Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363234383a3a2f34382d3438203d3e20343031353037.roa
File: 326131343a373538343a363234383a3a2f34382d3438203d3e20343031353037.roa (raw, json)
Hash identifier: OvjeQOCTr3E9UYVNm9j/4sgZptiahSPEGoYlaaQo2yw=
Subject key identifier: 30:E5:27:F5:C7:B5:E7:94:4F:F4:64:06:F9:E8:88:17:4F:D9:30:9D
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 1106658FEB9C7DB718C245D7DC2B122A7000868F
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363234383a3a2f34382d3438203d3e20343031353037.roa
Signing time: Mon 12 May 2025 16:18:07 +0000
ROA not before: Mon 12 May 2025 16:13:07 +0000
ROA not after: Mon 11 May 2026 16:18:07 +0000
asID: 401507
IP address blocks: 2a14:7584:6248::/48 maxlen: 48
Validation: Failed, certificate revoked on Sat 17 May 2025 20:30:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
11:06:65:8f:eb:9c:7d:b7:18:c2:45:d7:dc:2b:12:2a:70:00:86:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: May 12 16:13:07 2025 GMT
Not After : May 11 16:18:07 2026 GMT
Subject: CN=30E527F5C7B5E7944FF46406F9E888174FD9309D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:a1:b1:70:c3:ce:92:23:b8:99:63:34:f8:44:
97:cb:21:d9:5f:ca:83:5b:f9:b3:61:8b:b5:0a:73:
a4:54:3c:00:bf:25:78:a5:52:0e:53:8a:c8:7f:20:
e5:a9:7b:2f:1f:47:0d:57:f1:e4:00:bb:f0:00:3d:
8f:fc:2a:11:3e:25:22:07:85:7a:1f:f5:92:38:a2:
a5:ef:67:36:10:7c:67:f1:e8:d1:b8:12:7d:a5:b4:
3b:49:d1:30:48:33:64:d2:8c:55:06:66:6a:e5:96:
8d:66:10:88:75:ad:d0:ec:49:cf:0c:f4:54:95:52:
50:4c:f4:6d:22:81:33:90:84:b9:e4:0d:d0:6b:f4:
0c:dd:4d:1f:2b:18:6d:d8:e5:ca:f3:2b:e7:74:a7:
49:51:04:c0:5f:98:57:8d:96:75:39:8c:99:d1:0c:
bb:70:76:5f:ab:57:c0:20:00:ce:49:0d:10:d3:ae:
d3:d1:d1:a8:f3:a7:e2:f2:34:76:7b:92:17:f8:5e:
6f:b3:73:cf:1a:7c:8f:7b:d4:23:78:22:85:85:8f:
c7:67:39:2c:47:35:e3:43:34:c5:03:86:65:42:de:
e6:3d:66:db:eb:3a:a6:d6:95:ca:1f:38:f5:ab:c6:
8e:0e:1d:d9:51:1b:9a:0b:e9:57:20:f5:e9:f1:02:
6a:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:E5:27:F5:C7:B5:E7:94:4F:F4:64:06:F9:E8:88:17:4F:D9:30:9D
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363234383a3a2f34382d3438203d3e20343031353037.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:6248::/48
Signature Algorithm: sha256WithRSAEncryption
6e:b6:56:cc:4d:ec:f2:38:d6:85:44:4e:fe:df:b0:dc:8b:4c:
b4:fe:30:bd:cb:09:f4:4e:66:be:0b:40:0f:54:ef:8d:d9:54:
e9:94:5f:70:33:fc:67:3b:70:fe:93:ad:93:21:a2:c4:05:5e:
56:12:c8:a1:8e:4d:97:a4:46:5f:ed:42:fb:e3:f4:dd:c4:19:
11:3c:5e:40:5f:78:a7:2c:3b:22:d7:9f:94:51:b0:2b:d0:f2:
5c:03:b8:19:26:c4:1c:77:64:91:7b:5a:e9:99:ce:b2:0f:e4:
98:14:49:65:6d:1b:c1:d1:11:64:ba:33:e2:de:4c:92:90:d4:
39:35:e4:39:fc:c5:4c:35:04:df:a4:9f:fb:e7:e6:96:95:f8:
e9:6d:08:27:a8:be:95:9f:e0:6c:bc:42:cd:8a:59:e5:59:d0:
dc:9c:d0:8f:4a:20:bd:f7:4b:a5:4c:38:db:9f:d4:e6:0a:8c:
ca:e6:a4:f2:23:f8:bc:c3:ad:11:7b:d3:b0:5d:43:8f:2f:c3:
b5:67:1b:3a:12:ed:8d:e9:95:29:53:31:34:b5:8f:93:e5:fe:
91:73:37:46:ed:c7:3d:91:7c:d5:19:ce:1d:27:04:4d:3a:2e:
27:f5:64:79:be:df:76:36:19:5c:9c:fa:b0:ac:5b:6b:08:5d:
98:b9:e6:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 16:38:29 2025 by rpki-client