Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363330343a3a2f34382d3438203d3e20343031353037.roa
File: 326131343a373538343a363330343a3a2f34382d3438203d3e20343031353037.roa (raw, json)
Hash identifier: niT0fN1fCZj6REZ/jxLfD/+PmzuaKZz1mr/X+3SnHa0=
Subject key identifier: 53:EC:22:B8:61:F4:57:EE:BB:F6:60:FB:DA:02:52:F1:5F:6C:C7:BD
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 745D4B8D4FE80001262BF9A8A0D73926509EBA90
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363330343a3a2f34382d3438203d3e20343031353037.roa
Signing time: Mon 19 May 2025 18:18:01 +0000
ROA not before: Mon 19 May 2025 18:13:01 +0000
ROA not after: Mon 18 May 2026 18:18:01 +0000
asID: 401507
IP address blocks: 2a14:7584:6304::/48 maxlen: 48
Validation: Failed, certificate revoked on Fri 23 May 2025 03:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
74:5d:4b:8d:4f:e8:00:01:26:2b:f9:a8:a0:d7:39:26:50:9e:ba:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: May 19 18:13:01 2025 GMT
Not After : May 18 18:18:01 2026 GMT
Subject: CN=53EC22B861F457EEBBF660FBDA0252F15F6CC7BD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:16:5e:90:13:0e:61:b0:6d:7b:65:e0:fa:66:
07:43:14:41:f7:62:d0:9f:13:0f:06:86:1b:97:26:
89:58:6f:e7:5e:8c:d7:08:91:67:01:dc:47:c7:09:
64:e7:7c:56:9b:23:e2:34:70:4b:c1:97:f0:ed:a6:
2b:d2:8f:0d:6b:41:44:84:22:76:b4:12:d0:35:34:
c8:16:87:35:ce:e5:43:d2:6e:26:88:61:1f:28:ad:
dd:6a:a0:d6:84:94:58:9c:c6:c1:df:7d:e6:64:8e:
7a:eb:4b:e6:17:6b:d6:85:b2:f9:73:f5:ba:d0:94:
57:2e:30:98:e4:aa:b9:f2:1c:83:4e:37:08:34:b1:
a0:32:66:6e:48:2b:4f:80:a9:47:0d:91:98:09:1e:
bf:ea:64:19:13:58:bd:ec:65:ad:bc:ed:49:ff:72:
a7:da:e6:f0:cc:94:cc:2e:d3:e2:48:b5:a8:87:a4:
ad:0e:c8:dd:4a:39:bf:34:d8:0a:9c:97:63:64:f7:
5f:1b:cc:59:44:56:45:b4:65:61:a4:92:1d:af:6e:
36:2a:8e:ad:06:67:96:0d:c4:2f:8e:f0:6f:ce:75:
d6:5b:bf:a3:7a:2a:33:c8:ba:cb:06:0b:b9:aa:24:
18:5c:66:90:3f:6a:e5:55:fb:43:ae:16:1a:de:d7:
a0:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:EC:22:B8:61:F4:57:EE:BB:F6:60:FB:DA:02:52:F1:5F:6C:C7:BD
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363330343a3a2f34382d3438203d3e20343031353037.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:6304::/48
Signature Algorithm: sha256WithRSAEncryption
9c:7d:c8:93:9f:10:87:fc:f4:db:6d:bd:9d:c5:eb:eb:23:42:
6d:24:79:4f:c9:a5:de:18:37:21:ba:f4:04:eb:56:6e:c5:bb:
e0:0d:61:82:a3:2b:8f:95:06:e0:46:5e:6f:60:6c:9a:65:dd:
26:65:7a:cd:f0:cf:17:21:cc:c4:96:aa:a7:49:a4:31:a1:03:
df:a9:03:80:d0:1d:3b:7d:82:f0:94:cc:a7:a3:ab:28:f5:fe:
82:00:5d:75:9f:1c:8a:1f:af:ec:a6:b7:c7:fe:74:40:0c:de:
7e:cd:58:a6:c0:cf:88:7a:4b:1c:8f:62:11:5a:a2:88:22:84:
ed:f2:5e:b6:45:3e:f5:f1:12:8f:50:6d:f7:51:2e:1e:67:60:
32:42:56:7d:fd:57:ed:0b:83:e7:4b:2f:86:ed:79:4d:cb:48:
05:d2:d9:87:ac:9f:ed:1b:2b:85:d2:85:0d:68:ad:e5:96:36:
72:72:25:50:f2:bb:8d:ec:b9:e9:68:cb:21:fa:d3:e3:e5:0c:
0f:a0:f0:b3:b0:e7:bc:05:63:7a:bd:28:45:c1:41:01:be:e5:
d4:5e:dc:a7:8d:10:ca:3b:4f:15:38:ba:d5:ac:b0:85:e6:7c:
61:eb:e4:28:0e:5f:ec:4d:d2:40:6a:54:fa:0c:bb:c8:06:31:
83:e9:5c:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 23 23:55:25 2025 by rpki-client