Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a366333373a3a2f34382d3438203d3e20343031353037.roa
File: 326131343a373538343a366333373a3a2f34382d3438203d3e20343031353037.roa (raw, json)
Hash identifier: 21tmdYdwKoYJ+wvaSFBKPOODjjvbXckB1kvovdGjw74=
Subject key identifier: 5C:08:9A:F1:A4:22:E7:14:B1:10:F9:1F:67:43:8D:79:7B:39:D8:FF
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 37F3A01F05BF0DC2E65CA37D7771052A0D51E521
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a366333373a3a2f34382d3438203d3e20343031353037.roa
Signing time: Fri 23 May 2025 20:51:00 +0000
ROA not before: Fri 23 May 2025 20:46:00 +0000
ROA not after: Fri 22 May 2026 20:51:00 +0000
asID: 401507
IP address blocks: 2a14:7584:6c37::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 28 May 2025 12:48:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
37:f3:a0:1f:05:bf:0d:c2:e6:5c:a3:7d:77:71:05:2a:0d:51:e5:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: May 23 20:46:00 2025 GMT
Not After : May 22 20:51:00 2026 GMT
Subject: CN=5C089AF1A422E714B110F91F67438D797B39D8FF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:df:f4:0f:95:b8:4b:28:d7:38:4d:e0:6f:6e:
56:c1:2f:bc:a3:af:74:7e:e8:6e:09:45:66:3a:e5:
ff:d6:79:37:76:cd:2c:7c:2a:a8:9a:4d:14:df:3e:
d8:91:0c:58:04:71:6e:e6:1a:c4:1c:99:79:1d:2c:
9f:97:56:05:03:5b:b3:aa:e3:23:8e:7b:ae:e5:21:
3c:20:b4:14:81:5e:08:b1:8e:5b:19:f3:77:42:8b:
30:6e:e5:9a:57:6a:b3:ad:54:fb:8b:48:98:01:d5:
d9:81:6d:60:5f:38:3d:5b:0f:5b:46:3a:be:b6:39:
74:aa:c5:20:85:56:ac:b0:d8:82:c3:83:1a:fb:d9:
24:c7:08:a2:a0:d2:f3:0b:b7:f7:0a:4a:a7:3e:59:
4a:55:3f:e9:d2:8f:85:3a:cd:a9:97:80:f3:30:da:
f8:e4:36:5d:73:94:2d:57:4e:be:06:a2:c2:72:aa:
61:c5:ef:aa:42:fd:e7:a1:f8:44:8f:f2:8b:0b:4e:
db:e9:bf:cd:c2:9e:f4:b0:f4:52:bb:a5:c3:0e:03:
05:90:85:f5:87:d2:1a:8f:25:c5:5a:02:a7:fc:ef:
61:af:75:48:69:c8:ab:a1:4c:88:74:d2:1c:86:30:
40:c6:df:7b:e6:4f:76:64:46:fb:be:22:57:41:64:
9d:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:08:9A:F1:A4:22:E7:14:B1:10:F9:1F:67:43:8D:79:7B:39:D8:FF
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a366333373a3a2f34382d3438203d3e20343031353037.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:6c37::/48
Signature Algorithm: sha256WithRSAEncryption
0b:03:08:7a:c4:de:18:00:5e:21:45:0c:e6:e1:be:33:46:f8:
21:a8:8f:b2:c0:17:19:89:35:54:f9:f3:aa:42:f1:bf:7f:a6:
57:c7:f4:c6:62:53:06:d4:ae:10:0a:3c:6e:de:f5:eb:9e:db:
04:1c:d6:8b:0e:42:0f:52:b6:6f:78:8c:28:d6:47:c6:18:c5:
be:b9:47:b5:94:f4:a3:7b:43:de:4a:fe:3a:af:4a:b6:35:36:
d0:57:41:1b:de:64:2e:d0:29:4b:df:de:91:e3:a4:5f:07:80:
3f:92:86:60:40:b6:11:74:c2:ba:be:63:e5:3a:f3:3f:c2:6f:
08:b5:ab:91:56:e5:ca:94:35:d7:e7:60:8f:b8:cd:c6:68:b6:
6c:d1:85:0c:be:9a:4a:ec:55:74:b8:60:0c:78:ff:4e:49:e7:
62:a6:90:79:46:89:84:8a:fd:19:0a:fb:b5:17:69:59:13:be:
91:6e:8f:30:8e:c3:21:ee:c6:a0:7c:41:e1:04:60:f0:f4:2f:
f0:fb:f8:0f:7c:77:ff:c6:00:e2:85:f6:b9:1e:ae:d1:94:d1:
38:d3:f2:86:85:62:f9:e7:31:50:4a:9d:7b:87:cd:c0:3d:1c:
6e:d9:02:93:4c:a3:30:0c:47:21:fb:a4:60:2a:89:4b:76:30:
2b:78:e2:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 05:59:38 2025 by rpki-client