Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363234633a3a2f34382d3438203d3e20343031353037.roa
File: 326131343a373538343a363234633a3a2f34382d3438203d3e20343031353037.roa (raw, json)
Hash identifier: lwwz+TnqdvTvNeteC2UL7DZnG0mWCa41fGaah9I6wDg=
Subject key identifier: 20:F9:71:A6:DF:09:49:3C:E5:26:5E:DC:9E:49:A7:AF:E6:88:77:DE
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 4B9C14A871CD8F85DB81B92B33BBA4960BB41FBB
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363234633a3a2f34382d3438203d3e20343031353037.roa
Signing time: Mon 12 May 2025 16:18:04 +0000
ROA not before: Mon 12 May 2025 16:13:04 +0000
ROA not after: Mon 11 May 2026 16:18:04 +0000
asID: 401507
IP address blocks: 2a14:7584:624c::/48 maxlen: 48
Validation: Failed, certificate revoked on Sun 18 May 2025 20:36:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4b:9c:14:a8:71:cd:8f:85:db:81:b9:2b:33:bb:a4:96:0b:b4:1f:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: May 12 16:13:04 2025 GMT
Not After : May 11 16:18:04 2026 GMT
Subject: CN=20F971A6DF09493CE5265EDC9E49A7AFE68877DE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:45:90:48:b0:fb:93:af:9c:5f:8f:53:be:c2:
b9:e2:a6:8e:c1:a7:2f:2a:df:6a:1d:a7:b3:ed:cc:
24:ec:a9:36:90:79:f8:54:98:ec:c8:70:57:10:3b:
39:a9:b4:67:51:8e:35:c7:f6:ed:2a:e5:0b:92:a8:
31:98:89:29:5c:4f:ba:18:ca:17:88:c1:bd:ae:b8:
3a:9b:60:78:a9:00:e3:8b:7e:7b:34:39:1a:17:7f:
ca:1b:76:7f:58:11:50:23:e6:d3:49:10:18:02:6a:
5f:0e:ed:03:43:4e:58:58:44:be:80:3a:45:7f:40:
fb:6f:e4:8a:e7:0e:a2:57:b5:0d:00:5e:2a:d5:bf:
2f:6f:44:c2:51:0a:b1:80:4b:cf:36:9b:3a:bc:15:
bd:6f:58:17:19:b7:00:8b:82:79:85:33:1e:43:05:
69:e7:75:17:bb:21:c8:d8:0d:cd:9f:71:2b:b3:75:
cd:30:04:e1:59:de:59:82:57:da:cd:2f:bf:ca:06:
17:fc:a7:29:72:e3:08:75:a3:93:73:21:1e:89:7a:
be:b3:05:28:0b:dd:2c:7e:07:55:dd:bf:c2:23:a9:
53:aa:ed:97:5d:a4:c9:b1:95:14:92:0d:05:10:e7:
5c:86:1c:5f:d7:a8:5f:f2:c1:ef:eb:6d:61:0d:34:
6b:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:F9:71:A6:DF:09:49:3C:E5:26:5E:DC:9E:49:A7:AF:E6:88:77:DE
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363234633a3a2f34382d3438203d3e20343031353037.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:624c::/48
Signature Algorithm: sha256WithRSAEncryption
0a:1d:2a:d3:da:e1:5d:e0:9f:53:85:a0:23:61:31:7b:84:18:
0f:ce:cb:a7:61:87:a5:38:f2:f0:b6:3e:7d:ae:0d:5f:e1:3f:
f2:2a:c4:e6:24:09:54:ac:ae:fc:1e:f6:9f:81:e9:14:58:e8:
46:4d:d1:35:d4:0c:ef:87:a6:07:95:83:09:cf:55:c0:c5:db:
48:7d:45:65:49:f3:d0:92:e9:f1:13:19:9c:23:91:66:d9:05:
e6:a3:98:ca:ac:5d:40:2a:93:6d:a2:94:c7:58:d3:ba:7b:a9:
1c:eb:f5:28:6d:f9:d8:2e:1c:63:03:fb:5e:51:7d:f7:27:eb:
bf:d2:ce:aa:c1:dc:d7:e0:e9:9c:f3:b6:12:ce:23:65:11:ee:
50:67:e5:98:e7:db:e2:80:6c:e9:62:15:27:4a:6e:4f:03:0c:
d2:0c:df:c9:50:bc:7b:f0:3c:41:4b:d3:5b:df:1b:c2:ee:6a:
6d:eb:3a:b7:3c:a1:7a:2b:90:f2:25:50:36:99:c8:be:3d:55:
65:0d:4d:f3:b3:68:6c:65:bf:5c:ca:8b:b9:fd:7a:34:63:92:
c7:bc:36:68:8c:f2:e1:98:ef:6c:4a:ea:10:75:a5:1c:41:49:
86:6c:94:1e:73:33:45:fd:4d:47:37:6e:04:c2:0d:86:25:5b:
37:36:e4:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 07:21:00 2025 by rpki-client