Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/AS401507.roa
File: AS401507.roa (raw, json)
Hash identifier: QaaZTgwC9+AJaUDSXqDxqc7BrMWGjJlOjnG0rxLkJtk=
Subject key identifier: 98:E9:C3:E6:F3:1E:7C:0A:43:A9:53:4D:18:0B:63:68:A6:4A:BC:28
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 53A91C55603AB6D50C9270931A59C06870375B90
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/AS401507.roa
Signing time: Wed 25 Jun 2025 16:06:00 +0000
ROA not before: Wed 25 Jun 2025 16:01:00 +0000
ROA not after: Wed 24 Jun 2026 16:06:00 +0000
asID: 401507
IP address blocks: 2a14:7581:3500::/40 maxlen: 48
2a14:7581:3504::/48 maxlen: 48
2a14:7581:3508::/48 maxlen: 48
2a14:7581:3517::/48 maxlen: 48
2a14:7581:3521::/48 maxlen: 48
2a14:7581:3533::/48 maxlen: 48
2a14:7581:3534::/48 maxlen: 48
2a14:7581:3537::/48 maxlen: 48
2a14:7581:3538::/48 maxlen: 48
2a14:7581:3539::/48 maxlen: 48
2a14:7581:353a::/48 maxlen: 48
2a14:7581:353c::/48 maxlen: 48
2a14:7581:3545::/48 maxlen: 48
2a14:7581:3549::/48 maxlen: 48
2a14:7581:3551::/48 maxlen: 48
2a14:7581:355b::/48 maxlen: 48
2a14:7581:355f::/48 maxlen: 48
2a14:7581:3583::/48 maxlen: 48
2a14:7581:3588::/48 maxlen: 48
2a14:7581:3589::/48 maxlen: 48
2a14:7581:3590::/48 maxlen: 48
2a14:7581:3597::/48 maxlen: 48
2a14:7581:35a2::/48 maxlen: 48
2a14:7581:35a3::/48 maxlen: 48
2a14:7581:35ad::/48 maxlen: 48
2a14:7581:35be::/48 maxlen: 48
2a14:7581:35c6::/48 maxlen: 48
2a14:7581:35ea::/48 maxlen: 48
2a14:7581:35f3::/48 maxlen: 48
Validation: Failed, certificate revoked on Thu 26 Jun 2025 08:52:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
53:a9:1c:55:60:3a:b6:d5:0c:92:70:93:1a:59:c0:68:70:37:5b:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: Jun 25 16:01:00 2025 GMT
Not After : Jun 24 16:06:00 2026 GMT
Subject: CN=98E9C3E6F31E7C0A43A9534D180B6368A64ABC28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:f4:7c:a4:cd:d1:01:83:b1:26:26:e4:5f:d5:
fb:83:9a:4a:e3:5a:94:3b:5b:5d:50:c5:a3:3b:d4:
9c:76:54:3d:f2:f0:2d:73:70:38:9a:84:a4:6e:36:
88:d3:92:c4:03:9b:d4:e8:d3:ce:5f:cf:5b:d2:4d:
f4:20:1f:85:8a:15:b8:81:6e:6a:f1:78:f1:e1:09:
fd:5c:a4:c0:1d:19:7a:61:3f:51:f3:e3:bf:6d:85:
73:38:a2:b6:5f:be:34:96:19:6f:0b:3a:01:62:c5:
c2:d2:57:a4:9b:4c:26:9d:fd:e4:fb:2d:57:53:ba:
c3:60:c1:92:5c:70:2a:ac:f3:40:1b:64:93:a6:30:
ac:f0:18:b5:6c:a3:f6:77:ac:6e:9e:02:90:19:18:
5e:64:b3:a5:18:3c:8f:b2:ea:42:11:2f:08:3f:f4:
38:1d:73:ec:f6:c6:42:42:3b:fa:5e:1b:1b:24:6f:
4e:17:b9:45:e3:09:a3:29:11:3b:79:ee:d1:a7:fd:
8e:45:10:86:5d:2b:53:33:bf:5e:82:7b:13:2b:28:
02:2e:55:36:4c:ad:bd:37:6f:e9:49:53:2c:85:cd:
ba:eb:39:49:df:bb:f8:36:21:b1:7d:64:89:da:2c:
35:fd:07:23:c3:e7:ff:c0:9e:e2:04:b0:32:26:36:
cf:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:E9:C3:E6:F3:1E:7C:0A:43:A9:53:4D:18:0B:63:68:A6:4A:BC:28
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/AS401507.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7581:3500::/40
Signature Algorithm: sha256WithRSAEncryption
a6:c1:69:b1:67:7a:5e:10:03:a1:c0:95:2b:05:65:b6:8c:6f:
8c:cc:cb:4b:eb:d7:f3:73:af:ac:d5:79:8b:27:be:87:f8:65:
0d:6b:d5:65:bb:7e:78:af:a9:25:ba:42:e1:b7:4a:7e:4e:8b:
b8:2a:21:84:68:cd:bb:64:cc:a6:1a:59:08:16:77:28:8d:03:
66:c1:ca:8a:5a:06:a9:dc:16:17:75:50:a6:3a:6d:95:67:32:
04:3d:8b:40:41:94:89:ef:02:fd:fd:5c:a2:28:30:54:9b:a7:
91:23:6e:ee:b8:fd:08:e5:2b:b5:52:35:0a:27:5c:73:fd:1f:
c5:3b:72:d7:e5:ce:20:1c:05:ba:0b:33:0a:33:32:56:75:25:
7f:31:9d:a2:b0:21:a1:c2:52:94:84:93:d0:4e:a6:eb:c0:92:
ad:b6:04:a3:d1:fd:1e:79:6f:0f:94:1d:28:0a:77:88:81:82:
27:f3:6c:e4:14:06:30:ab:03:bf:1a:63:dd:f4:9e:b5:1e:eb:
b8:e7:34:4a:43:9a:32:19:5f:d8:59:89:fc:41:52:ef:37:31:
c6:7e:4b:70:30:72:e7:90:7c:96:c7:5d:c1:a3:43:5c:c3:04:
12:95:c3:2f:12:60:be:a4:c0:f5:79:cc:34:86:e0:99:33:78:
62:e6:86:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 23 23:52:34 2025 by rpki-client