Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a366166363a3a2f34382d3438203d3e20343031353037.roa
File: 326131343a373538343a366166363a3a2f34382d3438203d3e20343031353037.roa (raw, json)
Hash identifier: x92QvupD9teOgPa+hAY51o7EHn2POojwxXxd3h/wq2k=
Subject key identifier: 84:29:86:0A:46:9E:82:FA:DA:3F:10:8E:EE:E0:A8:47:FA:E9:28:49
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 27CA1DE6FF394381D3F01F39AF64EBFED41D89C1
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a366166363a3a2f34382d3438203d3e20343031353037.roa
Signing time: Wed 28 May 2025 23:12:01 +0000
ROA not before: Wed 28 May 2025 23:07:01 +0000
ROA not after: Wed 27 May 2026 23:12:01 +0000
asID: 401507
IP address blocks: 2a14:7584:6af6::/48 maxlen: 48
Validation: Failed, certificate revoked on Sat 31 May 2025 17:16:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
27:ca:1d:e6:ff:39:43:81:d3:f0:1f:39:af:64:eb:fe:d4:1d:89:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: May 28 23:07:01 2025 GMT
Not After : May 27 23:12:01 2026 GMT
Subject: CN=8429860A469E82FADA3F108EEEE0A847FAE92849
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:f1:29:15:01:22:25:35:41:92:a2:ea:a2:17:
bf:12:c3:35:91:42:b2:56:25:d7:21:00:94:10:b7:
2f:b0:b4:49:f1:e9:31:eb:36:52:05:e8:10:7a:21:
9b:58:4d:c4:51:60:7a:a4:1c:d3:f2:6d:5b:d1:2a:
e1:f7:9b:3c:97:3b:74:e9:da:50:09:1f:cd:ca:88:
c0:bb:5c:ab:c6:8d:39:55:ad:c8:37:ce:8f:41:f7:
97:1f:d4:71:01:13:b3:52:77:d6:e8:11:d4:bf:7e:
76:07:a0:b1:39:6e:e1:d2:48:83:5e:74:55:9a:eb:
87:39:18:9d:12:43:00:57:5c:9f:a2:3a:e8:c2:65:
ca:cd:b8:da:b0:5a:fa:88:7e:9d:9d:38:ec:43:9d:
48:f3:8b:41:f2:05:bc:6b:49:a3:82:d9:77:f8:f8:
d8:12:b2:96:98:b1:8b:e9:d1:90:86:57:d1:a5:03:
b1:a4:14:84:e6:ca:68:98:1e:61:4b:e8:f0:0b:6e:
2b:91:84:4d:28:a9:71:ad:e4:7b:e8:98:b1:68:6f:
60:70:e3:9d:4a:31:a5:d0:4a:ab:77:cd:67:76:2a:
0f:8c:e9:65:91:43:77:11:75:b8:41:3f:80:bf:b2:
86:8c:1e:40:59:8e:f9:ef:c6:91:f1:b5:a8:8f:ff:
7a:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:29:86:0A:46:9E:82:FA:DA:3F:10:8E:EE:E0:A8:47:FA:E9:28:49
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a366166363a3a2f34382d3438203d3e20343031353037.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:6af6::/48
Signature Algorithm: sha256WithRSAEncryption
b1:36:c3:11:5c:37:96:0d:4e:45:3c:d6:f8:66:45:d8:9c:05:
20:de:ea:65:76:fc:40:7f:40:b7:4d:33:92:0e:3d:d9:4f:dd:
fc:99:ae:ac:cf:a0:6d:bb:47:f1:1c:46:2b:84:65:2f:f2:36:
93:ba:1d:88:bf:88:fb:8e:4e:af:10:e8:2c:f4:b2:35:05:e9:
19:65:b1:ec:b1:90:82:c5:cb:b7:a3:64:79:c1:7f:1c:d9:97:
59:5c:54:c5:84:fd:bb:a0:8d:30:cf:5d:31:8b:86:fc:bf:3b:
3f:f0:76:ac:ee:3b:33:9c:a6:ca:3f:23:7a:79:51:76:ec:15:
aa:d9:99:81:4b:74:2a:05:d0:a8:40:c3:7f:a3:54:16:6e:89:
e8:36:74:95:6e:a5:fc:8c:47:c9:c7:f4:4b:90:90:df:61:62:
31:e7:c0:ae:2e:cc:ac:9b:42:6b:91:14:dd:88:1c:8f:29:b8:
16:78:eb:ff:5a:3f:66:b9:1f:9c:aa:f8:8f:89:51:15:94:6b:
3c:32:e4:1a:68:34:a6:09:b3:16:ba:df:8b:10:cd:b8:1c:e0:
54:ac:58:b4:80:05:f3:b3:90:cd:31:f7:4f:6a:05:a9:c1:34:
9f:42:e9:d0:a8:7a:a3:18:14:d5:05:82:53:53:d2:92:5e:bd:
c6:db:07:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 06:17:08 2025 by rpki-client