Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363233663a3a2f34382d3438203d3e20343031353037.roa
File: 326131343a373538343a363233663a3a2f34382d3438203d3e20343031353037.roa (raw, json)
Hash identifier: EpjRm0mWet5IVEKHBMYqAXwpQlwpZ+dmv4dDzsHGN/k=
Subject key identifier: 10:26:A9:B6:51:1D:BF:A3:78:DC:30:6B:88:1A:B2:B7:EC:43:78:C6
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 3428E6991538914348B3F299C706A38771548C1D
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363233663a3a2f34382d3438203d3e20343031353037.roa
Signing time: Mon 12 May 2025 16:18:10 +0000
ROA not before: Mon 12 May 2025 16:13:10 +0000
ROA not after: Mon 11 May 2026 16:18:10 +0000
asID: 401507
IP address blocks: 2a14:7584:623f::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 14 May 2025 05:30:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
34:28:e6:99:15:38:91:43:48:b3:f2:99:c7:06:a3:87:71:54:8c:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: May 12 16:13:10 2025 GMT
Not After : May 11 16:18:10 2026 GMT
Subject: CN=1026A9B6511DBFA378DC306B881AB2B7EC4378C6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:21:48:e2:69:3f:85:e2:9b:18:62:d7:b0:74:
d9:00:5a:28:65:f8:eb:d8:07:71:04:dd:62:3c:b3:
58:c8:98:4b:dd:71:29:fc:80:52:1c:4c:25:55:18:
44:de:e1:da:ac:89:8b:16:a3:0c:37:7d:01:85:d9:
de:47:b1:56:d3:fd:bf:71:c1:47:d5:f4:69:dc:ce:
92:7d:0f:f3:c7:a1:f3:40:83:89:42:d7:d8:dd:2a:
3e:74:39:f3:a4:d2:e2:98:e9:f5:ad:13:d9:97:6d:
4b:ff:c3:c8:35:3a:6c:82:c9:af:b1:ac:6a:44:19:
6c:39:27:fd:24:50:c6:38:88:2e:82:56:b7:f7:be:
d4:5f:72:d9:17:b3:a3:44:a9:26:d1:1b:ce:70:db:
58:da:9c:9d:91:d5:44:02:89:b4:4f:be:b1:e0:de:
c7:f1:e6:a9:e2:d8:a6:9c:fc:be:27:4f:48:98:97:
b6:13:3d:49:cd:03:43:c6:15:b1:03:e1:33:58:37:
fa:74:9b:91:f9:cf:3b:dd:e9:b9:0b:c9:87:53:68:
1c:67:b8:27:bc:c9:60:db:f6:62:16:e2:f7:98:24:
03:38:11:34:16:2e:04:63:ce:9b:42:5c:88:b6:bd:
8e:6d:8d:fe:32:a3:93:02:bc:72:c1:0a:f4:2a:6d:
cd:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:26:A9:B6:51:1D:BF:A3:78:DC:30:6B:88:1A:B2:B7:EC:43:78:C6
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363233663a3a2f34382d3438203d3e20343031353037.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:623f::/48
Signature Algorithm: sha256WithRSAEncryption
56:8f:69:b6:83:1c:1c:0b:e0:2b:5f:c9:17:a6:f7:70:13:cf:
24:69:a8:78:40:fe:c2:8d:92:a6:c9:0c:36:78:94:be:d8:cf:
4e:99:b8:1f:d6:86:7e:cb:3b:d4:c3:91:21:21:cb:a3:da:aa:
d1:70:00:57:fb:6b:05:06:94:79:82:46:a0:15:21:f4:05:78:
f3:31:c6:22:5f:fa:9f:3d:4e:38:89:e4:6b:47:44:67:74:9e:
01:b5:aa:95:da:79:b9:a3:a3:8e:90:13:3f:52:bb:54:d3:86:
76:a9:05:ab:3d:b0:a7:9f:86:48:0d:68:88:55:18:cd:50:4c:
9f:ba:04:fd:bf:51:06:3a:93:16:bc:93:81:e4:09:9c:29:f0:
66:14:de:95:55:1e:94:fd:28:9f:e9:9d:5f:0c:e5:26:7e:5c:
06:bc:39:38:6e:7a:a0:30:c8:30:9c:22:d5:48:4b:af:52:18:
cd:cd:24:a1:aa:83:a5:d5:54:0e:95:ac:93:0c:b8:b4:a3:84:
ca:d0:40:16:0c:32:e3:9c:53:d9:d0:7c:f0:fc:2c:07:9d:ec:
03:11:e0:f7:17:0d:eb:1b:ed:3f:aa:6b:21:b5:bf:a9:ee:d8:
51:85:1b:37:b9:1c:02:cb:7a:16:98:ad:7f:ba:76:76:34:8e:
a1:97:75:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 00:31:43 2025 by rpki-client