Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363332313a3a2f34382d3438203d3e20343031353037.roa
File: 326131343a373538343a363332313a3a2f34382d3438203d3e20343031353037.roa (raw, json)
Hash identifier: 6+pl9jrdvcHoNRhu6jhM+Fa4fmmcGAjvZikSbRhrCcw=
Subject key identifier: 77:FB:D4:4B:C9:3D:D8:E5:1F:F6:15:97:E7:FE:FD:45:2B:11:50:26
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 166CE05EC118131E426CEBAAFAD060243A436808
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363332313a3a2f34382d3438203d3e20343031353037.roa
Signing time: Tue 20 May 2025 10:24:02 +0000
ROA not before: Tue 20 May 2025 10:19:02 +0000
ROA not after: Tue 19 May 2026 10:24:02 +0000
asID: 401507
IP address blocks: 2a14:7584:6321::/48 maxlen: 48
Validation: Failed, certificate revoked on Fri 23 May 2025 23:42:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
16:6c:e0:5e:c1:18:13:1e:42:6c:eb:aa:fa:d0:60:24:3a:43:68:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: May 20 10:19:02 2025 GMT
Not After : May 19 10:24:02 2026 GMT
Subject: CN=77FBD44BC93DD8E51FF61597E7FEFD452B115026
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:0d:6a:5a:40:c7:10:a1:dc:a6:d3:3f:11:31:
96:33:a4:ee:20:13:01:d7:49:08:02:ef:95:e2:06:
fb:59:e0:f4:ca:ee:69:82:ac:ad:4f:db:12:a5:75:
41:d2:80:f9:1f:91:7c:06:94:c0:33:7c:d6:be:29:
97:8a:f6:92:4d:dc:1d:bd:59:55:96:ad:03:fd:3a:
77:82:df:d3:24:63:85:f2:76:3b:5e:f5:f9:18:02:
0d:8c:11:07:3d:7e:94:0f:90:e4:2a:e2:13:dc:6c:
20:9c:f3:83:f0:a9:4a:be:c3:8c:77:f3:8f:97:67:
f7:de:e4:6c:06:a4:6d:26:f6:4e:fb:1a:ac:00:b6:
3c:54:a6:ad:f3:d8:42:2d:38:4a:dd:fe:0f:f6:86:
65:e4:f7:ee:16:c7:46:92:4c:19:1d:03:90:d9:d3:
4b:44:56:3d:77:fb:2d:ec:5e:90:ff:3a:dd:1a:e0:
92:7a:36:71:0a:8b:40:3f:44:3d:eb:ff:2b:80:8b:
25:6d:a1:ac:4c:8d:a1:34:dc:1f:24:58:5d:c9:90:
a3:7e:c5:02:e2:c0:a3:f6:97:67:d8:9a:9f:e6:d6:
12:d7:d2:54:c9:e1:04:91:67:d1:d2:31:8d:93:bc:
48:fe:cc:32:4d:4e:03:15:20:56:6d:b2:ff:4d:6f:
ba:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:FB:D4:4B:C9:3D:D8:E5:1F:F6:15:97:E7:FE:FD:45:2B:11:50:26
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363332313a3a2f34382d3438203d3e20343031353037.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:6321::/48
Signature Algorithm: sha256WithRSAEncryption
b1:81:25:f8:c9:60:7b:99:c6:67:1a:3d:17:22:be:ee:77:90:
cc:38:55:5d:97:db:fb:9a:25:99:16:3a:ea:1c:c7:5c:fb:ef:
e6:ec:d2:f1:97:6d:0c:4d:a6:f8:ed:f6:88:59:2b:40:36:38:
ef:67:80:01:0b:af:b2:18:80:48:f6:04:dc:7c:71:31:15:43:
7b:44:a5:13:53:fb:6a:a7:a2:5b:bc:6f:08:7d:cc:e2:58:c3:
65:5f:54:de:f6:c6:7e:6e:ee:ee:ed:d0:60:b6:b2:32:b8:a5:
99:ec:75:92:56:4c:5b:7c:ba:35:2a:7d:b6:48:f4:d5:aa:c1:
b3:8f:32:09:48:b4:3f:52:74:2b:26:71:8d:99:63:c8:c1:4b:
2e:a0:c5:ab:9a:32:55:06:21:fb:00:01:c2:e7:38:c8:1e:d5:
e6:30:29:39:0e:0a:dd:04:69:18:3c:da:45:37:80:9d:c2:7b:
12:8c:50:db:19:d2:de:fe:bc:cc:7e:e6:92:74:21:62:65:ea:
29:5d:5c:45:3d:88:fb:d9:ab:1e:a8:5f:28:0d:41:21:5a:7f:
11:15:e3:28:00:a6:9d:d8:8f:34:42:f3:3f:9d:78:02:8b:fc:
f4:be:03:d6:f9:b1:b9:92:56:dd:c9:b8:a9:aa:cb:e6:d2:a6:
d8:0d:2f:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 23 23:53:17 2025 by rpki-client