Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363233393a3a2f34382d3438203d3e20343031353037.roa
File: 326131343a373538343a363233393a3a2f34382d3438203d3e20343031353037.roa (raw, json)
Hash identifier: UpnI+ZO7squWhoXIKJS+OZxkQ6cTEZjRDsGRu0I6qUM=
Subject key identifier: 43:DB:E2:DC:6D:4F:1C:70:A3:D0:99:E0:12:A8:F7:D2:CA:FA:03:62
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 7B993D2EA60CB1AA0B80467985C03A84574786A4
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363233393a3a2f34382d3438203d3e20343031353037.roa
Signing time: Mon 12 May 2025 16:18:07 +0000
ROA not before: Mon 12 May 2025 16:13:07 +0000
ROA not after: Mon 11 May 2026 16:18:07 +0000
asID: 401507
IP address blocks: 2a14:7584:6239::/48 maxlen: 48
Validation: Failed, certificate revoked on Mon 12 May 2025 22:24:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7b:99:3d:2e:a6:0c:b1:aa:0b:80:46:79:85:c0:3a:84:57:47:86:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: May 12 16:13:07 2025 GMT
Not After : May 11 16:18:07 2026 GMT
Subject: CN=43DBE2DC6D4F1C70A3D099E012A8F7D2CAFA0362
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:0e:46:36:4c:5c:49:dc:94:71:41:f6:48:d5:
3a:e2:d7:e5:7c:26:c6:9c:43:7c:ca:69:77:da:d3:
7e:a0:6c:4a:9a:bb:31:a6:63:aa:c9:aa:ed:8a:5c:
66:c9:90:30:4a:89:ea:9d:8f:f4:ca:9a:d9:11:c1:
8a:42:b1:4f:8c:8a:04:f1:fa:eb:1c:64:f8:e9:c5:
67:cd:23:c5:60:30:36:91:a2:80:30:e6:4a:4a:4c:
cf:ff:7f:e8:a0:f0:9b:4a:46:72:72:cc:70:83:48:
49:55:4c:87:fb:2e:08:e1:02:1a:07:33:79:3a:f4:
72:4d:dc:8b:03:35:50:48:07:75:7f:68:dc:1b:53:
a1:d0:64:0d:7b:c1:7f:2c:f0:6d:9f:b0:9e:be:8c:
20:a0:3b:09:84:66:b0:11:10:44:2c:17:b0:64:1c:
c6:11:95:58:77:fe:b0:35:88:f9:4d:42:67:e8:1b:
24:b0:f8:05:14:01:e5:d1:89:41:21:29:60:1c:c4:
b2:9e:41:fd:46:d9:89:7b:1d:98:00:e2:a1:e3:9c:
01:e6:f0:95:c2:b0:48:fd:57:68:dc:4f:44:3f:c4:
1b:70:1c:1a:d6:34:2c:e9:da:74:ca:4c:62:c8:fc:
94:76:a8:0c:52:19:09:91:78:bb:ff:bb:db:b6:75:
bd:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:DB:E2:DC:6D:4F:1C:70:A3:D0:99:E0:12:A8:F7:D2:CA:FA:03:62
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363233393a3a2f34382d3438203d3e20343031353037.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:6239::/48
Signature Algorithm: sha256WithRSAEncryption
44:4e:be:63:77:62:74:40:c4:55:56:ce:e0:15:ed:0d:f3:c4:
8d:40:1f:fd:e5:b7:cc:7f:97:82:c4:cb:61:99:87:f2:32:d3:
ad:64:97:a2:5b:aa:ab:28:9a:fc:4e:83:6e:12:02:e4:46:ea:
fc:4b:04:15:59:53:0d:68:2b:63:75:f6:90:e2:8e:ab:a9:69:
5c:f9:0c:b7:85:f8:d8:6c:87:fb:be:d8:f0:a0:ff:74:62:c1:
19:ab:c3:c3:5f:b0:53:14:ea:74:75:e0:8f:32:ff:e3:f3:6b:
8d:68:47:67:fe:89:df:92:09:89:17:33:64:57:cd:40:4a:e8:
ff:40:df:4d:77:75:2b:fb:b8:75:59:d5:ab:bf:69:d8:9d:f6:
96:91:5b:a6:89:3d:2b:d8:ef:c3:71:6c:1e:e5:48:a2:cf:2c:
54:cc:ef:e5:a0:be:40:38:f8:d5:c5:97:7f:28:39:05:9a:43:
61:8c:b1:e8:47:53:43:98:a8:51:59:b1:2f:14:d3:0d:f3:c2:
26:52:8c:bf:74:9e:ff:c9:79:b0:3e:b2:7b:e1:40:e8:7a:34:
be:ad:0e:d4:9e:93:59:54:3a:00:a1:46:49:b9:6e:be:1b:8e:
17:de:ef:82:c5:58:04:b8:12:cb:83:20:18:fe:ce:b7:e1:d2:
0a:7c:c8:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 07:36:52 2025 by rpki-client