Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a366331323a3a2f34382d3438203d3e20343031353037.roa
File: 326131343a373538343a366331323a3a2f34382d3438203d3e20343031353037.roa (raw, json)
Hash identifier: hwZcbTZXTaURZugAiDibr4WdiJmEfp9gwMiUN1VzJDo=
Subject key identifier: 58:AF:BE:AD:29:2D:59:21:1C:84:70:30:BB:18:B0:BC:04:7B:A9:44
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 6272EE991C19494F5657300D1256C60FA65F71BB
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a366331323a3a2f34382d3438203d3e20343031353037.roa
Signing time: Tue 27 May 2025 00:30:02 +0000
ROA not before: Tue 27 May 2025 00:25:02 +0000
ROA not after: Tue 26 May 2026 00:30:02 +0000
asID: 401507
IP address blocks: 2a14:7584:6c12::/48 maxlen: 48
Validation: Failed, certificate revoked on Sat 31 May 2025 17:16:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
62:72:ee:99:1c:19:49:4f:56:57:30:0d:12:56:c6:0f:a6:5f:71:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: May 27 00:25:02 2025 GMT
Not After : May 26 00:30:02 2026 GMT
Subject: CN=58AFBEAD292D59211C847030BB18B0BC047BA944
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:e4:31:a5:24:3b:25:67:17:b1:0a:16:bc:ea:
fd:fb:6b:e0:51:87:6a:40:bb:6b:71:a6:45:ab:5b:
39:6a:f0:03:e6:10:a5:f5:e9:7a:b4:b4:af:b4:37:
74:15:39:23:de:d2:08:8e:34:fe:f0:b9:8d:c8:82:
63:be:56:3f:b3:a8:f7:c3:3c:24:a9:27:a4:bd:bc:
ca:fe:3d:34:f8:5b:7b:6a:9b:7a:75:b0:0c:69:7f:
28:d2:d6:ba:d6:6c:ba:93:74:a4:d9:67:05:11:ae:
9e:7d:70:f5:e2:18:42:bf:ea:a1:6b:36:11:16:aa:
fb:cc:8d:fa:e5:e9:b6:a2:6f:f8:70:fd:2f:6c:6b:
00:30:6d:6d:e9:b5:f9:5d:d6:96:09:87:d2:6d:14:
c2:39:98:ae:04:38:b6:40:80:4c:af:99:45:f6:83:
b1:4f:d9:41:0a:c5:28:cc:39:5d:a0:dd:a9:85:ef:
ed:91:24:11:4d:86:64:1d:e0:68:48:b9:64:fc:f9:
3e:9f:cf:f1:ce:b5:bd:7f:bb:cd:28:8a:8b:61:59:
58:ad:77:43:f5:c7:04:b3:48:95:70:78:45:a7:6a:
24:23:4a:89:97:41:58:bb:13:34:5e:aa:6f:cd:a2:
b7:dd:3d:7e:c9:df:24:51:b3:42:4e:dc:7c:c3:1e:
72:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:AF:BE:AD:29:2D:59:21:1C:84:70:30:BB:18:B0:BC:04:7B:A9:44
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a366331323a3a2f34382d3438203d3e20343031353037.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:6c12::/48
Signature Algorithm: sha256WithRSAEncryption
75:58:57:98:f8:11:51:5f:98:74:32:09:7e:d9:a7:3f:00:56:
30:d6:b6:69:66:32:de:3d:0d:2a:f1:ce:04:14:67:a2:aa:62:
76:4d:cb:96:a5:10:08:eb:13:0f:f9:14:12:57:19:e6:85:5b:
06:6d:21:62:61:fb:ea:b2:a5:b6:6d:b6:eb:ae:9d:a5:c6:bd:
de:61:59:6c:f5:ba:70:6a:76:44:ab:f2:06:a6:02:ed:33:47:
90:b3:e6:cf:bf:41:91:06:00:98:0a:9e:79:b7:0c:bf:b9:11:
b5:5f:10:ae:3a:f6:66:1d:b9:72:c8:0d:71:5d:53:cd:8b:63:
39:58:96:9b:70:71:84:17:27:c5:01:17:55:8c:84:ce:37:af:
f2:a3:e3:50:b5:98:f3:a2:20:b1:e0:04:ec:35:ea:8c:19:55:
69:12:62:a2:08:fe:3a:dc:ba:9a:23:de:0e:ae:3a:07:7e:1f:
a1:f6:a2:cc:89:92:67:dd:e0:9e:5d:fc:97:a0:a8:d5:d6:06:
2f:bf:9d:47:9f:3e:46:ab:76:32:56:52:ed:66:2c:16:17:bc:
c5:99:bc:c2:94:4e:58:98:6a:32:8d:bf:7f:94:72:0f:a1:7c:
14:c4:80:0c:30:25:07:45:45:49:5d:4a:53:1f:50:da:77:f0:
8c:07:e4:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 21:12:09 2025 by rpki-client