:e1:07:b0:07:fc:a1:84:8c:d3:11:a3:19:e4:ad:
b9:02:05:63:b9:84:fa:84:b0:21:aa:1b:d4:32:7c:
8c:96:a1:63:05:22:80:b1:27:bc:d5:e6:ec:69:12:
66:75:e8:8c:2f:03:a0:9d:fb:3a:d1:3a:47:a9:cc:
cd:52:59:07:f2:e5:d2:eb:57:80:27:72:c4:fd:0b:
7b:cb:9e:fc:4b:0e:26:0c:fd:c7:e8:50:51:40:ea:
da:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:11:BC:F4:C7:90:08:5A:C4:53:AE:10:0E:61:C7:B1:8F:24:1B:9A
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a366666313a3a2f34382d3438203d3e203136393039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:6ff1::/48
Signature Algorithm: sha256WithRSAEncryption
99:b8:e1:73:b7:28:0c:6a:46:2a:00:74:73:ad:d4:9c:4c:3d:
ac:8f:bb:db:e8:d6:1f:24:74:83:a5:9d:ae:41:0c:14:52:8b:
fe:8d:00:c2:6c:83:6d:73:b8:31:7d:d7:52:2e:c0:01:f1:50:
bc:19:44:fa:df:09:6f:dc:0e:f7:96:8a:31:1e:3e:d5:45:23:
51:20:8b:77:d4:a7:23:20:5d:58:00:7a:07:e6:d8:57:29:2c:
8b:a4:bc:40:2b:42:f7:21:fd:36:25:5a:b7:34:95:ad:ad:58:
91:9f:95:b8:6c:c7:e0:aa:99:26:8a:34:42:5b:78:77:48:d0:
5e:4f:25:56:e1:5d:6a:57:24:6b:f5:ad:2b:14:45:56:ec:36:
e9:50:b7:dc:c2:d4:da:0e:4c:eb:ce:ac:dd:4c:f3:15:2d:80:
10:05:06:4c:06:7b:9e:1f:ce:e9:24:6f:3e:cb:63:3d:2d:cc:
9e:56:04:af:7e:90:a0:43:95:6d:a1:1c:ce:52:71:6f:89:b8:
37:62:11:89:99:d1:5b:a7:85:59:8e:45:46:52:75:f5:65:d2:
cd:57:c9:41:8f:a4:72:d4:49:94:46:5f:b8:d5:b2:d9:09:81:
fe:73:4d:52:11:43:6c:b6:7a:d0:7f:83:70:57:5c:b8:ad:56:
d6:a7:79:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 07:45:51 2025 by rpki-client