Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/AS396968.roa
File: AS396968.roa (raw, json)
Hash identifier: 2/YvGcJSKenocNjw/QeuCzmem99Ykqmw7c/1Q4P2kqA=
Subject key identifier: 2D:12:29:44:8C:7E:5B:52:AC:A2:F8:70:5F:1D:81:97:58:F7:71:56
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 449D736AC478365EA285C20E152EB2FABD038D39
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/AS396968.roa
Signing time: Wed 25 Jun 2025 16:07:47 +0000
ROA not before: Wed 25 Jun 2025 16:02:47 +0000
ROA not after: Wed 24 Jun 2026 16:07:47 +0000
asID: 396968
IP address blocks: 2a14:7581:3500::/40 maxlen: 48
2a14:7581:350d::/48 maxlen: 48
2a14:7581:351a::/48 maxlen: 48
2a14:7581:351f::/48 maxlen: 48
2a14:7581:354c::/48 maxlen: 48
2a14:7581:3553::/48 maxlen: 48
2a14:7581:3558::/48 maxlen: 48
2a14:7581:355c::/48 maxlen: 48
2a14:7581:356a::/48 maxlen: 48
2a14:7581:356b::/48 maxlen: 48
2a14:7581:3578::/48 maxlen: 48
2a14:7581:3579::/48 maxlen: 48
2a14:7581:357b::/48 maxlen: 48
2a14:7581:3581::/48 maxlen: 48
2a14:7581:3582::/48 maxlen: 48
2a14:7581:3585::/48 maxlen: 48
2a14:7581:3587::/48 maxlen: 48
2a14:7581:358b::/48 maxlen: 48
2a14:7581:3592::/48 maxlen: 48
2a14:7581:3598::/48 maxlen: 48
2a14:7581:35a1::/48 maxlen: 48
2a14:7581:35ae::/48 maxlen: 48
2a14:7581:35b4::/48 maxlen: 48
2a14:7581:35c3::/48 maxlen: 48
2a14:7581:35cf::/48 maxlen: 48
2a14:7581:35d0::/48 maxlen: 48
2a14:7581:35d3::/48 maxlen: 48
2a14:7581:35dd::/48 maxlen: 48
2a14:7581:35fc::/48 maxlen: 48
2a14:7584:6000::/36 maxlen: 48
Validation: Failed, certificate revoked on Thu 26 Jun 2025 08:52:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
44:9d:73:6a:c4:78:36:5e:a2:85:c2:0e:15:2e:b2:fa:bd:03:8d:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: Jun 25 16:02:47 2025 GMT
Not After : Jun 24 16:07:47 2026 GMT
Subject: CN=2D1229448C7E5B52ACA2F8705F1D819758F77156
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:7e:94:68:59:e6:f4:6d:a4:6a:8a:50:9c:5b:
27:78:9e:3f:42:1d:75:1d:21:4e:7d:53:09:70:f0:
da:f7:56:9a:e0:e1:e9:4b:ea:d2:52:99:e5:e9:19:
94:46:62:ec:a0:3e:1a:f4:e7:dd:d8:4e:6c:ad:4d:
66:28:9a:9d:d7:6a:8b:df:69:dc:82:96:5f:4b:06:
75:72:29:f8:50:d7:53:de:5f:8e:56:a9:e9:9b:2f:
fb:0d:92:c9:fe:f2:4c:a0:d7:28:8a:ba:60:00:a3:
35:9e:63:88:a8:0a:4e:c0:b8:9a:76:b2:7f:0f:11:
fb:dc:15:96:95:83:03:72:2e:c0:2a:30:6e:96:68:
cc:2a:bc:71:95:2c:ba:ff:c7:7b:56:9e:2b:1e:14:
51:00:b2:53:09:a5:84:57:54:cb:d3:ce:0f:87:09:
e9:79:30:0a:e8:12:8b:a2:a0:da:73:d1:a3:fc:b6:
66:84:3e:69:53:20:5e:cf:7b:84:d6:15:df:85:af:
be:97:37:a5:36:72:46:fb:ff:05:66:c0:42:7b:19:
91:4b:eb:df:2f:1d:82:e5:f9:f9:48:58:f9:bf:4c:
da:73:7c:0a:29:4a:e0:06:89:b1:30:60:c1:56:8d:
03:b4:a2:6c:4e:a4:44:c4:b2:94:01:f4:92:8f:35:
08:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:12:29:44:8C:7E:5B:52:AC:A2:F8:70:5F:1D:81:97:58:F7:71:56
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/AS396968.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7581:3500::/40
2a14:7584:6000::/36
Signature Algorithm: sha256WithRSAEncryption
4c:66:9c:48:49:7c:10:3d:6b:e8:96:e0:0b:8b:c4:cb:e6:d7:
86:99:cb:2c:de:35:76:e2:b4:f3:b7:af:2c:65:aa:64:91:62:
59:8c:fc:cb:ce:05:10:b6:2b:99:0a:e8:33:00:74:04:42:7f:
81:9f:76:22:e2:00:db:37:22:ea:db:23:15:fc:64:72:0a:78:
ca:c0:b3:88:cf:be:b6:6a:2b:f6:17:79:0a:ab:5e:03:84:fa:
81:91:24:9c:c9:d1:40:ab:85:07:a6:1c:8b:0f:66:ac:61:26:
b1:ca:85:85:fa:69:5f:1f:ff:f2:73:74:ea:f6:ab:f2:28:12:
5d:e0:03:0a:87:ec:62:9e:41:6e:09:02:db:46:a7:7f:db:80:
50:68:3f:b0:1c:07:2c:61:fd:82:6c:28:20:da:7e:47:78:4a:
42:ae:45:3c:3c:23:cc:c7:a5:d1:92:f0:27:ff:3e:9c:c2:fa:
40:36:a6:8e:00:a7:2f:26:c2:ef:d9:1a:ff:26:fa:30:9c:ad:
e7:fa:dd:79:3e:77:ea:16:4a:4f:ad:8e:5f:48:ad:46:6b:c4:
87:d6:2d:3e:56:b2:20:e9:09:ce:e2:68:4e:a8:36:2a:8f:0b:
25:be:a0:7c:49:8e:95:f1:27:78:87:e0:10:7a:cd:8a:e9:4d:
d8:b0:c7:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 00:24:32 2025 by rpki-client