Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a366165343a3a2f34382d3438203d3e20343031353037.roa
File: 326131343a373538343a366165343a3a2f34382d3438203d3e20343031353037.roa (raw, json)
Hash identifier: wWNLPr8j760bxnUPubBd0JBoqitxhZqEZt8c8UH5/ok=
Subject key identifier: C2:FC:AA:21:5B:78:C4:74:02:C9:4A:11:78:54:89:08:6D:F8:44:E9
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 712AA7BFDDA10EACB9BB38261CA990C9861E2854
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a366165343a3a2f34382d3438203d3e20343031353037.roa
Signing time: Fri 23 May 2025 20:50:57 +0000
ROA not before: Fri 23 May 2025 20:45:57 +0000
ROA not after: Fri 22 May 2026 20:50:57 +0000
asID: 401507
IP address blocks: 2a14:7584:6ae4::/48 maxlen: 48
Validation: Failed, certificate revoked on Tue 27 May 2025 00:18:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
71:2a:a7:bf:dd:a1:0e:ac:b9:bb:38:26:1c:a9:90:c9:86:1e:28:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: May 23 20:45:57 2025 GMT
Not After : May 22 20:50:57 2026 GMT
Subject: CN=C2FCAA215B78C47402C94A11785489086DF844E9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:de:e7:27:11:bc:bf:79:38:4a:71:05:b9:16:
23:01:28:cc:f6:e6:e1:b5:28:52:f8:46:52:b9:b2:
c2:a8:d7:cc:71:fd:4e:72:f1:9a:4c:92:49:db:ca:
c4:2f:e5:80:8c:7b:ec:9c:e3:da:83:cf:f6:49:a1:
f6:da:3f:44:4b:55:c3:c5:fb:4b:43:bd:cb:e8:37:
a1:d6:33:24:10:f0:0e:e4:49:07:22:84:12:5d:ba:
cd:32:60:b6:9a:c5:9c:38:c2:2d:c1:f4:68:d4:23:
eb:ed:44:1b:fc:8b:e3:5e:92:eb:d4:99:5f:2d:10:
26:0d:04:ac:a9:57:a2:8d:e6:6d:ea:2a:8e:01:40:
e9:08:09:e4:f5:b5:bf:84:9f:88:e4:d8:5d:3c:01:
49:f9:58:a8:b6:0a:8d:e4:20:c8:69:88:c3:52:15:
51:cf:e1:9b:0f:b6:e4:93:1b:49:81:f1:30:e9:c3:
f1:2c:58:91:f1:13:9e:60:41:0f:56:d9:a2:33:37:
81:24:80:23:03:2b:1b:28:d5:16:a0:8e:13:da:04:
de:70:fb:0b:b6:06:5f:30:a5:04:b5:f6:30:48:d1:
f2:8c:0a:2f:60:3d:e2:82:04:ba:03:c4:ba:66:8c:
e3:a7:7e:3c:b3:55:3e:ff:a6:5e:ad:20:db:41:8b:
8e:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:FC:AA:21:5B:78:C4:74:02:C9:4A:11:78:54:89:08:6D:F8:44:E9
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a366165343a3a2f34382d3438203d3e20343031353037.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:6ae4::/48
Signature Algorithm: sha256WithRSAEncryption
8a:08:5c:30:c5:43:67:4f:a2:d0:b5:00:3a:1f:fe:40:25:b0:
ee:dc:cd:f0:29:21:55:81:aa:2a:f0:18:7b:14:bd:db:fc:de:
8d:67:aa:48:7f:7f:09:94:b9:45:9d:bd:39:48:2c:e0:ef:4b:
c6:bc:c0:64:55:28:bb:e9:41:76:59:3a:3c:ca:05:99:19:5c:
df:67:18:1a:d3:f0:6e:43:7c:2a:db:3f:ab:42:36:3c:12:4f:
af:29:b6:7c:ac:c8:e1:a2:65:b5:6b:06:5a:bf:2f:70:6d:67:
87:bf:f0:87:ee:bf:ea:1f:16:a6:36:91:e4:d4:90:ad:04:49:
6c:c8:b7:38:99:2e:3a:76:f0:c1:28:6f:ed:79:8a:13:93:50:
f0:ba:ce:f2:7c:82:0a:0a:5c:44:75:28:16:2c:c1:b0:32:d0:
1d:0c:4c:3c:dd:7b:a2:c7:90:52:27:64:50:cc:a2:67:73:0d:
de:df:7d:f8:39:f7:0b:38:4b:cb:03:e0:89:ad:bb:29:95:6c:
97:df:b4:39:5b:03:fa:c4:eb:55:70:3c:c0:8e:76:41:fe:e9:
b4:6b:8f:db:5e:8d:72:fc:00:93:10:cc:db:a2:3c:76:f5:20:
dc:b9:02:a5:38:f6:a6:42:09:a1:92:31:fe:d6:e8:d7:3c:b7:
9b:53:24:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 23 23:53:30 2025 by rpki-client