Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363865653a3a2f34382d3438203d3e20343031353037.roa
File: 326131343a373538343a363865653a3a2f34382d3438203d3e20343031353037.roa (raw, json)
Hash identifier: Dw8G84MyU736dCgqn8g65j8Zan1nbxojM1Cdi8+90/8=
Subject key identifier: C3:F8:24:48:B8:7F:3F:31:EA:9F:65:08:C0:1B:83:4B:A1:17:6C:78
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 3EA8B0AB75F3E4BF0FD5A8C9596B9D3AB396F33E
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363865653a3a2f34382d3438203d3e20343031353037.roa
Signing time: Sun 25 May 2025 21:18:02 +0000
ROA not before: Sun 25 May 2025 21:13:02 +0000
ROA not after: Sun 24 May 2026 21:18:02 +0000
asID: 401507
IP address blocks: 2a14:7584:68ee::/48 maxlen: 48
Validation: Failed, certificate revoked on Fri 30 May 2025 22:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3e:a8:b0:ab:75:f3:e4:bf:0f:d5:a8:c9:59:6b:9d:3a:b3:96:f3:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: May 25 21:13:02 2025 GMT
Not After : May 24 21:18:02 2026 GMT
Subject: CN=C3F82448B87F3F31EA9F6508C01B834BA1176C78
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:ab:b7:9e:00:ed:0c:7e:3c:98:ed:9f:b2:38:
38:85:56:97:15:c7:bf:5c:ec:ef:5c:ff:6b:bc:f7:
4b:4f:6b:e2:c5:80:f0:bf:ff:92:d1:93:b9:fc:02:
35:8e:78:e1:f8:e9:00:11:37:75:3a:8c:0e:76:37:
40:c2:e0:4b:a4:f2:23:81:74:e4:c7:5a:82:5f:a9:
0a:ac:71:8a:73:ec:90:16:a9:42:d3:2d:e2:b5:78:
2e:ae:18:cc:86:1b:d5:b1:9f:d0:53:3f:2f:34:5b:
26:f9:55:33:11:71:a5:e9:b7:1a:e3:a1:52:eb:b0:
eb:8c:e8:21:4d:4c:d8:73:81:3a:97:48:39:f5:9e:
28:af:8e:ff:3d:b2:17:83:84:7f:26:d8:7a:3d:4a:
9d:e4:56:22:1f:a2:35:ef:f2:33:aa:59:07:d2:b5:
a0:52:21:79:e9:44:4e:57:1e:d9:07:14:b5:c7:a9:
13:33:56:01:05:df:68:95:fb:b0:4a:97:ee:7d:41:
4f:31:a8:f3:df:46:94:ef:da:55:88:85:da:89:8f:
6c:28:6d:b1:72:fb:dd:8d:35:82:f5:ae:3c:fd:54:
84:b3:e5:51:1e:db:9e:63:cb:fc:f0:bc:4b:2d:f1:
53:56:76:c5:f2:05:e5:8b:ca:7f:11:34:8d:24:71:
8b:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:F8:24:48:B8:7F:3F:31:EA:9F:65:08:C0:1B:83:4B:A1:17:6C:78
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363865653a3a2f34382d3438203d3e20343031353037.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:68ee::/48
Signature Algorithm: sha256WithRSAEncryption
64:ea:2a:2f:45:6a:09:75:bd:9e:f5:74:22:89:b5:0f:46:62:
36:df:92:b8:d9:e7:aa:8a:39:ad:8c:55:a8:96:f7:09:85:d0:
35:6f:84:5b:1f:f0:c3:35:93:c9:6f:75:30:4b:8d:98:51:8a:
de:4f:95:48:a6:92:ff:49:9d:e5:7b:8a:66:31:a2:12:9d:9a:
fa:0e:8c:3d:9d:34:a9:c6:7f:38:72:d9:46:11:0b:f1:c7:18:
7b:65:1d:96:24:2f:1a:bb:fc:8c:f3:0a:34:8d:89:9d:a7:cc:
98:b3:65:aa:82:88:e3:b8:db:43:e3:36:5b:77:3d:00:c4:52:
08:b4:f3:c9:b6:bf:1c:7e:3a:92:b9:fb:45:0c:3f:9a:f4:9b:
a0:72:5a:de:96:35:2f:e0:37:de:a4:48:ab:63:90:37:7e:a8:
bf:83:06:ed:c7:11:c5:e2:db:66:d8:9c:0c:4a:d1:30:f0:58:
54:9c:e0:2a:bd:2f:56:a2:14:f2:8f:f5:bf:db:46:52:a0:32:
cb:07:0f:fc:f0:03:39:1f:c8:38:21:9c:ce:aa:18:4c:ec:1d:
e0:5c:de:a1:ac:8f:f6:65:8a:2b:e8:21:4b:cf:59:d8:97:92:
c6:09:d9:58:4c:bb:84:a0:b7:a7:78:3e:77:57:ee:1d:07:6f:
5d:e9:e6:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 14:36:53 2025 by rpki-client