Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363936643a3a2f34382d3438203d3e20343031353037.roa
File: 326131343a373538343a363936643a3a2f34382d3438203d3e20343031353037.roa (raw, json)
Hash identifier: 1vqEv2f6v8CMvRjTdqcrtAPWhbOXd13bwjCugwpdq6Q=
Subject key identifier: 11:14:B6:B8:99:42:00:89:0E:CE:3D:16:65:5D:E6:C4:56:A2:1D:A6
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 36A235AF1E12E64458165E23C735C716C0F63FF2
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363936643a3a2f34382d3438203d3e20343031353037.roa
Signing time: Sat 31 May 2025 00:54:01 +0000
ROA not before: Sat 31 May 2025 00:49:01 +0000
ROA not after: Sat 30 May 2026 00:54:01 +0000
asID: 401507
IP address blocks: 2a14:7584:696d::/48 maxlen: 48
Validation: Failed, certificate revoked on Sat 31 May 2025 17:16:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
36:a2:35:af:1e:12:e6:44:58:16:5e:23:c7:35:c7:16:c0:f6:3f:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: May 31 00:49:01 2025 GMT
Not After : May 30 00:54:01 2026 GMT
Subject: CN=1114B6B8994200890ECE3D16655DE6C456A21DA6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:f7:06:53:28:2e:66:1e:3d:75:49:8b:d4:f2:
6d:c4:bd:05:f4:63:12:71:1c:19:79:05:28:b9:7b:
40:d1:89:5d:ff:1c:c3:63:77:1e:41:b7:48:f9:10:
08:d6:19:f3:c0:67:ee:31:31:e5:ab:44:79:be:c9:
fd:9c:94:53:c9:a0:28:e9:ed:93:f9:ff:41:a7:0c:
8b:5d:be:2a:db:4b:63:29:56:ca:6f:b3:96:00:24:
b8:8c:09:cf:11:5c:13:a4:cf:42:2e:01:3d:d3:2d:
e2:62:36:57:b4:92:8b:6d:a8:cd:41:aa:b2:36:dc:
01:61:20:e0:77:96:92:66:53:79:d8:47:71:93:e1:
57:c5:4a:a8:cd:3e:81:6c:cd:04:db:b9:1c:51:f8:
7e:83:99:bd:9d:7d:79:08:f5:81:67:38:24:af:11:
2f:45:87:05:cc:9e:7c:66:69:51:e9:f4:aa:7e:c7:
d6:ee:ee:9d:63:a0:01:27:19:da:9c:15:25:88:a6:
b9:24:2c:e3:9f:0f:57:8c:cc:77:12:3b:ab:8f:23:
8f:b3:11:6b:5f:75:3d:32:7b:29:b7:09:1e:8f:74:
92:81:11:6e:df:2c:d7:51:5b:ab:82:3f:7a:58:80:
69:ff:fe:49:6e:e1:57:8f:29:d5:ce:b3:1f:78:7a:
74:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:14:B6:B8:99:42:00:89:0E:CE:3D:16:65:5D:E6:C4:56:A2:1D:A6
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363936643a3a2f34382d3438203d3e20343031353037.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:696d::/48
Signature Algorithm: sha256WithRSAEncryption
3e:95:b8:96:22:46:fe:85:fd:fc:b9:d8:b5:84:53:d8:6c:c8:
4c:df:c0:8a:47:e1:be:84:74:4e:d1:5d:6e:1b:38:ed:a9:a2:
9f:f2:9e:8a:19:86:24:fe:6c:7f:da:06:89:11:64:99:b1:59:
1f:b9:d7:7f:11:73:2e:09:88:af:ac:5b:56:d5:58:ac:0f:bd:
38:ad:20:40:c3:e2:20:df:ce:bc:be:4e:12:0d:88:91:a1:df:
14:62:ce:a9:e8:c1:19:38:c1:00:cc:56:90:2e:01:3d:0c:da:
e9:68:b4:ab:44:2a:06:a0:cb:03:b0:7e:8b:dd:bd:e3:a2:51:
e4:bf:ee:4d:6e:a0:33:be:fb:bb:79:bf:80:cd:e6:33:18:12:
67:4b:41:23:42:80:3e:d8:90:49:03:8b:27:8a:e5:a1:b7:60:
0b:5a:94:40:4a:4c:02:5d:5f:85:9a:9b:49:ee:50:ef:72:60:
9d:a2:5c:9f:d7:a0:1c:7c:7a:67:c5:b7:23:3e:c5:58:b1:14:
09:73:b0:1e:a9:c4:bb:56:f9:86:a0:4d:fa:4b:5e:74:88:30:
ee:17:a2:78:31:2e:5f:48:c9:70:af:72:0d:14:9f:ff:16:65:
6c:2b:43:d6:ba:22:87:80:19:cd:a5:c9:8f:ee:f9:31:e8:1f:
67:a1:59:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 05:58:29 2025 by rpki-client