Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363063353a3a2f34382d3438203d3e20343031353037.roa
File: 326131343a373538343a363063353a3a2f34382d3438203d3e20343031353037.roa (raw, json)
Hash identifier: itpVJr/NwhnKxYQI+uVwSiCjQzc7IHOzlHBUPkhSCYw=
Subject key identifier: 26:30:74:99:76:04:C7:8C:50:3C:C7:7F:93:CA:B7:3C:C9:A8:28:F5
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 321A60E75B94C3AB502CCC2E48729B4D77B39DDF
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363063353a3a2f34382d3438203d3e20343031353037.roa
Signing time: Sat 22 Mar 2025 15:21:25 +0000
ROA not before: Sat 22 Mar 2025 15:16:25 +0000
ROA not after: Sat 21 Mar 2026 15:21:25 +0000
asID: 401507
IP address blocks: 2a14:7584:60c5::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 02 Apr 2025 18:44:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
32:1a:60:e7:5b:94:c3:ab:50:2c:cc:2e:48:72:9b:4d:77:b3:9d:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: Mar 22 15:16:25 2025 GMT
Not After : Mar 21 15:21:25 2026 GMT
Subject: CN=263074997604C78C503CC77F93CAB73CC9A828F5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:0d:30:f8:87:21:05:b9:3d:a8:5d:37:ec:99:
2c:98:07:83:80:91:23:ed:1e:0e:1a:37:6c:bb:6b:
e6:c0:35:63:a5:55:0b:62:5d:2f:69:f8:a3:96:6e:
3e:75:d0:6f:ba:1b:08:4b:8c:dc:83:64:64:b1:48:
b1:98:f7:e7:f5:a7:5c:74:41:4d:b1:af:95:9b:9f:
85:b2:e4:a1:c9:28:04:c9:ae:84:39:d3:98:6c:74:
5a:e2:d1:22:96:bb:f1:60:87:8a:5b:9f:33:d1:d5:
20:b0:a2:e9:e5:07:be:5e:d0:2a:44:7a:4f:4e:48:
88:cb:1a:76:a9:f4:5c:06:4d:dd:fc:51:59:b3:e6:
d5:b0:b3:93:1e:59:85:c1:e2:a9:0f:aa:88:99:7c:
c4:fd:37:86:b6:c8:7d:70:c0:8a:cd:bb:af:fb:c5:
87:bf:54:33:79:96:6c:62:83:73:0e:37:9a:4b:8c:
03:b5:dd:4d:1f:95:d5:90:bd:de:d2:d2:a3:91:e6:
d5:da:93:af:b3:34:5e:28:5e:b5:b9:01:00:ae:da:
86:77:b5:cf:8f:1e:94:62:1a:15:d2:ca:79:8e:58:
80:d5:ee:f8:49:c6:1e:28:48:44:c6:31:05:b3:00:
68:45:ee:13:2a:f4:45:2b:5d:52:b6:15:22:57:bf:
17:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:30:74:99:76:04:C7:8C:50:3C:C7:7F:93:CA:B7:3C:C9:A8:28:F5
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363063353a3a2f34382d3438203d3e20343031353037.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:60c5::/48
Signature Algorithm: sha256WithRSAEncryption
4d:a2:3a:9e:13:12:b3:da:8b:b7:ee:d1:41:67:a2:10:e1:29:
87:61:3f:fe:6a:2f:a0:8d:00:cd:d4:73:98:02:e7:25:83:0e:
ee:17:5b:4c:0e:8b:b5:a1:87:58:75:70:f5:8f:2a:5b:ee:1c:
76:6c:dc:4c:8c:57:8a:54:70:ff:4b:5a:5e:95:46:b6:ec:c9:
0c:ce:68:c7:9d:ba:5f:cc:53:c7:cf:2f:73:01:f5:21:f1:e5:
87:be:6b:09:1c:0c:e0:3e:bb:ff:38:53:4e:a9:46:57:80:16:
fa:99:0d:7c:b5:60:95:ee:34:b2:8c:ba:dc:54:ec:6a:79:90:
b6:e5:c2:8b:dd:a4:85:f5:e9:af:60:58:9b:3c:17:63:11:da:
6b:f9:45:e3:1b:93:98:47:e1:44:8d:f7:db:08:76:9b:29:c4:
5a:d4:3c:6e:9d:4a:c5:8f:84:fd:7e:d7:a5:11:18:2b:9b:3f:
3f:b9:ea:2b:80:fa:63:3e:f9:e2:da:4a:2c:ca:15:34:ff:46:
db:c4:5c:6f:77:b3:7e:bb:3e:cc:28:14:ce:f8:cd:e6:dd:97:
cb:1f:8d:fc:65:c3:4f:06:af:87:21:4e:dc:18:39:58:a3:b2:
f3:49:7b:d9:0d:2c:4e:5e:21:cb:5f:ce:f6:34:84:05:49:86:
1a:3c:61:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 3 07:36:56 2025 by rpki-client