Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363131643a3a2f34382d3438203d3e20343031353037.roa
File: 326131343a373538343a363131643a3a2f34382d3438203d3e20343031353037.roa (raw, json)
Hash identifier: CfvNiXbVE5wxFk9Ry/ltUwSgWTYQCTa3jtFQmfojClg=
Subject key identifier: 58:18:94:DE:B2:DA:98:80:88:75:40:5D:C4:8E:6F:BB:C3:69:6D:7F
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 334C9A0A75A3C633B1AD46EB4AC0889CF0F2CA49
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363131643a3a2f34382d3438203d3e20343031353037.roa
Signing time: Fri 11 Apr 2025 18:32:16 +0000
ROA not before: Fri 11 Apr 2025 18:27:16 +0000
ROA not after: Fri 10 Apr 2026 18:32:16 +0000
asID: 401507
IP address blocks: 2a14:7584:611d::/48 maxlen: 48
Validation: Failed, certificate revoked on Fri 18 Apr 2025 18:15:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
33:4c:9a:0a:75:a3:c6:33:b1:ad:46:eb:4a:c0:88:9c:f0:f2:ca:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: Apr 11 18:27:16 2025 GMT
Not After : Apr 10 18:32:16 2026 GMT
Subject: CN=581894DEB2DA98808875405DC48E6FBBC3696D7F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:80:86:2e:55:28:06:89:55:d8:31:bb:d9:52:
ae:5f:6c:8d:62:91:4d:af:50:78:86:dc:c3:58:16:
40:6c:25:fa:72:5d:b1:3c:60:92:f1:4f:87:44:95:
7d:f9:c0:12:ab:2e:8d:95:f7:aa:13:97:8e:88:99:
3c:d5:b2:50:b1:0b:8a:80:3b:9d:d3:bd:b0:46:e4:
a5:83:6b:a4:99:cb:47:75:15:c9:39:d5:fb:9d:74:
00:c2:d1:22:34:f8:52:10:19:75:4c:8f:dc:83:4c:
de:94:91:c1:39:e2:2b:5e:66:68:2b:05:ab:79:19:
df:9f:c6:bd:5b:e9:dd:ba:6f:2e:b3:08:7b:27:a3:
c9:31:46:e8:a4:8b:33:49:60:53:46:2c:b1:61:9b:
b4:96:33:c2:88:42:11:f3:2a:a5:9c:b3:0a:40:82:
ef:25:7d:77:dc:36:d9:d9:04:f6:6b:08:95:e1:28:
5b:53:c6:f1:90:9c:8f:ae:3a:ca:8b:dd:42:86:72:
70:f7:ef:76:f4:8e:5d:0d:42:2f:83:65:83:98:9b:
bc:62:1e:81:6b:59:f8:ae:23:17:50:f6:3b:c2:ae:
72:46:f3:15:8b:18:a4:26:5a:10:6c:b3:67:81:ab:
f2:6b:3a:4a:6e:ad:bb:19:c1:90:1b:30:d7:4e:a2:
02:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:18:94:DE:B2:DA:98:80:88:75:40:5D:C4:8E:6F:BB:C3:69:6D:7F
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363131643a3a2f34382d3438203d3e20343031353037.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:611d::/48
Signature Algorithm: sha256WithRSAEncryption
37:0a:3a:5b:72:fa:dc:05:f7:9d:13:3e:2a:ec:4b:3a:bf:e8:
f0:6a:19:1d:cc:4f:ad:b0:6b:a5:f9:fd:ec:67:ac:94:89:25:
d5:45:a6:d0:25:75:d4:8e:1a:ad:e1:12:cf:a1:40:db:16:a9:
ff:81:1f:0b:88:26:d6:15:28:85:c0:2e:db:ae:62:71:a8:31:
04:8f:22:ee:4f:23:ab:e1:a4:83:8b:c8:24:d8:7b:73:e3:c9:
a1:ac:4f:bc:9a:60:6b:88:5b:56:be:55:8b:ec:a2:26:84:0f:
77:30:29:cf:02:15:d5:26:10:43:56:3f:18:9b:dc:c6:8a:6e:
c9:88:90:c2:10:26:7f:1e:f3:3d:28:65:22:ac:ad:a0:ee:ee:
75:f6:5f:0d:b4:20:28:14:f3:5a:30:ba:ec:8b:be:2f:ba:61:
d7:4d:7e:b1:aa:0e:4d:f3:a7:5e:ee:79:d7:56:30:da:a8:8a:
bd:0b:84:44:80:cd:66:08:66:5a:08:7c:3a:db:f7:e0:9b:04:
22:08:db:1d:06:0d:85:8a:b0:e9:d2:65:b5:20:ce:6d:8a:7d:
3d:86:dc:05:5d:1d:81:5d:83:2f:28:2a:22:ab:77:58:10:7f:
ed:dd:f7:0a:8f:7a:ec:93:cb:c7:fc:8b:31:d2:7b:0b:d6:8c:
f2:0f:88:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 00:47:16 2025 by rpki-client