Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363063333a3a2f34382d3438203d3e20343031353037.roa
File: 326131343a373538343a363063333a3a2f34382d3438203d3e20343031353037.roa (raw, json)
Hash identifier: HU1/bjAmj9WI7z4zhbmDddArtXzZYjrBrm3fYRn+rTc=
Subject key identifier: AA:94:7B:36:ED:16:3E:0B:9D:1A:9F:64:26:D0:F7:8C:A4:F0:7B:0B
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 599E54B604D23C749D86891860FD1E6CAA245BED
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363063333a3a2f34382d3438203d3e20343031353037.roa
Signing time: Sat 22 Mar 2025 15:21:24 +0000
ROA not before: Sat 22 Mar 2025 15:16:24 +0000
ROA not after: Sat 21 Mar 2026 15:21:24 +0000
asID: 401507
IP address blocks: 2a14:7584:60c3::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 02 Apr 2025 18:44:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
59:9e:54:b6:04:d2:3c:74:9d:86:89:18:60:fd:1e:6c:aa:24:5b:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: Mar 22 15:16:24 2025 GMT
Not After : Mar 21 15:21:24 2026 GMT
Subject: CN=AA947B36ED163E0B9D1A9F6426D0F78CA4F07B0B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:c9:75:38:58:82:f5:6c:03:4c:25:07:6f:ab:
1e:53:51:11:de:4d:b5:7a:00:e7:d5:d6:b9:96:b1:
8c:5f:c6:ed:07:3d:c0:9c:50:03:87:01:79:e8:39:
3a:1c:76:96:e1:b0:50:d2:27:d2:f6:5c:3a:13:21:
96:92:88:13:ef:e5:76:2d:ed:dd:94:94:ec:3a:10:
02:a3:f0:e1:b8:94:82:e7:dd:ad:dd:0a:69:b7:11:
9b:56:56:11:ec:0a:11:0f:86:23:04:fe:b1:01:66:
5d:38:db:94:ae:ca:8c:9a:fc:e0:73:ae:63:80:77:
3e:56:a1:0e:98:16:17:01:2e:ad:36:37:30:fb:a0:
79:78:18:aa:f8:76:e7:58:96:7c:76:34:db:5d:14:
91:ed:95:58:14:93:c5:30:49:77:55:2e:47:1f:5d:
4a:80:f8:e6:ca:f0:58:78:99:06:8c:09:93:95:d7:
96:20:c6:a7:42:73:4d:65:10:61:0c:9a:56:17:81:
f1:b5:22:2a:4a:81:f5:d7:fc:d0:76:bc:b5:6c:85:
13:c8:f7:32:c3:1a:20:41:eb:b4:ce:5c:a2:ec:39:
a8:3b:a5:71:86:f9:09:69:0a:31:19:ed:77:2c:fb:
da:4d:05:ae:05:a9:05:da:f8:d5:77:4e:81:93:d7:
2e:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:94:7B:36:ED:16:3E:0B:9D:1A:9F:64:26:D0:F7:8C:A4:F0:7B:0B
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363063333a3a2f34382d3438203d3e20343031353037.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:60c3::/48
Signature Algorithm: sha256WithRSAEncryption
24:88:da:9d:f3:22:0f:2d:60:cd:dd:00:64:8d:1c:7b:da:6a:
7f:6c:84:59:af:9d:22:60:4e:8c:9e:e1:bb:a2:7b:4f:51:cc:
ae:00:03:9b:1b:e2:c1:2a:1a:0e:3c:c9:0b:32:79:0c:83:51:
e7:20:e9:59:ce:4c:d8:4f:36:41:cc:77:c3:ab:74:5d:fe:d3:
c6:e9:e8:2e:36:90:ea:78:74:c1:a4:23:d0:f2:72:22:b2:be:
b5:4f:37:df:e8:1b:d6:66:a1:50:fd:a7:61:f5:48:0a:f2:8b:
b9:7c:39:5b:1e:ff:db:f9:8f:b8:e3:1c:c7:1e:41:6c:5f:12:
81:0c:2a:f8:ad:6f:92:56:eb:d6:6c:88:6f:40:e1:b0:6d:40:
4a:12:48:96:d4:7c:42:93:bf:c1:47:2b:d6:ea:36:35:bf:76:
c9:6c:96:ee:8e:3f:ee:95:18:30:54:87:c7:bf:c9:69:1c:a3:
6a:11:4c:6e:ed:61:55:91:12:5a:48:45:aa:e7:c4:e4:db:bb:
82:96:a8:15:24:64:bb:ca:fa:35:f1:da:bb:be:8b:7f:0c:3a:
8f:e3:19:96:56:cb:3c:4a:a1:f5:36:f1:22:36:f0:cf:ef:23:
6e:26:83:b3:e1:43:2b:be:7f:b7:f1:ea:a5:58:02:9b:fb:16:
54:b4:e2:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 3 07:37:32 2025 by rpki-client