Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363564653a3a2f34382d3438203d3e20343031353037.roa
File: 326131343a373538343a363564653a3a2f34382d3438203d3e20343031353037.roa (raw, json)
Hash identifier: p9eSRWyOXORlQdggVhamyLFM6dCg/ftx8vCxMwITQqA=
Subject key identifier: CB:C2:2E:A1:B3:30:CF:1F:35:7B:10:27:BE:4A:74:FB:E5:97:F9:F6
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 1989D83715791A5FB72CDDD50532015CDE889C95
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363564653a3a2f34382d3438203d3e20343031353037.roa
Signing time: Fri 23 May 2025 20:51:00 +0000
ROA not before: Fri 23 May 2025 20:46:00 +0000
ROA not after: Fri 22 May 2026 20:51:00 +0000
asID: 401507
IP address blocks: 2a14:7584:65de::/48 maxlen: 48
Validation: Failed, certificate revoked on Tue 27 May 2025 20:42:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
19:89:d8:37:15:79:1a:5f:b7:2c:dd:d5:05:32:01:5c:de:88:9c:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: May 23 20:46:00 2025 GMT
Not After : May 22 20:51:00 2026 GMT
Subject: CN=CBC22EA1B330CF1F357B1027BE4A74FBE597F9F6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:41:be:b9:c6:cb:6c:7d:ed:eb:18:c3:49:09:
ea:d6:69:92:1a:5f:d5:0d:bf:f4:ba:37:d5:96:89:
dc:dd:73:31:64:1b:93:aa:64:a0:66:1b:f0:90:4d:
2d:88:15:0d:a7:64:58:0c:d6:6a:5a:9a:2c:c9:f1:
2c:49:81:d7:7f:9d:4f:6c:ab:a3:8c:43:4b:23:fe:
7b:63:9c:0a:0b:41:4c:33:d2:57:45:65:8f:99:05:
3d:2f:e0:e1:37:cd:6e:e5:58:a4:78:a7:54:32:4e:
a4:d2:94:65:b1:4c:61:58:00:1d:8d:c5:e7:19:a1:
62:27:3d:cb:1b:07:30:fa:54:d1:83:50:e0:87:37:
f8:92:a6:7a:65:c6:1d:68:c0:c3:2d:b0:c9:c9:9f:
1f:be:01:d3:dc:a4:4d:05:17:e7:e0:30:f9:83:ce:
ee:d4:21:fa:67:d0:12:57:13:1e:15:c2:37:7e:a7:
6c:a1:27:1d:23:ac:4d:25:15:71:62:89:f7:1b:4b:
7b:84:8d:8d:8e:b0:af:97:8b:f6:50:94:39:22:18:
79:2d:05:f2:42:25:3a:76:05:22:19:4d:be:ce:f3:
d7:9e:77:a1:11:28:c3:2b:ad:c5:65:a2:ca:0a:d1:
01:b9:5b:3c:9d:4f:9e:28:38:c1:49:a1:c9:b7:0e:
57:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:C2:2E:A1:B3:30:CF:1F:35:7B:10:27:BE:4A:74:FB:E5:97:F9:F6
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363564653a3a2f34382d3438203d3e20343031353037.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:65de::/48
Signature Algorithm: sha256WithRSAEncryption
13:f2:5c:fa:0a:4f:11:d1:14:ac:1e:1f:a8:36:49:df:d4:54:
94:ff:3e:17:70:03:6e:71:9f:5a:c2:df:da:68:8a:0e:2b:da:
a4:3b:48:96:b4:22:d4:23:22:37:86:bd:79:b9:78:6f:05:70:
49:a4:3c:ba:b6:da:0e:03:c1:b0:41:cf:9f:c5:f5:43:a6:a5:
21:d1:41:bb:4d:9f:89:95:eb:94:d5:c8:60:6e:79:e2:c6:eb:
53:73:4b:cb:bf:69:dd:73:43:d8:99:89:81:e8:27:4b:a6:82:
5e:03:8a:6e:a9:33:10:09:8c:9a:a8:c4:a2:62:4c:3a:b7:c9:
9d:88:15:8d:13:6f:6a:a3:41:2d:58:69:ee:e4:4e:50:27:56:
be:ee:c6:12:1d:b9:d3:a0:3f:8f:b7:bc:32:60:1a:f6:0a:da:
95:a0:8b:45:88:4a:f5:3e:06:ff:8d:d8:ff:2c:43:87:97:e4:
0a:6a:85:fe:30:5f:75:5b:d8:b1:82:f5:05:a2:44:87:14:98:
cc:7a:38:c4:ed:89:e2:96:43:5f:e7:66:85:f0:ad:fe:07:c0:
57:0e:83:1b:4e:81:ac:86:53:15:65:42:60:f7:34:12:83:6b:
37:b4:2c:9c:6d:b0:17:ec:4b:dc:c3:04:e1:fb:66:84:81:c7:
65:b6:25:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 23 23:53:18 2025 by rpki-client