Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363131323a3a2f34382d3438203d3e20343031353037.roa
File: 326131343a373538343a363131323a3a2f34382d3438203d3e20343031353037.roa (raw, json)
Hash identifier: WkXDO1j0ba2G/JriB/W0ims2XjTeALV2QMv2lkcddkc=
Subject key identifier: D4:0B:E4:42:E0:E2:C4:48:3B:70:5A:71:81:81:0A:A6:BC:00:23:73
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 4163C63FABE75FE4A1DD6D6C962DF8522F367531
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363131323a3a2f34382d3438203d3e20343031353037.roa
Signing time: Wed 02 Apr 2025 18:47:21 +0000
ROA not before: Wed 02 Apr 2025 18:42:21 +0000
ROA not after: Wed 01 Apr 2026 18:47:21 +0000
asID: 401507
IP address blocks: 2a14:7584:6112::/48 maxlen: 48
Validation: Failed, certificate revoked on Fri 11 Apr 2025 18:31:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
41:63:c6:3f:ab:e7:5f:e4:a1:dd:6d:6c:96:2d:f8:52:2f:36:75:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: Apr 2 18:42:21 2025 GMT
Not After : Apr 1 18:47:21 2026 GMT
Subject: CN=D40BE442E0E2C4483B705A7181810AA6BC002373
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:a2:32:68:ea:c1:2b:64:0e:06:1e:a2:ad:6d:
14:53:e3:d3:f1:da:ae:97:16:1f:47:fa:27:cd:86:
29:6d:81:12:0f:0c:65:75:22:94:0b:9e:c2:ba:d0:
a2:2f:c8:53:87:30:5d:03:47:de:32:05:5a:82:5f:
20:fe:a9:86:84:2b:67:6d:5a:62:c5:51:8f:e4:84:
a5:c5:7c:be:e8:07:e2:05:43:d3:0e:4c:42:8c:f0:
ae:7f:fa:7f:d4:85:d5:af:c9:6f:b1:22:b5:66:9d:
87:46:b7:56:51:b2:63:be:48:4f:48:a1:2b:66:81:
da:b3:8c:3d:4e:90:60:e5:6b:38:fd:4b:bc:20:65:
b4:f1:1b:d8:53:b0:2d:bd:d8:af:aa:3d:db:e5:7c:
97:0f:c3:be:2d:9a:e5:e3:61:d5:cc:b3:14:1d:4b:
ae:78:ba:be:39:ec:9d:ab:50:e1:70:84:0b:7a:6c:
94:3f:40:11:20:92:fd:81:96:8d:9e:1a:97:f0:89:
52:2f:fa:06:89:69:2a:30:48:5c:4a:5b:a5:f5:64:
3b:10:af:d2:bd:c7:ef:6e:f7:4b:3f:cb:88:8e:70:
c9:f3:a3:a5:8d:39:79:82:7a:71:85:f1:1a:05:12:
fa:37:ea:4e:5c:83:6f:3d:fa:5b:7e:90:3e:4c:98:
40:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:0B:E4:42:E0:E2:C4:48:3B:70:5A:71:81:81:0A:A6:BC:00:23:73
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363131323a3a2f34382d3438203d3e20343031353037.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:6112::/48
Signature Algorithm: sha256WithRSAEncryption
03:6c:16:e9:20:5b:e7:95:20:3f:84:27:c8:57:1f:76:5e:b2:
d5:7c:7b:c6:8f:03:b9:17:d5:67:7b:8f:83:22:c2:1e:ab:72:
88:ab:79:67:3c:45:e8:6a:fe:95:8b:2a:2a:2c:cc:91:93:b3:
91:18:3a:35:da:2f:05:0b:74:d5:34:9d:75:84:ff:03:c4:98:
84:94:82:fe:94:50:3d:c5:70:35:42:59:a6:c7:e0:3d:1b:16:
71:b3:2d:9e:03:93:53:b0:f1:68:c5:08:b8:18:98:3d:c6:6f:
25:d9:a2:1b:22:18:8e:0f:f6:8e:b6:d1:72:64:cf:f2:f1:4e:
13:ca:38:bd:21:25:ef:a1:b9:24:5d:a8:23:33:41:ad:b7:18:
b4:2d:a3:89:5d:51:c1:56:e5:b4:7e:0b:fa:31:0f:ae:f7:41:
45:36:19:f3:87:55:e2:10:eb:f4:b6:0c:62:34:af:50:28:eb:
12:5a:42:9a:87:be:27:e7:22:6b:14:d4:98:0f:73:e6:da:64:
3d:f9:21:4d:0a:18:e9:29:dd:ea:03:62:b6:d1:6c:c7:a9:be:
c1:f7:04:70:99:65:6f:3d:0c:dd:ae:06:cf:92:79:27:98:05:
00:f0:8c:8a:3a:1c:e1:84:db:0c:b8:2e:b9:ca:59:35:f7:ca:
cd:e7:db:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 25 00:58:24 2025 by rpki-client