Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363534613a3a2f34382d3438203d3e20343031353037.roa
File: 326131343a373538343a363534613a3a2f34382d3438203d3e20343031353037.roa (raw, json)
Hash identifier: NNt3uh2a9j5rjLC71asIo2/Vs0NY/pG1qEB2gXDhjVk=
Subject key identifier: F7:83:2A:AF:AB:72:3B:AA:9D:3D:91:91:FA:19:40:7E:22:77:11:D5
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 17A55CB8B8889868A00F3E9AB1710ED772BE1E19
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363534613a3a2f34382d3438203d3e20343031353037.roa
Signing time: Wed 28 May 2025 23:12:01 +0000
ROA not before: Wed 28 May 2025 23:07:01 +0000
ROA not after: Wed 27 May 2026 23:12:01 +0000
asID: 401507
IP address blocks: 2a14:7584:654a::/48 maxlen: 48
Validation: Failed, certificate revoked on Sat 31 May 2025 17:16:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
17:a5:5c:b8:b8:88:98:68:a0:0f:3e:9a:b1:71:0e:d7:72:be:1e:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: May 28 23:07:01 2025 GMT
Not After : May 27 23:12:01 2026 GMT
Subject: CN=F7832AAFAB723BAA9D3D9191FA19407E227711D5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:fb:e1:36:94:03:dd:d4:a3:6b:c3:4c:18:f2:
53:58:74:74:31:44:b8:e6:04:46:76:38:2a:0a:c1:
d9:fa:95:03:d9:bc:a8:54:f9:b4:60:b7:59:5b:0a:
44:8a:f4:ab:55:98:1c:06:44:d6:e2:59:92:6f:db:
88:be:ca:db:1c:2b:d4:7b:00:fb:15:ed:92:b4:f0:
19:cd:82:5d:2c:9c:db:c9:39:aa:c2:8e:e3:f1:86:
6a:a7:3d:9a:e1:29:d7:85:a3:b8:5a:9c:e9:d2:04:
72:5f:cc:3a:b7:1f:02:49:76:b9:99:ca:b0:40:0e:
ff:aa:b0:6d:67:41:db:ca:19:e2:70:2f:01:a5:34:
93:cd:92:32:67:fd:de:52:99:a8:90:07:43:04:cf:
f9:fb:55:4f:16:83:1c:76:47:50:ab:7d:9a:76:c3:
4b:52:e3:89:8c:98:dc:54:9a:41:c3:92:2b:ae:6b:
08:ff:22:fe:47:22:44:41:cc:a0:a5:b5:ae:39:2a:
b1:2f:82:43:17:6a:5e:7a:91:aa:2c:03:14:06:e1:
2b:d7:ee:9c:42:0b:e2:7e:2f:b5:c2:dc:b7:81:58:
e2:a1:8b:66:54:fa:e0:4f:fd:22:92:7e:2c:6f:dc:
b1:f9:01:5f:c1:de:90:cb:27:66:55:6f:e8:88:72:
a9:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:83:2A:AF:AB:72:3B:AA:9D:3D:91:91:FA:19:40:7E:22:77:11:D5
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363534613a3a2f34382d3438203d3e20343031353037.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:654a::/48
Signature Algorithm: sha256WithRSAEncryption
5d:08:97:60:d3:e9:a4:13:76:f8:68:e0:73:14:67:8a:03:aa:
ea:e3:16:6b:8f:0e:24:89:ec:bd:03:23:d8:a0:05:78:f7:a7:
5d:9d:0a:58:83:3a:7f:ac:11:6c:67:13:d7:5a:4c:08:e1:99:
c2:51:81:04:a8:e6:14:85:32:df:bb:5d:dc:b8:49:c4:8c:aa:
64:b1:a7:71:34:01:2d:69:84:1b:cc:d3:7c:71:4d:52:3d:0e:
25:6a:64:cc:21:e2:78:6a:a2:18:e8:7d:46:f0:25:ef:00:5c:
23:75:05:cd:ef:2e:f5:a5:b0:f5:7b:60:0c:f1:6c:aa:0c:df:
03:6e:11:b6:06:0f:8a:11:91:42:cc:82:de:72:78:a6:85:5b:
a7:dc:6c:54:2e:a6:19:3e:53:1c:1e:9d:01:f3:64:58:9d:0d:
5e:34:12:41:2b:5a:42:6f:30:5f:85:65:e7:f8:e8:31:8b:a7:
35:2b:c6:c6:e2:8a:d1:29:6e:0a:98:02:07:74:09:02:62:15:
d4:98:1b:01:49:6c:f2:e4:ae:9a:33:01:66:79:5c:fc:c9:c4:
ae:4e:eb:b0:14:b7:04:dd:16:7a:74:9e:ac:b5:38:93:ac:7b:
74:51:9e:af:e1:e9:3f:c8:db:dd:c2:77:b9:59:ca:a5:4e:6e:
f8:32:c5:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 01:26:33 2025 by rpki-client