Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363164323a3a2f34382d3438203d3e20343031353037.roa
File: 326131343a373538343a363164323a3a2f34382d3438203d3e20343031353037.roa (raw, json)
Hash identifier: Xg/pCVjhUxDGcYwUGebE2kZFcVMAtLAftBndoHsiWV4=
Subject key identifier: F7:BF:31:9F:07:57:72:24:17:B5:5E:BE:5C:EA:5B:1E:1A:61:0D:64
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 2480EF48F17F2C7D5C8D158E6F3FD505468B4178
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363164323a3a2f34382d3438203d3e20343031353037.roa
Signing time: Mon 12 May 2025 16:18:08 +0000
ROA not before: Mon 12 May 2025 16:13:08 +0000
ROA not after: Mon 11 May 2026 16:18:08 +0000
asID: 401507
IP address blocks: 2a14:7584:61d2::/48 maxlen: 48
Validation: Failed, certificate revoked on Thu 15 May 2025 08:12:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
24:80:ef:48:f1:7f:2c:7d:5c:8d:15:8e:6f:3f:d5:05:46:8b:41:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: May 12 16:13:08 2025 GMT
Not After : May 11 16:18:08 2026 GMT
Subject: CN=F7BF319F0757722417B55EBE5CEA5B1E1A610D64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:c6:48:60:f6:c3:a9:71:2e:ef:18:ab:b7:8d:
df:42:ab:f2:3f:32:d5:1f:12:ec:33:05:03:0e:81:
82:28:74:aa:96:c1:cb:47:8d:50:f7:00:c2:9e:c9:
28:3b:ae:2a:7e:7d:f1:d2:9d:ea:0b:78:a8:74:92:
8b:96:de:b1:d2:02:02:9c:03:4f:32:b2:9a:4b:dc:
ce:e2:06:38:d5:6e:f7:bc:3e:7f:eb:db:4e:a9:85:
ef:70:c9:4d:c5:4c:ca:c2:9a:2a:26:70:b3:32:02:
ad:45:d3:29:e8:2e:10:d0:d0:cc:eb:ff:d2:a8:dc:
ed:1c:f6:48:54:4c:dd:85:de:ce:c7:80:aa:d4:13:
8d:bb:d3:4a:18:53:e7:5a:cd:84:18:2d:7d:f0:06:
ce:87:ce:99:81:84:2c:53:83:1a:db:57:56:06:42:
81:15:3b:f0:28:a4:ac:97:a4:48:e2:59:eb:67:45:
4a:53:0a:0d:25:f8:7a:c7:67:7b:cd:a8:36:73:01:
bc:b5:59:f6:ca:dd:2a:54:de:03:02:8d:0d:b0:d2:
be:d9:85:98:81:b2:69:69:2d:dc:c1:ab:38:43:b1:
45:b2:ef:b7:8b:e9:b9:31:9d:02:9c:8c:a2:db:dc:
0f:76:9b:46:56:8d:01:f2:1b:b7:e2:21:1c:aa:a6:
3c:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:BF:31:9F:07:57:72:24:17:B5:5E:BE:5C:EA:5B:1E:1A:61:0D:64
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363164323a3a2f34382d3438203d3e20343031353037.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:61d2::/48
Signature Algorithm: sha256WithRSAEncryption
04:29:8e:27:dd:41:b3:b4:ff:8b:ed:96:37:98:77:1b:30:69:
8e:99:c7:88:81:a9:c9:66:90:6c:72:95:71:f7:52:1a:3f:26:
15:4a:0a:dc:c5:99:1c:cb:df:23:e4:62:63:ff:10:67:b1:eb:
7e:c0:3d:74:9e:52:0f:db:ba:b8:b0:c8:de:2c:88:9e:ce:8a:
31:f3:57:e2:9e:e2:93:64:09:07:54:05:54:30:0f:c1:1c:63:
cc:6d:85:d8:53:1d:ed:3f:5a:66:13:41:28:75:4b:53:09:20:
6f:14:85:bd:61:d6:b0:33:b5:b4:ce:84:5f:28:31:27:20:ce:
fc:ce:12:9f:71:ee:fe:4d:1f:a1:dc:4a:89:27:62:b7:1f:a4:
3e:20:89:8b:e9:36:c2:66:d5:fa:2d:92:25:94:be:2e:d0:2c:
de:06:2f:f6:9f:dd:9e:1b:65:be:c3:a6:c4:77:31:be:1c:6a:
ff:04:fa:b0:e7:83:b6:11:ab:33:25:4b:fa:00:1c:cb:7a:e0:
66:77:74:0d:a7:a5:f3:34:72:ed:79:f3:aa:28:68:fa:ef:69:
77:ec:d5:3c:d6:98:f5:01:b7:67:33:5c:67:5d:95:39:2d:80:
ba:d6:87:d3:dd:3a:56:ca:2d:ee:eb:8d:77:e9:f2:9c:93:e5:
38:75:c9:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 23 23:55:29 2025 by rpki-client