Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363465343a3a2f34382d3438203d3e20343031353037.roa
File: 326131343a373538343a363465343a3a2f34382d3438203d3e20343031353037.roa (raw, json)
Hash identifier: 4rgTFBksY9ZxV6Og22xIQuimNF9NQsngYPT00A+A7jo=
Subject key identifier: 1D:E6:EF:B8:C9:02:DE:88:D8:A6:9F:FC:B4:74:1A:C0:02:0A:E0:74
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 4DC8E69BCA61689BFE4933992AE4840370C86201
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363465343a3a2f34382d3438203d3e20343031353037.roa
Signing time: Thu 29 May 2025 16:18:02 +0000
ROA not before: Thu 29 May 2025 16:13:02 +0000
ROA not after: Thu 28 May 2026 16:18:02 +0000
asID: 401507
IP address blocks: 2a14:7584:64e4::/48 maxlen: 48
Validation: Failed, certificate revoked on Sat 31 May 2025 17:16:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4d:c8:e6:9b:ca:61:68:9b:fe:49:33:99:2a:e4:84:03:70:c8:62:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: May 29 16:13:02 2025 GMT
Not After : May 28 16:18:02 2026 GMT
Subject: CN=1DE6EFB8C902DE88D8A69FFCB4741AC0020AE074
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:22:13:11:10:ed:cb:0b:7e:d6:cc:2c:f7:50:
5b:75:c6:13:bc:73:73:d4:8f:7e:fc:1d:e4:9d:ad:
71:bc:9b:6a:ce:a4:0d:99:f5:d5:cf:23:2c:86:24:
b4:4f:de:e8:2a:f7:c7:fb:c2:bf:19:b4:90:1e:6a:
48:33:4f:2a:af:6a:07:58:42:70:bf:9e:c7:c4:a7:
3e:12:cc:13:c3:4e:41:2b:2c:84:f3:3c:d0:94:d3:
60:f4:6c:85:2a:39:06:86:6a:5c:8b:f7:c3:14:87:
55:90:4a:21:25:f2:0e:4b:c1:f1:a0:30:f3:e9:fe:
eb:7d:ab:73:fc:cb:cd:56:87:62:33:2e:11:ea:9a:
cc:f1:86:22:07:d3:f3:da:35:fd:6d:3c:d7:fc:78:
12:6a:f6:41:76:e5:a1:91:7a:7a:b5:b2:3b:af:e7:
93:de:69:5f:d9:7f:9a:9a:0a:88:1b:3d:d0:59:a6:
56:0d:f7:29:9b:e5:24:63:13:8f:c3:84:0c:6a:65:
8a:62:6d:a0:45:e8:09:16:db:35:39:15:af:3e:84:
31:f4:1b:fb:be:e5:4f:52:0a:02:aa:4f:db:71:6d:
cc:5d:b3:02:9b:32:0c:b4:f3:2f:ca:c4:aa:b9:38:
8f:de:9c:9d:99:41:ff:df:27:e0:13:21:67:ad:2c:
7d:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:E6:EF:B8:C9:02:DE:88:D8:A6:9F:FC:B4:74:1A:C0:02:0A:E0:74
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363465343a3a2f34382d3438203d3e20343031353037.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:64e4::/48
Signature Algorithm: sha256WithRSAEncryption
30:49:95:08:1b:7b:a7:89:46:45:65:c3:4a:c6:ac:33:5a:a5:
be:e0:df:3c:e0:a1:56:a2:86:1f:06:6c:42:b9:bb:c1:85:83:
07:59:1a:45:f6:43:ee:44:f0:b7:45:4a:52:e1:c1:24:0d:7b:
f0:ef:ea:3d:59:55:6f:32:08:e2:e1:f1:45:37:ed:72:ce:d6:
d2:fa:67:ba:43:20:60:22:0e:f3:78:18:88:45:1c:fb:18:d5:
0b:e3:0f:cd:64:a9:05:fe:fa:51:fd:a0:4f:7e:d3:c5:45:b1:
d2:a2:0d:e6:e8:f7:bc:46:f4:b6:47:07:e6:2e:78:f0:dd:94:
6e:75:c1:a3:69:1f:0f:ae:e7:f4:d8:f8:e3:f0:23:81:0b:a5:
5b:51:b6:66:f5:bb:91:7c:3a:30:d1:53:54:e1:ca:0c:c9:ea:
6e:2b:2b:04:8c:21:ad:ea:df:75:0b:64:7c:af:ce:59:b0:7b:
48:65:ab:0c:dc:32:5d:b4:69:75:5c:d2:f7:c3:62:84:d7:77:
41:56:92:64:dc:4c:b5:54:04:03:2e:45:ec:63:69:aa:0c:db:
c7:f7:2b:8c:c3:0e:5a:e6:4a:f9:cc:d6:67:bd:37:0d:dc:a8:
1f:32:9e:7f:67:fc:91:b2:4a:0c:93:65:bc:a2:46:f2:9f:3c:
07:23:1b:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 05:58:51 2025 by rpki-client