Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363234653a3a2f34382d3438203d3e20343031353037.roa
File: 326131343a373538343a363234653a3a2f34382d3438203d3e20343031353037.roa (raw, json)
Hash identifier: bRwBNiS85LDUP29/XZ0GlheJs2qmQXAGKRWA947UJqo=
Subject key identifier: 62:BF:F5:80:83:44:85:4C:71:9A:78:70:70:25:C8:6D:A3:42:FB:77
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 6B79990FCC6C1D6966C57A805B49F53011DA82D9
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363234653a3a2f34382d3438203d3e20343031353037.roa
Signing time: Mon 12 May 2025 16:18:05 +0000
ROA not before: Mon 12 May 2025 16:13:05 +0000
ROA not after: Mon 11 May 2026 16:18:05 +0000
asID: 401507
IP address blocks: 2a14:7584:624e::/48 maxlen: 48
Validation: Failed, certificate revoked on Mon 19 May 2025 06:48:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6b:79:99:0f:cc:6c:1d:69:66:c5:7a:80:5b:49:f5:30:11:da:82:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: May 12 16:13:05 2025 GMT
Not After : May 11 16:18:05 2026 GMT
Subject: CN=62BFF5808344854C719A78707025C86DA342FB77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:27:b1:da:90:4d:36:96:5f:97:19:16:35:f1:
8b:ff:56:a8:a6:74:55:0f:71:f2:60:3a:29:69:de:
03:9a:d3:22:40:f2:95:6a:67:74:e7:3b:89:39:bf:
d9:b3:f3:3c:26:b6:76:90:95:dc:8c:c3:4c:c4:03:
0e:4a:6e:8b:1f:01:95:40:ab:f7:62:3d:12:6e:36:
4e:72:ef:f5:91:3e:36:74:b2:4f:ce:56:86:42:bb:
9c:91:d8:18:96:95:2d:1b:bf:b1:80:ce:5d:d9:33:
6d:3b:17:af:1c:76:26:32:90:e9:8d:cf:fe:4c:2e:
45:c7:8b:10:36:2a:54:4f:8c:39:a4:97:fa:e6:07:
24:1b:86:19:57:80:f2:5d:7f:ce:22:1c:f0:2e:f7:
72:fc:d1:cb:80:97:d2:1f:4f:e4:a8:f2:ce:7a:4b:
a4:b2:ef:78:ed:e6:b7:42:95:1d:d4:8f:d5:90:67:
a0:44:1e:e8:2d:79:b2:d6:4e:7f:be:8b:a7:cf:d5:
ba:4d:91:56:82:16:52:cc:68:e3:41:66:59:49:d6:
42:94:9f:a9:48:48:18:03:3f:70:06:a9:11:95:eb:
38:15:0a:81:d9:3d:47:d7:05:2f:8d:5b:9b:8f:fb:
55:55:62:c6:18:c8:63:84:1d:0d:11:1f:95:0d:e2:
7a:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:BF:F5:80:83:44:85:4C:71:9A:78:70:70:25:C8:6D:A3:42:FB:77
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363234653a3a2f34382d3438203d3e20343031353037.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:624e::/48
Signature Algorithm: sha256WithRSAEncryption
a8:5b:94:d3:16:37:16:56:80:16:4a:4e:66:fa:73:43:56:df:
80:5e:10:89:33:16:5a:db:8a:1b:54:1d:51:41:bb:f5:74:87:
73:bc:20:a5:af:84:69:bc:f1:24:58:21:37:a1:cc:2a:3a:b1:
7f:68:cb:cf:64:11:42:86:94:63:78:67:aa:40:00:b5:13:ee:
79:34:d8:91:a1:5a:88:fb:7c:db:f1:ae:1b:86:d3:fc:98:3b:
a4:48:c8:2d:98:2d:b2:54:12:2a:e7:6e:c3:9f:d1:20:ea:41:
5a:ce:48:89:44:fe:8c:36:f8:60:8e:c2:fc:28:58:4d:dc:9a:
44:e9:46:da:44:ed:7c:a3:5e:7e:fe:c0:92:65:cb:79:f1:74:
3a:a1:a9:7a:83:85:d2:80:12:f4:5d:06:cb:fb:8a:b2:0a:5c:
7a:c1:68:1d:7f:b1:ce:62:45:f7:a8:de:aa:a6:ca:38:62:f3:
c2:4f:52:72:db:46:05:51:41:5f:6c:f4:0e:9a:5d:09:65:d2:
af:31:93:64:61:fa:a7:4e:52:b6:e4:18:59:a9:1c:12:01:5b:
1f:cd:53:5e:39:ae:f7:cd:a9:8d:b9:ec:26:9d:56:a0:52:01:
a6:ac:39:15:22:06:4e:99:39:18:af:3c:10:20:e3:46:f6:20:
37:48:fd:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 05:00:46 2025 by rpki-client