Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363164353a3a2f34382d3438203d3e20343031353037.roa
File: 326131343a373538343a363164353a3a2f34382d3438203d3e20343031353037.roa (raw, json)
Hash identifier: Szxymr8mj6EyPUIz63wZVmiNZGfAKJ0/lpfkguLql7o=
Subject key identifier: E6:C2:56:C9:DB:C5:AD:A8:3A:D5:3F:C4:AB:10:6E:18:71:3C:26:E3
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 2A774E1F6C25D5F438E0C642B97859C381CA357A
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363164353a3a2f34382d3438203d3e20343031353037.roa
Signing time: Mon 12 May 2025 16:18:03 +0000
ROA not before: Mon 12 May 2025 16:13:03 +0000
ROA not after: Mon 11 May 2026 16:18:03 +0000
asID: 401507
IP address blocks: 2a14:7584:61d5::/48 maxlen: 48
Validation: Failed, certificate revoked on Fri 16 May 2025 00:24:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2a:77:4e:1f:6c:25:d5:f4:38:e0:c6:42:b9:78:59:c3:81:ca:35:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: May 12 16:13:03 2025 GMT
Not After : May 11 16:18:03 2026 GMT
Subject: CN=E6C256C9DBC5ADA83AD53FC4AB106E18713C26E3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:dd:89:0c:4c:15:7b:92:91:c2:82:ac:02:ed:
e0:cf:fb:47:a6:ca:a7:12:6d:7b:93:9f:d8:5a:be:
cb:04:6c:5c:f0:20:de:84:45:a5:59:fb:b1:16:af:
f6:3d:e5:2f:93:bd:bf:6b:69:a1:b1:fe:5b:93:7a:
04:d9:53:c6:f9:28:b0:0d:27:79:01:00:11:f9:6e:
13:d4:20:d6:30:02:23:25:40:6f:da:92:c5:1f:ec:
ac:4b:b4:8d:f0:d5:74:8b:52:ce:05:f4:3f:7d:f4:
2b:a3:2a:67:ed:0f:20:0d:80:66:04:7c:2b:dd:5e:
eb:26:8e:68:e8:94:9a:4a:0e:00:d9:91:f2:03:77:
e1:a4:3f:0f:e6:5a:6a:9a:af:cc:8a:86:60:b3:97:
77:14:7f:3f:f9:e4:b8:17:24:57:a2:c9:89:50:a3:
7d:cd:36:a2:29:5e:35:18:9a:40:32:5e:05:f4:15:
fb:42:26:9f:a9:9a:df:25:96:09:6a:b2:a4:e5:10:
92:0d:f9:b7:06:ae:54:25:b3:87:1d:47:20:33:a0:
4c:a7:27:d9:58:b3:24:93:1e:e7:9d:6f:e8:3b:8e:
f2:4c:b2:e5:5d:2e:b0:b4:08:e4:42:e4:e6:74:06:
b8:a8:14:86:96:a1:29:4a:f6:b5:b0:86:1a:9b:fd:
7f:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:C2:56:C9:DB:C5:AD:A8:3A:D5:3F:C4:AB:10:6E:18:71:3C:26:E3
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363164353a3a2f34382d3438203d3e20343031353037.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:61d5::/48
Signature Algorithm: sha256WithRSAEncryption
82:57:1a:ab:2e:20:1e:54:8c:1a:01:19:06:74:bf:6e:64:28:
d5:4e:1a:1a:46:07:b1:ee:46:64:cd:6a:26:e5:3f:e4:ad:79:
6d:fa:b3:32:3d:37:57:63:42:b1:07:4a:f2:4a:d8:b4:aa:ba:
50:76:1b:56:9f:50:76:ff:68:da:17:4b:5b:7d:a0:20:84:a3:
02:1a:71:90:e6:bf:55:8e:23:ca:b0:5c:76:13:07:80:48:04:
65:dc:70:03:b2:b1:bf:82:d8:fc:c7:b7:c4:c4:ab:ea:7d:66:
bf:d9:80:36:34:26:46:c7:45:30:1b:34:c0:83:dc:fd:1d:0f:
6a:7c:10:a3:e0:8f:60:34:6a:76:c6:b6:18:3e:1b:bf:b2:15:
aa:cd:5c:48:30:45:b0:4a:a5:6f:18:7d:bf:2b:f4:0f:b5:65:
4a:d7:c1:af:3a:37:76:ff:a6:ce:5a:29:17:24:d0:9f:1c:83:
e6:f0:97:71:69:41:bb:c2:db:b3:86:47:46:c7:07:45:7b:f5:
3e:25:d5:73:1e:ef:0e:7d:4e:c0:57:2e:5b:ff:b1:5a:6f:b8:
f3:58:b6:ea:7c:ad:2f:f3:58:e4:80:a2:7f:ca:a7:fd:5d:39:
3e:e0:5f:86:bf:aa:71:58:82:23:4b:b2:21:d9:03:0b:d7:f8:
ff:96:eb:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 06:33:16 2025 by rpki-client