Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363336633a3a2f34382d3438203d3e20343031353037.roa
File: 326131343a373538343a363336633a3a2f34382d3438203d3e20343031353037.roa (raw, json)
Hash identifier: +S5loFpYmQdSnnR9GDVPvNkbiB0CYn42C0/uI/lEnI8=
Subject key identifier: D3:80:15:48:01:F7:8A:CC:07:3F:6B:6C:82:10:B6:28:B6:AE:6B:3D
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 7C060BD59F669906B06CCE17C409BC75EB52AA4D
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363336633a3a2f34382d3438203d3e20343031353037.roa
Signing time: Fri 23 May 2025 15:42:02 +0000
ROA not before: Fri 23 May 2025 15:37:02 +0000
ROA not after: Fri 22 May 2026 15:42:02 +0000
asID: 401507
IP address blocks: 2a14:7584:636c::/48 maxlen: 48
Validation: Failed, certificate revoked on Mon 26 May 2025 07:36:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7c:06:0b:d5:9f:66:99:06:b0:6c:ce:17:c4:09:bc:75:eb:52:aa:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: May 23 15:37:02 2025 GMT
Not After : May 22 15:42:02 2026 GMT
Subject: CN=D380154801F78ACC073F6B6C8210B628B6AE6B3D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:b8:ac:ca:11:b4:79:fc:01:33:08:0a:fd:8a:
f3:81:e0:30:ea:a6:1f:b5:f3:24:c6:bd:66:5e:da:
6b:36:42:58:ac:ed:45:c3:b7:4a:f1:1a:21:51:cc:
ae:69:fe:b0:74:c2:e3:23:05:a2:b5:e0:93:fb:bc:
0b:d7:41:dc:23:88:62:ae:f1:92:a1:0b:48:6b:f6:
c7:f0:8b:4a:de:8f:8a:88:cb:18:51:36:9a:5b:67:
85:74:0f:e2:0e:e0:12:d7:99:17:be:ce:9c:4b:fa:
59:85:3f:a4:0b:2e:bf:21:2e:f5:9a:cc:f8:e9:ce:
1e:a7:e0:0c:ed:d2:36:b0:f6:0f:21:a8:07:b2:d7:
93:f7:a6:90:c1:8d:de:f2:cb:2c:59:e6:ab:36:5f:
bc:b3:4e:d7:c0:68:c0:8d:11:a1:18:7f:d2:54:03:
67:bf:ac:1a:3e:53:36:ad:99:61:35:23:86:1e:ed:
11:16:b2:72:00:e0:18:00:64:03:f2:e7:3f:94:b8:
d5:56:d3:17:bd:a0:43:83:84:bd:fa:ad:97:b0:a4:
68:2a:e9:65:98:36:11:49:07:cd:9d:ab:51:3b:ed:
95:15:c0:e1:4f:e0:84:68:be:58:64:61:ee:32:2d:
73:b6:c3:46:97:c6:6c:73:db:3a:98:38:cf:bf:ce:
04:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:80:15:48:01:F7:8A:CC:07:3F:6B:6C:82:10:B6:28:B6:AE:6B:3D
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363336633a3a2f34382d3438203d3e20343031353037.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:636c::/48
Signature Algorithm: sha256WithRSAEncryption
7e:fa:4d:be:da:a5:cd:ab:ee:4f:53:9d:5e:c4:24:46:f1:29:
5d:66:46:17:47:e2:e9:b5:3d:f6:9a:07:8f:ad:82:59:2d:3c:
a4:aa:b2:99:35:8f:29:2b:2c:57:a9:85:43:a8:d3:fd:8e:0b:
23:38:a5:66:3e:db:89:b8:4b:c2:19:ca:4f:d4:1b:1a:74:07:
4b:77:d0:aa:f1:ae:7c:c7:e1:a0:0f:ec:24:08:d9:dc:c4:55:
32:9d:9d:3c:2c:e9:5c:ff:da:7d:12:d6:96:fb:45:86:af:97:
1e:22:31:1e:8b:27:f3:79:46:05:ab:0a:05:0c:a7:9b:61:9a:
cc:29:61:60:d9:b9:68:3c:92:7b:d4:34:9e:68:0e:4c:b3:ce:
78:fe:7f:d1:60:e5:d1:b1:f5:39:ca:3a:46:da:3a:a2:c2:c7:
b2:48:4a:32:4e:aa:bc:87:4c:4d:52:77:a2:c3:bb:86:0a:6b:
e2:34:80:9c:1e:f7:61:96:c0:f8:8d:ff:99:f4:b6:59:ac:c8:
b0:de:66:23:e4:e4:a3:4e:bb:4e:e1:67:df:0a:a9:84:b8:bf:
46:e0:51:8a:5e:22:b4:53:fd:65:99:bd:c1:8c:38:23:72:67:
f4:f8:1f:32:12:a2:3a:bd:fa:c2:93:f4:51:8d:12:52:f4:4d:
49:c5:39:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 23 23:53:11 2025 by rpki-client