Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363131333a3a2f34382d3438203d3e20343031353037.roa
File: 326131343a373538343a363131333a3a2f34382d3438203d3e20343031353037.roa (raw, json)
Hash identifier: OuBV2xciVGbWEUtkahxjQV0EvgUfi/QP2RqUJSVSOrU=
Subject key identifier: F3:76:AF:58:D3:67:AA:60:F4:B8:40:BF:2D:D2:55:3D:63:5E:79:D8
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 1478D2DA22CD13279BE41D5BB0F1D19111C0C9F5
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363131333a3a2f34382d3438203d3e20343031353037.roa
Signing time: Wed 02 Apr 2025 18:47:21 +0000
ROA not before: Wed 02 Apr 2025 18:42:21 +0000
ROA not after: Wed 01 Apr 2026 18:47:21 +0000
asID: 401507
IP address blocks: 2a14:7584:6113::/48 maxlen: 48
Validation: Failed, certificate revoked on Fri 11 Apr 2025 18:31:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
14:78:d2:da:22:cd:13:27:9b:e4:1d:5b:b0:f1:d1:91:11:c0:c9:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: Apr 2 18:42:21 2025 GMT
Not After : Apr 1 18:47:21 2026 GMT
Subject: CN=F376AF58D367AA60F4B840BF2DD2553D635E79D8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:9f:4b:83:d8:08:f9:4b:17:44:31:8c:a3:6e:
a1:96:e1:11:e8:09:2e:c7:b2:eb:f2:b0:36:8b:c9:
d8:15:5a:b0:3e:8f:9e:88:bd:4b:70:41:98:40:a3:
4e:90:43:b6:ea:ff:b8:a1:83:6c:6d:2c:22:91:e4:
c8:ab:e0:2d:ed:af:0f:21:24:8a:28:7b:91:80:79:
02:06:a3:a2:96:dc:d4:cd:f2:e9:79:19:4d:ca:61:
0e:e8:37:b6:f0:3d:e8:b5:ca:e7:0e:b5:fb:bf:94:
af:0c:2d:cd:b4:20:b5:32:9f:1a:bb:a6:7e:67:3d:
c4:e7:4b:bb:28:cb:06:26:4e:e0:52:e9:7c:5e:e3:
46:ab:a8:44:bc:2c:ff:54:bb:27:24:ea:d7:33:b1:
7d:c8:ae:05:9c:56:ff:83:8e:73:71:4c:b8:38:4a:
70:63:b9:4f:50:05:b6:62:b6:be:f9:88:7e:af:53:
ef:d2:25:1d:c8:81:b3:27:9a:d8:a0:ab:4b:d8:8e:
7f:f9:f5:4d:08:89:54:28:7f:c1:60:55:ab:e9:89:
8c:79:d7:4a:b4:41:38:a0:6f:2b:4f:0c:40:df:40:
08:a2:db:97:26:fc:47:e5:2f:a3:37:5e:c6:61:72:
a7:78:b8:af:7d:a6:fc:5d:65:c4:15:76:be:df:1f:
5b:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:76:AF:58:D3:67:AA:60:F4:B8:40:BF:2D:D2:55:3D:63:5E:79:D8
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363131333a3a2f34382d3438203d3e20343031353037.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:6113::/48
Signature Algorithm: sha256WithRSAEncryption
0c:a6:6a:ba:c6:58:0a:80:36:e2:68:df:e3:a5:05:25:a3:59:
14:e6:cd:d5:67:ed:51:94:d7:08:c2:e1:e3:81:e5:b9:7b:e5:
d9:db:cf:e0:3e:08:e2:55:0c:e7:04:78:d3:87:2d:32:38:c6:
1c:af:43:76:d1:21:4a:70:09:7e:45:d7:51:c5:22:c6:7d:dd:
48:ca:34:fb:8d:32:64:f5:01:02:7c:5a:72:0b:3d:07:9c:9b:
d4:6a:33:17:51:1e:83:73:c8:47:af:26:b3:09:0a:8b:c3:1d:
21:c1:9e:5a:4d:8b:66:ea:8b:9b:d7:d7:98:0b:6b:7f:2d:7f:
ec:eb:b7:51:4e:c1:81:8e:bf:8a:4e:94:d2:c3:8b:df:c2:d5:
49:b5:f7:00:4b:e8:56:b0:2e:cb:85:96:35:0e:a5:e3:28:2b:
e8:74:05:b6:da:3d:1a:ba:0a:1f:8e:1d:47:1d:af:19:14:98:
79:e0:76:fd:de:68:c6:f9:40:46:c0:17:35:c8:d3:14:37:a0:
df:39:b0:6b:d5:d3:03:6b:88:2c:41:0f:40:b9:55:1c:2f:81:
e3:55:7d:d3:b5:6a:57:c5:d9:2d:d8:3e:34:d7:c3:80:23:17:
ce:9b:40:8f:1c:30:df:6b:d0:c6:79:86:09:06:1d:dc:5c:18:
79:12:6a:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 23 23:54:16 2025 by rpki-client