Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363330323a3a2f34382d3438203d3e20343031353037.roa
File: 326131343a373538343a363330323a3a2f34382d3438203d3e20343031353037.roa (raw, json)
Hash identifier: WVoiCtg3SvuQVVsUbRq1SL6e89Z8s2Dhd7NmGxUZcNM=
Subject key identifier: F7:C4:FB:6E:7B:92:49:D9:05:53:F3:6E:DA:21:11:E3:5F:11:71:86
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 71659A3E3A3DEFE3391FABB0782EA497CF5C2ADB
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363330323a3a2f34382d3438203d3e20343031353037.roa
Signing time: Mon 19 May 2025 18:18:02 +0000
ROA not before: Mon 19 May 2025 18:13:02 +0000
ROA not after: Mon 18 May 2026 18:18:02 +0000
asID: 401507
IP address blocks: 2a14:7584:6302::/48 maxlen: 48
Validation: Failed, certificate revoked on Thu 22 May 2025 16:42:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
71:65:9a:3e:3a:3d:ef:e3:39:1f:ab:b0:78:2e:a4:97:cf:5c:2a:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: May 19 18:13:02 2025 GMT
Not After : May 18 18:18:02 2026 GMT
Subject: CN=F7C4FB6E7B9249D90553F36EDA2111E35F117186
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:ca:04:0c:c3:80:e0:80:55:11:bc:b2:f8:5b:
73:ed:d8:ed:94:c9:c7:e1:9f:ff:e4:89:c3:73:23:
da:9f:50:5e:a9:56:b6:b5:1d:a6:a1:95:02:01:08:
6c:0d:21:82:d7:ab:b1:89:0c:03:e5:05:67:ed:3e:
85:e9:2f:2d:2b:db:58:86:3c:ae:8c:49:55:ee:61:
8f:1d:82:ba:6a:6c:73:1d:54:0c:c6:b7:db:92:29:
81:e1:ba:44:eb:a1:f9:31:5b:81:c4:e1:03:05:ee:
33:27:c2:22:37:70:f0:af:a8:9f:24:70:ca:00:55:
53:5b:9e:8d:3a:69:5c:ff:14:c6:f8:ca:9a:87:b0:
c3:64:6a:6e:af:55:d0:8b:77:06:8a:2b:71:8b:12:
01:84:7e:84:f8:d1:70:b3:e4:9d:b2:54:0e:33:16:
27:16:10:4e:31:b4:71:fc:63:2e:7a:6c:36:22:d2:
94:9a:dc:f0:f6:1b:88:4c:d3:db:3b:93:f5:89:e9:
fc:e5:b1:a1:33:64:cc:34:1a:eb:ed:6f:4d:58:16:
4f:be:ae:a0:8d:2d:f7:ad:b9:83:ca:6b:5a:b5:d4:
39:82:bf:1e:50:29:8e:7a:d0:0d:f7:cc:86:73:7d:
94:87:47:10:57:dd:c8:5d:44:e0:df:5c:58:27:fa:
cc:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:C4:FB:6E:7B:92:49:D9:05:53:F3:6E:DA:21:11:E3:5F:11:71:86
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363330323a3a2f34382d3438203d3e20343031353037.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:6302::/48
Signature Algorithm: sha256WithRSAEncryption
0d:e1:44:9b:ad:1e:65:16:fe:7b:22:ce:d9:61:f7:75:24:3e:
aa:71:37:d9:2e:f7:04:cb:a2:ec:f8:e6:17:bd:ac:e7:40:97:
98:2c:d4:b0:a4:79:04:07:f1:d4:36:ef:5f:ff:23:67:31:b7:
29:17:59:f5:64:9c:ec:b7:c8:d2:75:e3:e4:39:c6:dc:d4:0d:
91:7d:ba:86:e4:71:3f:bd:8f:20:fe:2c:ab:8b:c8:4d:51:fa:
90:d4:e4:08:c2:33:cb:9f:ac:b7:fb:c3:35:16:8a:f6:02:40:
11:57:82:ca:27:4a:c7:14:e0:69:a3:91:eb:ce:35:a9:5c:71:
bc:8b:91:a1:34:a1:d5:01:ac:5f:c0:93:d5:3f:02:47:cd:0e:
fe:3a:ea:e4:f2:df:45:e4:91:38:5f:1f:f9:4a:52:72:41:43:
7b:5d:78:ff:1a:b4:f3:6f:a6:04:8f:5d:9a:4b:9f:a9:9e:73:
f8:96:dc:7c:a4:0d:c3:39:d9:8e:dc:5a:60:f7:14:f8:5d:72:
d2:ce:8a:f7:bf:06:ab:29:f2:48:df:cc:7c:cc:d0:13:b5:0a:
46:e6:e1:0f:83:9a:53:1f:db:1c:bc:d3:60:36:7c:70:dc:c7:
59:e9:de:13:b8:5d:07:00:26:af:d2:1a:d8:de:7f:fe:a4:63:
69:ec:af:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 25 01:01:05 2025 by rpki-client