Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363163633a3a2f34382d3438203d3e20343031353037.roa
File: 326131343a373538343a363163633a3a2f34382d3438203d3e20343031353037.roa (raw, json)
Hash identifier: Dbi7cCrPJvCt0QYDBZ05bbP2rU2a5RPV9eBiAi0nfUs=
Subject key identifier: A5:E1:40:F3:FC:04:1E:36:EB:C2:C1:D0:70:88:08:60:46:3A:43:4C
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 4AFE52D204CE051CDD2F9D937BBE08144ACE9CB1
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363163633a3a2f34382d3438203d3e20343031353037.roa
Signing time: Mon 12 May 2025 16:18:09 +0000
ROA not before: Mon 12 May 2025 16:13:09 +0000
ROA not after: Mon 11 May 2026 16:18:09 +0000
asID: 401507
IP address blocks: 2a14:7584:61cc::/48 maxlen: 48
Validation: Failed, certificate revoked on Sat 31 May 2025 17:16:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4a:fe:52:d2:04:ce:05:1c:dd:2f:9d:93:7b:be:08:14:4a:ce:9c:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: May 12 16:13:09 2025 GMT
Not After : May 11 16:18:09 2026 GMT
Subject: CN=A5E140F3FC041E36EBC2C1D070880860463A434C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:51:a0:8e:14:14:29:40:95:f8:c3:65:dc:17:
58:eb:f2:8d:2b:cc:83:12:38:04:51:a6:3e:30:37:
a1:bd:75:9d:6e:c6:29:17:e2:1d:59:9e:7a:96:c1:
d3:e1:02:f1:03:f4:93:33:4d:73:59:b5:8f:71:6d:
a7:9a:05:91:dd:3d:ab:19:6b:29:26:01:9d:9c:c5:
ed:1d:fa:b7:5d:c8:32:3b:c0:7d:91:30:20:91:35:
88:a9:27:08:dd:5c:69:a2:52:3a:12:ca:7e:cf:a4:
67:9b:8b:05:75:5f:74:75:64:1c:2a:26:3c:da:c4:
3d:ce:d3:b2:a0:ea:b6:7c:6d:ca:96:2a:b6:9d:7b:
f8:43:df:8f:f3:70:f5:cf:71:53:bc:71:35:73:1f:
79:fb:1a:99:d1:64:36:db:a3:ae:df:4c:64:dd:5a:
ab:aa:b2:df:4e:89:a6:39:03:6c:1f:4d:fe:22:8e:
f3:eb:6b:08:1f:43:62:0c:65:9c:9f:b1:c8:73:ef:
55:ab:54:83:11:a5:d5:05:73:0d:13:c3:7e:b7:d6:
3b:13:2a:f0:a3:2d:a2:76:6e:12:68:f9:ab:c2:0e:
47:80:31:43:7f:49:90:be:b8:b4:38:f9:77:01:0f:
c1:f1:8b:cc:29:29:33:01:a1:ed:3e:74:10:f6:ed:
ee:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:E1:40:F3:FC:04:1E:36:EB:C2:C1:D0:70:88:08:60:46:3A:43:4C
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363163633a3a2f34382d3438203d3e20343031353037.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:61cc::/48
Signature Algorithm: sha256WithRSAEncryption
87:a2:78:ef:59:cb:80:fb:20:9b:2b:4b:a7:16:e5:14:1f:76:
59:2d:08:02:2b:49:e2:9f:0f:5a:5b:18:95:9f:9d:be:e1:4f:
b6:4d:88:7a:5c:58:fb:45:a5:83:c6:b0:24:34:6d:8b:2f:17:
e7:4a:18:66:f6:57:ef:ab:8b:e7:84:0e:9c:30:59:99:cd:24:
14:4c:8d:9f:02:bb:b8:5c:f8:b2:6c:1f:de:63:88:cc:a4:c1:
15:1b:80:f5:1c:82:18:d0:60:95:b2:10:d7:f9:10:43:9c:04:
b9:6e:e0:a4:1a:57:db:70:19:64:84:78:28:77:95:ae:74:2a:
87:57:a5:00:78:3e:f0:e2:96:f5:7a:39:bc:35:aa:03:69:8d:
44:b8:8d:40:a6:ad:6f:42:ae:af:2f:b8:db:9c:6d:46:44:69:
3f:6d:c7:cc:e2:21:af:aa:57:93:ed:7b:a6:52:f2:c9:78:49:
cb:35:b3:d5:56:b2:db:70:2d:42:dd:b0:e6:46:d6:87:66:d2:
86:4a:fa:c0:a8:1c:88:6d:3f:8c:d5:57:f4:56:67:0c:b8:da:
26:16:9d:92:20:e9:e9:b6:1f:67:5b:da:30:01:33:76:60:6e:
d3:b6:06:75:52:03:ee:c6:40:6b:22:c8:71:02:d7:28:c1:55:
28:dc:b0:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 23 23:55:27 2025 by rpki-client