Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363731653a3a2f34382d3438203d3e20343031353037.roa
File: 326131343a373538343a363731653a3a2f34382d3438203d3e20343031353037.roa (raw, json)
Hash identifier: 4HGDNP9x40EiFsEo61J7TfgNeFTGTakvjgJnQJckv94=
Subject key identifier: F5:5E:DA:0F:EC:3A:3A:75:58:52:A5:C5:C5:D9:DD:34:22:80:49:9F
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 37D061A8420204F1D00F7188711B37108897D96A
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363731653a3a2f34382d3438203d3e20343031353037.roa
Signing time: Sat 31 May 2025 00:54:02 +0000
ROA not before: Sat 31 May 2025 00:49:02 +0000
ROA not after: Sat 30 May 2026 00:54:02 +0000
asID: 401507
IP address blocks: 2a14:7584:671e::/48 maxlen: 48
Validation: Failed, certificate revoked on Sat 31 May 2025 17:16:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
37:d0:61:a8:42:02:04:f1:d0:0f:71:88:71:1b:37:10:88:97:d9:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: May 31 00:49:02 2025 GMT
Not After : May 30 00:54:02 2026 GMT
Subject: CN=F55EDA0FEC3A3A755852A5C5C5D9DD342280499F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:78:eb:15:0a:cb:1a:b4:97:b1:94:28:b5:f4:
83:f3:60:25:89:10:89:cf:36:d3:fd:c1:c9:5d:33:
5e:83:bc:41:74:0c:3c:f2:3a:01:37:ff:3a:b9:4f:
71:61:11:bb:e3:b1:03:44:cf:a3:e8:df:c9:cf:db:
49:82:60:e6:f2:02:23:d6:af:81:42:d4:cc:0f:d6:
bd:34:08:ef:4e:86:61:57:36:0c:4d:38:de:c3:69:
69:2c:0b:bb:cc:5b:fd:a1:3c:44:4a:d5:3a:f7:d6:
61:f5:6d:27:af:20:7c:90:c0:ed:aa:8d:ab:98:f2:
49:1e:aa:e8:10:e7:02:13:65:c7:ff:43:d5:9b:a4:
03:02:a7:7f:3c:a4:21:b6:97:07:04:63:a3:6a:3a:
cb:9f:84:0c:a9:bf:ef:fe:d2:cb:4e:6d:10:fd:28:
70:ce:49:f4:14:61:84:7e:53:f5:e2:3a:e8:17:94:
13:c1:36:b1:c7:16:e5:a9:aa:02:f3:df:44:d4:73:
fd:4c:b8:a2:f2:4c:97:d9:78:91:0b:21:53:ca:d7:
69:60:af:d7:d5:e8:91:8e:27:1b:43:0c:35:26:ae:
f9:cc:8f:a0:2a:4f:3b:23:3c:13:74:bc:11:ca:96:
7a:64:76:eb:fa:6e:75:f7:78:8d:13:3e:c2:a4:e5:
16:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:5E:DA:0F:EC:3A:3A:75:58:52:A5:C5:C5:D9:DD:34:22:80:49:9F
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363731653a3a2f34382d3438203d3e20343031353037.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:671e::/48
Signature Algorithm: sha256WithRSAEncryption
3b:b1:36:3a:b9:02:7f:a3:22:0d:71:8e:ef:fc:5a:95:bf:7a:
19:2c:4a:dc:8e:e1:46:25:a8:a2:83:98:95:b4:91:70:16:b6:
dd:f5:be:6f:80:c7:a7:3b:78:40:dc:b9:1c:b0:2d:95:d7:5c:
2b:85:e6:7c:52:c5:5c:05:f1:14:be:6d:c8:9a:56:0e:9f:63:
1e:b2:83:5e:7d:f0:fb:3b:27:ca:dd:9c:8e:45:94:d3:ed:54:
af:a5:15:90:c2:2a:af:98:33:06:19:0f:00:ae:18:08:87:e8:
00:7b:37:7e:68:3a:35:fa:fd:6c:92:b6:1b:ad:2b:e9:a1:3f:
5f:a9:41:48:e0:4c:54:94:8e:d8:43:12:7e:94:47:4a:53:9e:
3b:b3:bf:7f:4c:20:79:fb:40:f4:4c:4f:d4:d9:e6:40:10:58:
01:51:fe:f7:d1:2d:54:8c:10:9a:37:46:5a:3a:0f:89:52:b2:
e5:33:3a:8e:cc:05:7d:62:f8:db:ef:2d:47:5c:03:aa:7c:98:
9d:57:6d:70:f4:8b:4f:b3:42:aa:d0:f0:46:e7:55:84:86:05:
be:ae:ca:b5:27:3f:cc:c1:13:a0:87:90:ee:3a:d2:fb:1a:bf:
35:d4:3b:0c:1e:6d:17:db:31:40:7d:7b:86:b6:ea:7c:a7:4b:
92:9e:bf:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 08:20:15 2025 by rpki-client