Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363130663a3a2f34382d3438203d3e20343031353037.roa
File: 326131343a373538343a363130663a3a2f34382d3438203d3e20343031353037.roa (raw, json)
Hash identifier: kRghahMk0DhlG03OcvSoEl49VE9twf8bEpnulWBUC3A=
Subject key identifier: B8:12:2D:89:AD:D9:6B:2D:9E:E7:8E:8F:F3:5C:B4:0C:A5:EB:50:2A
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 50D8337DA1842095FBFF15F8984FDEBE10FC4C93
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363130663a3a2f34382d3438203d3e20343031353037.roa
Signing time: Wed 02 Apr 2025 18:47:19 +0000
ROA not before: Wed 02 Apr 2025 18:42:19 +0000
ROA not after: Wed 01 Apr 2026 18:47:19 +0000
asID: 401507
IP address blocks: 2a14:7584:610f::/48 maxlen: 48
Validation: Failed, certificate revoked on Fri 11 Apr 2025 18:31:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
50:d8:33:7d:a1:84:20:95:fb:ff:15:f8:98:4f:de:be:10:fc:4c:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: Apr 2 18:42:19 2025 GMT
Not After : Apr 1 18:47:19 2026 GMT
Subject: CN=B8122D89ADD96B2D9EE78E8FF35CB40CA5EB502A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:6f:02:0e:b8:f2:d3:fa:f7:5c:45:d1:c2:2d:
31:32:d0:b7:fe:70:d0:aa:a2:e0:0a:ad:21:ff:df:
05:52:a4:03:09:c6:47:9b:05:b6:d4:d9:f1:b1:87:
d6:3a:30:41:37:f2:09:68:0b:82:1e:6a:d1:c5:74:
2c:a6:9d:84:eb:fb:1c:f6:90:98:8e:5e:3d:c2:71:
6c:7a:b4:5f:97:05:85:63:c6:33:95:31:fe:3c:34:
0e:73:3f:74:b0:73:a7:f3:fc:56:e3:21:3e:8d:01:
99:89:80:ef:57:4a:a3:c6:39:77:e6:ff:63:ef:96:
5a:2d:e8:df:ef:0e:4d:0f:3d:8c:9f:27:dd:82:87:
fb:d4:16:f4:c7:3f:f9:21:e1:ae:9b:93:fe:1c:a8:
94:a5:37:65:1b:3c:2d:6e:c4:1f:4b:a9:96:62:3a:
98:7e:db:3e:dc:4a:24:86:02:c9:3e:1d:0e:ee:a6:
10:07:41:be:d8:b0:89:77:f8:cf:2d:b2:35:16:e3:
6a:ae:df:84:18:22:b7:59:99:5d:23:da:e8:96:67:
13:85:49:5e:d7:03:8e:7a:56:b3:5f:e6:a8:98:0f:
fe:64:17:93:c2:3c:a3:c1:75:b2:b8:4c:a6:a5:ab:
6a:a3:c5:2b:c7:7c:04:ec:21:d8:a8:c8:e0:eb:2f:
ec:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:12:2D:89:AD:D9:6B:2D:9E:E7:8E:8F:F3:5C:B4:0C:A5:EB:50:2A
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363130663a3a2f34382d3438203d3e20343031353037.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:610f::/48
Signature Algorithm: sha256WithRSAEncryption
17:9d:62:47:10:5d:fd:b1:d1:e7:4c:f1:76:66:71:3f:97:33:
05:45:4f:25:d3:fd:3a:ea:47:87:0f:a4:31:73:44:d9:83:71:
c4:d4:df:e1:2a:f9:14:06:9b:6e:50:02:49:7c:10:17:10:54:
f5:25:86:db:27:9b:f4:a1:1b:8f:49:bd:82:d0:5a:74:a3:c1:
85:c8:44:df:55:d5:2f:34:e4:4d:6e:69:02:37:3e:6a:a5:9e:
ca:c6:64:85:7d:92:36:23:16:aa:65:4e:60:e1:2b:2b:61:e7:
70:62:27:cb:18:ae:8b:62:f8:05:6e:46:96:19:24:b9:47:c5:
c4:98:52:d4:f5:0d:1d:6f:db:e5:e6:c5:4f:4f:5c:7f:e7:44:
9f:25:39:25:5e:db:b2:19:b0:ec:5e:56:3d:87:33:eb:36:70:
d4:be:a1:41:24:be:7f:8b:c6:42:93:f5:66:27:a4:2c:7f:62:
6d:eb:20:b8:20:5d:53:30:20:aa:31:1c:10:10:9d:82:ff:e8:
fd:98:51:8c:44:44:a1:e1:61:f9:83:b3:9c:6b:f1:27:b1:bd:
d8:a7:3a:00:34:45:5e:a3:29:60:61:c7:79:6d:3e:b2:66:eb:
34:b1:33:64:c5:c8:fb:56:58:8b:ab:93:74:05:ac:e9:29:aa:
7b:e3:a3:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 25 01:01:44 2025 by rpki-client