Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538313a333538333a3a2f34382d3438203d3e20343031353037.roa
File: 326131343a373538313a333538333a3a2f34382d3438203d3e20343031353037.roa (raw, json)
Hash identifier: kDL0SwCS6M6Qk0mi5bJPpO8+dVuNiATkcTwohEQjlmQ=
Subject key identifier: E0:92:99:82:D4:C6:D9:83:B9:28:0D:85:D1:5C:91:42:78:E7:DF:74
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 2B6CD833F4A5319EE5C234C5156D669FC272E10F
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538313a333538333a3a2f34382d3438203d3e20343031353037.roa
Signing time: Fri 20 Jun 2025 06:24:42 +0000
ROA not before: Fri 20 Jun 2025 06:19:42 +0000
ROA not after: Fri 19 Jun 2026 06:24:42 +0000
asID: 401507
IP address blocks: 2a14:7581:3583::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 25 Jun 2025 16:06:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2b:6c:d8:33:f4:a5:31:9e:e5:c2:34:c5:15:6d:66:9f:c2:72:e1:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: Jun 20 06:19:42 2025 GMT
Not After : Jun 19 06:24:42 2026 GMT
Subject: CN=E0929982D4C6D983B9280D85D15C914278E7DF74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:d1:32:56:87:f9:b4:34:b5:1d:a3:24:cd:99:
e3:8e:5b:4d:e2:93:c8:2b:9b:0c:4f:c5:03:28:77:
42:75:41:61:f5:ea:a5:0f:2e:1e:ba:3f:85:fb:63:
92:5b:f0:c2:84:f9:a9:00:4a:00:06:2b:9c:25:de:
42:50:5e:80:3e:df:ac:93:bf:fc:53:92:95:cc:68:
dd:8d:fe:bf:fa:8f:a9:b3:66:fb:bc:e4:47:a7:b3:
86:4e:7f:1e:d6:97:26:7d:ca:10:79:aa:27:a0:21:
01:74:1b:ed:04:52:4b:d7:d0:fb:45:e0:d8:56:21:
91:40:e0:a2:0e:cb:eb:f8:81:09:6b:87:9f:23:b8:
2a:73:ef:c1:3e:a3:55:96:72:63:2a:de:77:2e:a3:
d6:d0:ec:44:c7:69:1a:f7:e6:1c:ca:32:ac:03:1c:
4f:38:96:1a:77:46:f1:4d:99:5e:cc:d1:51:8f:e0:
80:4b:b0:52:48:7f:e5:86:6f:cc:18:bd:e9:89:b1:
c1:9d:ca:d0:1a:d5:55:3e:a4:2f:24:32:27:01:d0:
e6:c9:45:36:f1:25:e6:6f:db:06:13:63:39:8b:ee:
8d:fd:32:e1:4e:bd:bc:2b:56:ad:b9:a1:fa:60:3b:
06:24:ff:bf:c3:37:be:a4:a9:55:0a:40:90:22:7e:
36:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:92:99:82:D4:C6:D9:83:B9:28:0D:85:D1:5C:91:42:78:E7:DF:74
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538313a333538333a3a2f34382d3438203d3e20343031353037.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7581:3583::/48
Signature Algorithm: sha256WithRSAEncryption
5d:61:10:98:2d:25:93:f9:ea:bf:f2:60:e7:47:55:ea:f8:2c:
4a:db:a9:a3:af:76:0c:d6:95:a6:71:9f:00:24:08:b8:fa:8f:
2d:18:b7:47:1f:31:04:a4:c0:8b:20:07:d6:f8:02:6c:51:21:
b0:10:5d:b3:10:e6:f8:19:a2:3d:33:73:f1:45:3e:63:37:10:
67:26:3c:72:a0:44:32:ca:87:ca:96:9f:b0:57:ed:12:e9:7c:
7c:f7:a5:ac:d1:00:26:ad:22:f7:9b:a9:c0:55:e8:d0:2d:0d:
f5:0f:5c:c1:7d:d8:d3:a6:2a:20:34:2f:ae:44:e4:88:f2:c5:
bc:1d:df:37:52:8f:7f:b0:9e:4c:c2:8b:17:cf:3e:38:c9:86:
b5:5e:cf:c4:d5:bf:50:cd:78:80:76:93:be:bd:54:7b:de:e8:
50:79:7b:d2:23:5b:ed:d7:37:8c:34:d0:00:c3:0d:2b:8a:7a:
d4:c9:42:de:c7:5f:f7:3f:09:68:1d:0b:7d:2d:ab:d9:19:e8:
aa:a6:95:84:ab:82:fe:b1:87:b3:c4:bb:0d:5e:f1:90:2d:11:
99:19:ad:aa:a4:4a:eb:89:26:34:b1:7b:63:1f:d2:5d:a5:9a:
3c:04:be:59:39:62:2e:ee:ec:12:80:6d:5b:ed:3b:af:d6:4b:
5e:60:26:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 25 01:03:19 2025 by rpki-client