Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363335313a3a2f34382d3438203d3e20343031353037.roa
File: 326131343a373538343a363335313a3a2f34382d3438203d3e20343031353037.roa (raw, json)
Hash identifier: 0bm++10OTWEkd/EdcUo5/lYS6zXHpTzz1IM3uKpmg30=
Subject key identifier: 29:4A:91:86:2C:71:1C:8B:2D:A6:F4:B8:6C:56:63:FF:7D:33:DE:8A
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 1C4F3885EC2A424A4A34565B403D73FBCF52F321
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363335313a3a2f34382d3438203d3e20343031353037.roa
Signing time: Thu 22 May 2025 16:36:02 +0000
ROA not before: Thu 22 May 2025 16:31:02 +0000
ROA not after: Thu 21 May 2026 16:36:02 +0000
asID: 401507
IP address blocks: 2a14:7584:6351::/48 maxlen: 48
Validation: Failed, certificate revoked on Sun 25 May 2025 00:06:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1c:4f:38:85:ec:2a:42:4a:4a:34:56:5b:40:3d:73:fb:cf:52:f3:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: May 22 16:31:02 2025 GMT
Not After : May 21 16:36:02 2026 GMT
Subject: CN=294A91862C711C8B2DA6F4B86C5663FF7D33DE8A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:30:93:52:22:4b:a2:32:6e:03:2a:ff:fe:a9:
bc:a8:d8:83:41:c9:14:35:9a:c6:2e:b3:c8:1a:67:
45:cc:8d:46:a4:89:38:82:b2:f4:74:19:d3:7f:c6:
ec:4b:67:73:01:e3:ba:50:5a:81:2b:08:9a:76:6c:
55:6d:76:51:1a:15:d3:40:d4:82:10:07:30:99:a0:
06:18:ea:8a:ed:f5:7d:9f:b6:61:80:fb:05:01:83:
9f:5e:87:c1:a7:52:38:ef:12:45:82:db:f5:fc:b7:
74:32:09:f3:f2:eb:15:c1:ce:69:7d:9b:7c:ff:b0:
65:e7:dc:23:5f:e5:3e:f1:a7:f5:50:81:21:59:c6:
a2:86:49:8c:d2:88:83:cd:42:a1:44:f9:36:29:67:
81:cd:96:67:7e:da:8e:e6:89:83:db:84:68:6e:d4:
c7:77:79:81:ae:34:58:ea:5e:43:33:67:b9:9f:ed:
b4:36:fb:85:5a:d4:ab:24:e7:71:40:37:5f:f1:b0:
5d:8f:4e:27:1d:c4:08:00:92:ad:40:bd:d7:cd:6d:
5c:20:d3:65:aa:c5:fa:4a:09:f0:14:5b:52:83:e7:
54:07:b0:7d:cf:fc:89:1c:95:29:fc:3e:03:f5:ed:
e1:3b:fc:a7:05:b1:76:9c:04:c2:86:80:23:63:86:
32:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:4A:91:86:2C:71:1C:8B:2D:A6:F4:B8:6C:56:63:FF:7D:33:DE:8A
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363335313a3a2f34382d3438203d3e20343031353037.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:6351::/48
Signature Algorithm: sha256WithRSAEncryption
64:f7:3e:5f:0e:92:3e:48:a4:3f:81:55:3e:09:e8:9e:0e:91:
96:eb:1d:99:ac:9a:3c:ab:a2:cf:03:83:0f:5e:d3:bf:8c:72:
ca:de:b6:47:29:75:6c:ae:53:5d:94:eb:03:cc:db:8e:e8:f0:
61:b1:0e:8a:78:d6:e0:c8:b5:f3:22:e8:7f:2d:61:a3:0b:1d:
ca:c3:e7:e4:4b:e6:75:32:e4:b8:95:68:24:d9:05:45:b3:a6:
aa:64:5e:09:3b:01:cb:94:40:2d:dc:d3:1e:59:ab:e0:1b:b0:
f4:0b:41:55:d4:9f:2a:c8:67:5b:8a:d7:96:65:b1:33:57:07:
86:ac:5f:1f:64:1b:b0:26:a0:1a:df:80:d7:d9:10:8e:d2:2f:
dd:a8:63:5a:3f:bd:e4:e6:f4:e4:81:4d:e7:6f:c2:c3:22:c5:
b2:56:3f:3b:70:9b:60:c1:f6:06:02:7f:ce:74:93:de:ab:cf:
7a:4b:ae:e2:b2:9e:8e:b1:a4:6c:2f:7f:32:e8:8f:22:f0:56:
6a:3d:10:87:0b:85:d7:b3:9e:42:5d:5a:07:27:62:0f:a8:18:
90:bb:be:23:65:de:81:86:5e:32:78:af:c3:54:3e:b8:c5:ef:
0c:0a:f3:ba:37:6c:31:af:fe:c4:a7:91:d4:ee:f9:d0:c3:11:
a8:73:2f:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 06:41:04 2025 by rpki-client