Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363164373a3a2f34382d3438203d3e20343031353037.roa
File: 326131343a373538343a363164373a3a2f34382d3438203d3e20343031353037.roa (raw, json)
Hash identifier: SO8/MU9yww1Hheuh2v8quEDKY/phEFtJVyT4kE1Y6IE=
Subject key identifier: DE:7F:20:C8:05:21:AD:A4:D4:02:18:9E:74:89:ED:81:4E:43:19:1F
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 7754ADCCC74E95603408605C0A40EFE273E40F9F
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363164373a3a2f34382d3438203d3e20343031353037.roa
Signing time: Mon 12 May 2025 16:18:05 +0000
ROA not before: Mon 12 May 2025 16:13:05 +0000
ROA not after: Mon 11 May 2026 16:18:05 +0000
asID: 401507
IP address blocks: 2a14:7584:61d7::/48 maxlen: 48
Validation: Failed, certificate revoked on Fri 16 May 2025 11:12:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
77:54:ad:cc:c7:4e:95:60:34:08:60:5c:0a:40:ef:e2:73:e4:0f:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: May 12 16:13:05 2025 GMT
Not After : May 11 16:18:05 2026 GMT
Subject: CN=DE7F20C80521ADA4D402189E7489ED814E43191F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:3b:2b:13:50:ee:32:ae:36:29:fd:1a:07:25:
2d:29:38:ae:79:74:d0:2e:bf:7f:30:32:e3:0e:27:
2f:7d:76:c7:d0:a4:cb:0a:58:9c:4f:64:3c:db:29:
57:a3:f5:1d:0a:a2:13:bf:d2:59:39:ac:a7:68:3d:
c7:dc:27:45:ed:ce:f9:8d:1a:cd:16:d1:8c:24:14:
16:c2:3b:79:b1:21:ca:10:dd:09:26:19:5b:e5:03:
00:53:72:0c:c2:ec:37:09:20:f4:37:8b:ea:50:7c:
17:5a:71:02:ee:e8:e6:ca:23:b5:ee:e7:84:ce:a3:
e6:7a:ae:c5:69:7d:a1:fa:61:d1:68:d0:06:48:1b:
d0:b0:75:8f:33:99:c5:41:0a:9e:f5:ba:93:e2:ed:
9d:5c:44:1b:5f:dd:2e:8f:2c:fe:8b:05:28:c4:c5:
86:76:6f:e9:11:f2:9c:c0:b2:1b:89:4b:46:bb:fe:
2a:3b:16:9c:a7:1d:db:d7:a2:c9:37:29:e6:33:00:
46:3e:70:8f:c8:c1:30:d0:94:d9:3a:da:36:a6:98:
59:c6:86:e0:fa:34:78:d0:34:e0:cf:51:ab:b0:d7:
7d:a2:84:6d:6d:06:03:6c:86:aa:9e:7c:1c:d2:73:
30:6e:40:1c:3b:98:0f:f5:72:aa:84:d3:d3:20:5d:
be:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:7F:20:C8:05:21:AD:A4:D4:02:18:9E:74:89:ED:81:4E:43:19:1F
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363164373a3a2f34382d3438203d3e20343031353037.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:61d7::/48
Signature Algorithm: sha256WithRSAEncryption
16:39:fe:66:44:e5:fb:6f:0c:d7:48:47:f0:ea:c2:56:ef:a0:
ef:4b:5f:c8:15:01:b0:7f:a9:4a:aa:f9:83:c6:65:4d:47:b6:
66:94:62:9e:b4:11:ac:55:4c:66:13:f8:4e:eb:6c:b0:0a:08:
71:b4:1b:d8:b9:e3:cb:15:b2:e2:6f:3d:2d:3e:30:ef:b6:07:
0f:32:e9:ae:2f:aa:18:b6:58:00:4f:0e:55:79:06:a0:2d:fd:
b1:b2:29:f9:61:5c:95:4a:ca:20:7f:02:ce:bd:60:6a:ab:85:
b5:23:e5:a7:64:f7:5a:7e:0e:1d:85:61:ab:61:37:41:73:5c:
a3:68:8b:45:e5:14:7c:08:fa:6d:f7:69:36:38:d5:4c:ea:10:
63:41:80:25:c6:47:09:ff:ba:67:4e:68:0c:85:74:ca:3e:19:
4d:36:14:c3:39:93:f8:62:b8:7d:00:db:39:20:f1:1a:75:62:
a3:1a:83:ad:72:58:3e:04:61:cf:7f:8e:ae:c9:9c:ec:30:26:
8f:da:e0:b8:79:c7:f2:6e:c8:98:97:fe:f2:3f:7d:53:85:39:
98:25:49:11:ab:17:5e:c9:75:03:08:fb:6a:d3:d4:dc:ff:c4:
54:d4:1c:d8:70:eb:6e:3e:af:5c:0a:bb:e2:2f:32:ec:14:ac:
91:1b:3d:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 06:34:28 2025 by rpki-client