Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363431373a3a2f34382d3438203d3e20343031353037.roa
File: 326131343a373538343a363431373a3a2f34382d3438203d3e20343031353037.roa (raw, json)
Hash identifier: BtLO26MKW3QES6wk40Qt7l+pTa0AIZXBCNIun1NUIIw=
Subject key identifier: 2F:89:72:33:7E:52:07:98:49:C1:BC:38:40:93:0A:57:10:13:6D:E8
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 01F3CFE6F4F390E2FECA6AA637779ADD26778CD3
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363431373a3a2f34382d3438203d3e20343031353037.roa
Signing time: Sun 25 May 2025 21:18:02 +0000
ROA not before: Sun 25 May 2025 21:13:02 +0000
ROA not after: Sun 24 May 2026 21:18:02 +0000
asID: 401507
IP address blocks: 2a14:7584:6417::/48 maxlen: 48
Validation: Failed, certificate revoked on Sat 31 May 2025 00:48:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:f3:cf:e6:f4:f3:90:e2:fe:ca:6a:a6:37:77:9a:dd:26:77:8c:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: May 25 21:13:02 2025 GMT
Not After : May 24 21:18:02 2026 GMT
Subject: CN=2F8972337E52079849C1BC3840930A5710136DE8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:dc:b3:a7:80:7b:83:ef:8c:f3:e0:00:18:4f:
27:52:97:0d:c0:0e:6b:12:3c:65:94:fa:c7:c3:65:
df:a6:4b:a2:b1:93:70:4f:84:0f:f7:8c:3a:b3:e2:
f7:23:e4:24:d6:cc:85:61:ff:80:84:54:87:ed:25:
cf:04:32:fb:d1:39:42:7d:ec:e4:b3:24:8b:bd:52:
70:1a:62:8a:d7:f5:f4:af:74:32:96:84:cf:3c:d1:
64:97:73:32:9d:43:73:89:a1:72:05:fb:46:40:5f:
22:4d:81:6e:3c:d2:ac:b6:58:fa:39:2f:ab:86:fe:
81:2d:63:96:94:fd:03:cb:dc:d0:84:7f:64:0a:16:
77:37:02:46:95:ed:51:a5:cd:31:8c:38:f5:f8:39:
73:db:bf:ff:03:c7:00:0f:3b:1a:e1:ca:b4:2f:db:
21:60:20:af:72:ba:2c:7d:f2:61:02:d9:e0:1a:92:
6d:e9:88:bd:c8:f2:24:6a:b1:b3:ea:3f:20:45:fb:
28:26:40:a6:8f:3b:b0:14:32:81:62:ec:cf:47:0d:
48:a2:34:7d:60:17:0c:5d:9e:17:a3:7d:2a:08:71:
34:53:06:2e:35:30:00:27:09:a8:96:47:8b:cb:e4:
6c:8f:07:fc:93:74:91:40:4d:07:8a:1b:63:e5:c2:
02:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:89:72:33:7E:52:07:98:49:C1:BC:38:40:93:0A:57:10:13:6D:E8
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363431373a3a2f34382d3438203d3e20343031353037.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:6417::/48
Signature Algorithm: sha256WithRSAEncryption
92:47:b0:67:3e:66:1b:e4:c7:9d:58:b8:4d:b2:fd:2f:47:31:
22:42:f6:4a:9c:2f:5f:f6:8c:01:40:99:44:8d:48:d6:00:14:
fc:de:0e:1e:2d:72:3c:6f:48:f3:f0:c1:54:3f:a0:93:39:1d:
d6:b5:55:29:e0:26:94:e1:55:55:1a:a6:1d:f2:23:9c:bc:fe:
b9:fc:19:a4:c5:d0:7d:db:c9:41:91:c6:7d:af:9a:45:db:ec:
6e:5c:a8:b8:d9:b0:a7:4a:ed:63:e4:36:4b:e5:52:b2:ca:a7:
e3:4c:61:21:c1:ef:43:e1:19:f8:6b:3f:42:8a:00:33:44:42:
a9:26:d9:99:aa:c0:64:a5:b7:3b:45:de:3f:7f:48:cc:6c:c6:
66:b6:c9:a8:7a:1e:b3:a9:f8:49:1c:c4:f1:62:7a:c8:e7:ec:
b0:aa:f6:ad:ea:9a:37:bf:01:0d:15:8a:e7:98:1c:b7:8e:ac:
b8:60:b6:b2:9c:9d:96:13:4e:d6:23:d3:af:f0:3c:be:a4:99:
40:97:5a:19:a4:42:5b:a9:b8:44:fd:b1:4a:cd:38:e0:69:e6:
56:3a:a5:ec:ea:a6:09:c6:e8:87:5e:71:2b:4d:4c:6f:cd:35:
0a:4b:04:27:30:a2:d6:d2:10:b6:51:5b:3f:1d:af:17:85:79:
1e:61:59:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 01:25:27 2025 by rpki-client