Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363235343a3a2f34382d3438203d3e20343031353037.roa
File: 326131343a373538343a363235343a3a2f34382d3438203d3e20343031353037.roa (raw, json)
Hash identifier: /c5kfgmvfG3u7JXw9tqd2tJCXpbm0z6TbjfgdRXpFi4=
Subject key identifier: EC:AC:89:8E:22:AF:01:BF:6E:99:BA:35:16:E6:77:04:C2:FE:4B:A6
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 44CD290FD2DA9663B3E8EA6EAC47518C4065C0A9
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363235343a3a2f34382d3438203d3e20343031353037.roa
Signing time: Mon 12 May 2025 16:18:08 +0000
ROA not before: Mon 12 May 2025 16:13:08 +0000
ROA not after: Mon 11 May 2026 16:18:08 +0000
asID: 401507
IP address blocks: 2a14:7584:6254::/48 maxlen: 48
Validation: Failed, certificate revoked on Tue 20 May 2025 10:18:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
44:cd:29:0f:d2:da:96:63:b3:e8:ea:6e:ac:47:51:8c:40:65:c0:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: May 12 16:13:08 2025 GMT
Not After : May 11 16:18:08 2026 GMT
Subject: CN=ECAC898E22AF01BF6E99BA3516E67704C2FE4BA6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:8c:4f:b8:ae:b5:0d:f5:36:0e:20:31:da:78:
08:c6:8a:9c:f1:31:d5:97:92:bb:fb:98:11:57:a3:
e5:35:af:c8:88:e8:cc:38:e2:36:b8:99:be:a1:20:
ac:44:a5:4b:c7:fe:a7:5e:90:eb:fb:b9:05:b5:9e:
01:6d:40:b5:ac:c6:38:f5:72:1e:3e:c5:71:5b:5f:
88:55:d9:54:0e:2a:03:94:8e:d7:f6:f5:e9:33:06:
59:28:60:c8:04:9d:cc:d1:38:a3:b3:33:28:e2:54:
2e:86:47:a0:30:d7:ca:e4:63:d4:0f:82:17:c8:ae:
42:ff:fe:74:ea:b9:79:8d:68:f6:07:85:fc:6e:dc:
73:e9:56:b3:e2:d6:b7:d1:7a:3e:e2:2a:29:a6:d6:
45:6a:b9:24:8f:94:70:74:65:c1:25:d4:bf:5b:66:
9f:c2:91:ef:e1:fb:2b:27:86:0c:e9:45:b0:a3:76:
1c:39:60:8d:24:9b:85:c6:ee:5a:81:8d:cf:5c:62:
45:35:b5:98:1f:37:57:89:d3:87:db:63:28:0c:26:
29:de:b0:24:e9:1d:81:d6:f1:8a:f4:b3:f2:02:a7:
a2:c4:cd:19:da:aa:96:7e:1e:8f:b3:60:4b:04:78:
40:d6:83:01:6e:c8:00:7e:e7:e8:82:a5:3b:27:57:
db:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:AC:89:8E:22:AF:01:BF:6E:99:BA:35:16:E6:77:04:C2:FE:4B:A6
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363235343a3a2f34382d3438203d3e20343031353037.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:6254::/48
Signature Algorithm: sha256WithRSAEncryption
8a:c3:67:7c:3e:09:9a:f7:8c:92:97:3b:d9:eb:38:5d:cc:4b:
84:64:32:2e:fa:c6:b9:50:8c:d7:8e:72:9c:45:84:bb:cc:b8:
27:62:f6:54:8b:35:41:9b:ae:e4:09:58:37:8d:b6:c9:b2:d0:
85:62:b3:0e:d8:eb:54:b4:fa:60:cd:39:92:b5:3b:af:3f:75:
11:ef:f8:ec:ed:88:4d:da:e0:3c:95:8b:ed:02:d8:08:a1:25:
9c:37:8e:7c:02:ec:99:77:5c:38:19:6b:5c:26:58:a8:f5:43:
21:d8:61:7e:f0:e9:7b:82:fb:86:80:56:7b:cf:ca:5a:77:dc:
7e:fa:c4:8a:a5:80:64:4c:e8:5f:4b:eb:41:03:6a:0c:4b:06:
d7:13:19:cb:0e:86:5e:d4:42:92:73:55:5d:86:fa:05:3b:b1:
e8:11:00:65:ce:f4:22:28:dc:b8:0b:f0:16:aa:ef:e2:f4:bf:
fe:bc:94:d7:d7:09:24:c8:e2:fb:c1:61:0e:c6:62:fc:2f:ed:
63:89:78:88:57:c9:62:43:7f:a0:bd:ae:4d:89:14:30:1c:17:
2f:d4:d4:2f:f3:69:51:43:8f:cd:1c:f5:21:86:61:24:5e:45:
c3:56:81:14:a1:60:34:40:07:48:75:01:55:cd:96:6d:09:5b:
4f:f8:d1:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 07:41:21 2025 by rpki-client