Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363235333a3a2f34382d3438203d3e20343031353037.roa
File: 326131343a373538343a363235333a3a2f34382d3438203d3e20343031353037.roa (raw, json)
Hash identifier: TDalZk8LGKxkZtC5MGQjuWsM+J5t7t+IT95DAe2qe2M=
Subject key identifier: 44:F3:10:A8:D8:4A:C8:8B:25:E2:07:1A:10:E4:FC:19:BC:6F:62:30
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 432F41299C3B26D220D9740448CA2891E4AFC2CE
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363235333a3a2f34382d3438203d3e20343031353037.roa
Signing time: Mon 12 May 2025 16:18:07 +0000
ROA not before: Mon 12 May 2025 16:13:07 +0000
ROA not after: Mon 11 May 2026 16:18:07 +0000
asID: 401507
IP address blocks: 2a14:7584:6253::/48 maxlen: 48
Validation: Failed, certificate revoked on Tue 20 May 2025 05:30:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
43:2f:41:29:9c:3b:26:d2:20:d9:74:04:48:ca:28:91:e4:af:c2:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: May 12 16:13:07 2025 GMT
Not After : May 11 16:18:07 2026 GMT
Subject: CN=44F310A8D84AC88B25E2071A10E4FC19BC6F6230
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:c4:21:dd:8a:17:af:78:9c:74:a9:b7:9e:51:
fd:26:d3:9c:43:a4:da:82:ef:1d:0f:e6:57:15:bc:
0f:48:92:28:d9:9a:ff:42:ea:a7:fd:3c:bc:0b:72:
b6:6e:fd:c8:18:03:82:5a:1f:a3:65:40:62:25:99:
f7:ab:79:06:f7:93:a2:ad:a6:5e:f3:e3:37:91:06:
d2:48:45:6f:ba:f9:04:5a:ab:b1:1e:2b:ad:87:2b:
b3:49:d4:8c:c0:0d:14:ff:01:c3:5c:b7:de:cf:05:
23:f6:6f:25:3e:f1:5f:bd:65:f4:a7:dc:5f:b6:36:
00:9a:fa:66:bf:36:b7:6e:dc:1d:a3:f0:cb:a1:7f:
68:b2:12:b7:7d:f9:56:31:7e:6d:d1:51:41:f2:4a:
c1:73:be:bb:12:5a:6a:d2:f0:ad:e3:5c:dd:2d:a9:
c0:d1:41:e4:e4:fd:e2:15:14:f3:c6:02:fd:7b:d3:
ab:f6:bc:47:c1:1e:4a:33:d4:10:33:9e:1e:58:9d:
64:25:cb:21:7f:fa:05:6b:f4:70:47:6c:51:d3:88:
af:ad:6a:68:b4:9a:05:c9:d4:44:95:61:6e:62:0f:
02:61:ed:a4:b0:80:7d:38:2d:c8:4b:1c:6b:a0:a4:
39:47:ba:f7:c9:b6:c7:2d:cd:04:2e:d1:e3:b4:de:
68:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:F3:10:A8:D8:4A:C8:8B:25:E2:07:1A:10:E4:FC:19:BC:6F:62:30
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363235333a3a2f34382d3438203d3e20343031353037.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:6253::/48
Signature Algorithm: sha256WithRSAEncryption
0f:ee:d7:bb:0b:42:8c:83:5f:b5:27:01:32:7e:88:41:64:f5:
d2:8b:aa:b0:41:64:d0:e9:64:07:ab:1a:aa:05:19:af:8d:57:
e3:77:b8:1e:60:be:cc:52:ea:b0:77:b7:20:1a:f8:3a:62:e4:
11:c3:74:50:ca:20:40:bf:53:6b:45:b5:61:dc:2f:5f:d7:11:
e5:9a:d2:ce:b9:1a:ed:98:97:a3:52:b6:a6:5a:f6:f4:d5:b8:
36:1e:1c:06:8e:7a:c8:86:12:50:5f:08:f2:f7:db:46:36:d6:
ca:89:54:83:0e:cf:3f:69:e2:11:c4:12:24:ac:68:72:1c:94:
26:f7:e8:bb:6d:98:6b:3a:b8:20:27:4b:03:af:10:73:4a:3c:
c3:2d:46:97:1a:f2:98:22:d8:bc:18:82:c9:fc:5d:9e:95:a3:
28:47:a5:cc:77:f7:b1:3a:20:14:27:66:a1:da:a6:21:22:0a:
63:e3:24:10:22:83:41:ea:36:97:07:d4:3f:74:df:a7:96:5d:
4c:e1:6f:31:0d:62:be:55:2d:2b:8a:e4:2a:4a:ba:5e:11:f1:
d2:65:36:ab:b0:b8:9b:94:e2:eb:e3:27:70:ec:b6:7d:f1:59:
23:55:1c:ae:be:4b:84:2b:0d:b1:30:3b:8b:f7:e3:e7:5a:fb:
2e:a5:08:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 11:12:18 2025 by rpki-client