Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363334643a3a2f34382d3438203d3e20343031353037.roa
File: 326131343a373538343a363334643a3a2f34382d3438203d3e20343031353037.roa (raw, json)
Hash identifier: brgwETTMDhMiqOI8AjTs3+4BKrBLmALkV8DkAtag4gA=
Subject key identifier: 48:C6:6F:DF:FB:76:A4:D3:D6:36:C5:74:B1:57:64:66:4A:EC:FC:58
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 4EE730E784C1CBAA69667AE9D426230A3BD19409
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363334643a3a2f34382d3438203d3e20343031353037.roa
Signing time: Thu 22 May 2025 16:18:02 +0000
ROA not before: Thu 22 May 2025 16:13:02 +0000
ROA not after: Thu 21 May 2026 16:18:02 +0000
asID: 401507
IP address blocks: 2a14:7584:634d::/48 maxlen: 48
Validation: Failed, certificate revoked on Tue 27 May 2025 13:42:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4e:e7:30:e7:84:c1:cb:aa:69:66:7a:e9:d4:26:23:0a:3b:d1:94:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: May 22 16:13:02 2025 GMT
Not After : May 21 16:18:02 2026 GMT
Subject: CN=48C66FDFFB76A4D3D636C574B15764664AECFC58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:30:10:91:61:7b:54:b1:ce:b7:4a:a1:f5:c6:
af:ef:b0:9b:1c:4b:08:4d:4c:5a:f4:fc:e7:56:f5:
2c:72:a7:d2:06:e7:37:ae:3a:2b:7f:41:10:a1:2e:
1f:82:08:e6:51:3e:3b:5f:25:be:7f:e8:9a:35:be:
4f:45:b6:20:df:b1:98:f6:af:c1:ff:90:9b:1e:44:
b5:c3:26:1b:a9:ce:81:ee:99:ab:4d:1c:a5:6a:d2:
a5:db:de:f7:93:77:8e:a8:b5:b5:8d:57:03:0f:9b:
50:e9:d1:1a:00:14:9d:d3:c2:bf:e3:c9:11:57:10:
a5:6a:8a:23:60:5b:ca:73:83:e5:dc:64:51:a4:c0:
e5:27:d0:44:a8:0d:87:93:0c:96:f1:36:dc:e3:5b:
89:8f:7c:4d:42:48:89:35:b1:28:91:e9:02:47:17:
0a:1f:8e:17:8d:cd:02:2f:09:8b:0b:1f:60:f1:67:
2b:d8:94:ce:a6:bf:37:96:92:7a:a8:e9:62:85:21:
e2:90:93:0b:7e:3c:9f:ef:26:f0:f1:a6:1d:5b:27:
26:c5:3f:29:9b:ee:bd:46:a3:36:ed:6e:fa:ae:83:
96:3e:f9:23:3c:35:2c:aa:a2:ae:89:f8:ac:0f:30:
68:4f:e2:65:24:c2:76:58:d8:23:8d:ec:c9:83:40:
41:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:C6:6F:DF:FB:76:A4:D3:D6:36:C5:74:B1:57:64:66:4A:EC:FC:58
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363334643a3a2f34382d3438203d3e20343031353037.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:634d::/48
Signature Algorithm: sha256WithRSAEncryption
63:97:9c:52:e0:a2:2c:7a:6e:14:dc:4e:43:d5:6b:e1:37:bd:
6c:65:f1:d9:50:cd:de:d9:80:06:b8:16:73:c6:62:3b:d9:bd:
58:51:d0:9b:8e:6d:69:1e:c8:77:85:e5:e3:0e:c4:cb:87:3d:
8a:6f:03:b8:d0:c4:0b:79:43:1a:61:09:e0:c6:cc:3e:a0:ab:
79:63:99:55:31:5e:dc:dc:f4:1d:8d:ca:c9:9d:c2:67:c4:d7:
47:cf:9e:d2:38:d4:6f:a7:ba:44:15:b9:3d:fc:86:19:c4:47:
5d:a4:63:b9:cc:b0:6a:ab:9f:81:51:bc:57:bb:16:20:0c:44:
e5:8b:98:d8:01:d3:11:5f:49:dc:78:bb:c8:60:48:ce:19:e8:
d4:d0:00:c6:66:cb:31:1c:9c:24:3f:b6:60:b3:e4:c5:0c:ec:
f8:4c:e3:01:7d:ea:90:52:dd:63:bf:fe:78:d5:ec:9e:b0:5a:
58:2a:f0:36:6b:59:f1:3e:a0:95:5c:ec:ab:c5:88:9c:69:31:
28:a2:55:66:d5:5a:a2:18:16:64:a8:d7:73:ad:c6:cd:84:c2:
e8:44:2c:7a:c8:aa:4c:f4:f6:b9:41:04:96:de:42:60:db:1b:
15:ba:5b:81:8a:88:70:cd:c7:43:e1:d8:2e:5a:ff:29:ae:c5:
54:11:80:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 06:20:58 2025 by rpki-client