Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538313a333530303a3a2f34302d3438203d3e20333639363938.roa
File: 326131343a373538313a333530303a3a2f34302d3438203d3e20333639363938.roa (raw, json)
Hash identifier: iOBq8vulk+GZ7MHKkIY/BUddSnm62AeDySil5vT4UjE=
Subject key identifier: F4:06:6B:48:F0:C9:B2:4B:86:73:61:15:CA:D8:FA:DB:70:C2:50:76
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 5A4EAFDD2265DB01881845C7C9BD5D9B848C3F31
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538313a333530303a3a2f34302d3438203d3e20333639363938.roa
Signing time: Wed 25 Jun 2025 15:26:01 +0000
ROA not before: Wed 25 Jun 2025 15:21:01 +0000
ROA not after: Wed 24 Jun 2026 15:26:01 +0000
asID: 369698
IP address blocks: 2a14:7581:3500::/40 maxlen: 48
Validation: Failed, certificate revoked on Wed 25 Jun 2025 16:06:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5a:4e:af:dd:22:65:db:01:88:18:45:c7:c9:bd:5d:9b:84:8c:3f:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: Jun 25 15:21:01 2025 GMT
Not After : Jun 24 15:26:01 2026 GMT
Subject: CN=F4066B48F0C9B24B86736115CAD8FADB70C25076
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:08:d5:f4:48:5d:35:54:08:ae:a5:74:1b:12:
32:93:f6:e6:7e:62:18:03:52:f6:33:ca:31:52:87:
7e:95:fd:35:e4:53:a9:00:53:7d:c2:f5:4d:72:bc:
42:1e:f7:77:06:bd:ab:09:2d:37:79:e7:40:f7:d8:
81:9a:39:0c:bc:d2:34:d8:95:5d:32:8c:50:25:59:
de:67:bf:cf:6a:77:31:e3:6d:7e:c7:9f:bb:95:ba:
74:92:e0:28:0e:47:65:fc:20:94:9c:48:a7:2c:67:
f1:cd:0e:4b:7a:05:d5:b2:d4:58:89:5b:f9:a8:0e:
f9:51:bb:1b:8e:fb:00:5a:0b:91:99:5a:0b:e7:17:
f0:8d:3e:92:af:5d:b8:d4:18:f8:3e:5a:ce:6b:e2:
4e:c6:15:b2:ba:3f:4b:ce:5a:9e:e5:91:82:41:e5:
c5:26:8c:ab:90:3e:6a:d6:60:8a:ba:00:41:34:ff:
77:88:da:6f:fb:ec:26:cd:a9:fd:e7:e1:c7:0d:b0:
47:f5:94:bd:25:45:4c:a2:3e:f1:35:39:21:72:f2:
c5:0a:8b:72:fd:93:ad:86:c6:73:22:93:06:3b:12:
a4:ec:24:4e:39:ba:e7:eb:1c:8d:6a:6b:6b:85:26:
02:03:9a:5d:f8:59:37:9e:08:89:f9:45:c9:1b:96:
da:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:06:6B:48:F0:C9:B2:4B:86:73:61:15:CA:D8:FA:DB:70:C2:50:76
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538313a333530303a3a2f34302d3438203d3e20333639363938.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7581:3500::/40
Signature Algorithm: sha256WithRSAEncryption
7c:cf:e7:f5:2b:f8:87:f3:ce:ba:1f:c0:57:c9:d7:ab:de:3d:
8a:33:18:09:f3:25:b6:0a:cb:23:0a:cb:b5:13:04:81:d3:88:
cf:ef:c5:ba:31:b1:3b:8d:f7:9c:d3:d3:05:01:8d:61:ba:1c:
27:6a:92:59:e7:d6:92:07:53:3d:55:71:29:e2:b9:98:f7:ac:
98:6f:5c:19:9a:e4:b7:08:ea:23:8c:f3:2b:06:20:96:55:41:
36:3d:96:49:c4:50:7c:65:37:5a:13:2e:ef:d6:b0:7c:be:35:
76:9e:2c:cb:d7:30:a6:3c:19:c4:32:d2:ea:94:ff:6c:ef:28:
f0:40:a2:c2:1c:9a:d2:89:11:81:82:dc:b4:cd:53:9e:c5:88:
c9:95:66:55:a7:49:96:72:d4:5f:f8:56:ea:d8:f4:b5:c4:92:
d8:51:5b:ce:1e:a7:51:63:0a:c8:0e:96:b8:f6:a0:ba:07:20:
59:9d:76:79:1c:66:a2:b1:e8:ff:37:fe:b9:fd:43:59:7e:01:
24:fb:c7:2c:d8:67:1f:5a:83:f4:fa:6a:0e:94:bb:fc:58:7d:
06:77:88:db:ec:07:7f:40:0f:4c:0a:cb:b5:7d:f8:42:d0:57:
f6:a7:c0:9d:49:dd:74:7a:af:ce:40:01:c2:db:c4:c2:70:c5:
86:d5:5f:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 25 01:01:31 2025 by rpki-client