Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363163663a3a2f34382d3438203d3e20343031353037.roa
File: 326131343a373538343a363163663a3a2f34382d3438203d3e20343031353037.roa (raw, json)
Hash identifier: HJCgHsMeM/0U21tSuDFpSFyJ+xa3k5gLAKphomm3hjE=
Subject key identifier: C7:A2:C0:E2:50:B0:2A:72:3B:1A:EF:6E:6B:24:1F:B6:08:65:3E:9F
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 62EE2E1A25B5EE0C71DD4ACCF2214D652B32C08F
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363163663a3a2f34382d3438203d3e20343031353037.roa
Signing time: Mon 12 May 2025 16:18:06 +0000
ROA not before: Mon 12 May 2025 16:13:06 +0000
ROA not after: Mon 11 May 2026 16:18:06 +0000
asID: 401507
IP address blocks: 2a14:7584:61cf::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 14 May 2025 21:36:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
62:ee:2e:1a:25:b5:ee:0c:71:dd:4a:cc:f2:21:4d:65:2b:32:c0:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: May 12 16:13:06 2025 GMT
Not After : May 11 16:18:06 2026 GMT
Subject: CN=C7A2C0E250B02A723B1AEF6E6B241FB608653E9F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:30:40:80:41:1e:66:cd:6b:8d:24:bc:15:ec:
9f:d0:1c:86:e3:37:20:a9:28:d9:27:c7:93:ca:9b:
13:f8:c6:79:7a:27:98:f3:24:27:a5:b4:51:aa:fc:
46:9d:3c:78:8b:96:0f:ed:b2:2b:74:3b:7f:46:d7:
6b:e6:d0:94:1a:3a:78:b6:e8:6b:08:9d:5e:b8:3b:
12:14:b5:c2:b0:a1:96:b2:77:77:0b:40:60:5f:69:
7b:06:58:57:98:bb:a1:27:14:cf:ac:c5:83:39:97:
e2:c2:f2:d4:ce:a8:08:82:e5:16:27:f6:2f:72:d0:
46:3e:fb:a0:55:59:36:d5:0d:97:45:e7:45:7b:04:
93:3b:83:55:10:c6:a6:97:29:2e:a3:48:96:80:2d:
bc:06:e9:a3:f8:da:dd:55:e8:06:5c:c9:ff:43:a6:
f7:ab:c9:04:c9:7f:3b:a8:0b:8e:40:e7:d0:f9:e3:
43:13:c8:6c:25:d4:59:d7:21:40:af:ea:44:83:59:
92:57:5e:84:fd:e4:d1:3a:80:c8:35:1f:e8:59:f1:
3c:04:f7:c9:20:ce:df:df:a7:12:91:77:98:ff:36:
b9:74:f6:bf:51:5b:b2:29:69:23:9e:4e:ac:d5:26:
5f:5d:15:83:ec:72:25:d0:78:31:01:9b:de:43:2b:
51:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:A2:C0:E2:50:B0:2A:72:3B:1A:EF:6E:6B:24:1F:B6:08:65:3E:9F
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363163663a3a2f34382d3438203d3e20343031353037.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:61cf::/48
Signature Algorithm: sha256WithRSAEncryption
39:28:1c:20:80:29:4f:6b:bb:cd:f0:e5:ae:b8:78:3c:c0:c3:
11:ae:ec:62:8a:1c:50:dd:73:89:83:53:65:37:7c:83:17:fa:
cc:cc:cd:c3:26:75:4d:11:34:0f:1d:61:7e:02:2c:3c:d7:93:
31:a0:5d:2b:11:3b:f7:8d:bc:b2:5d:2e:83:dc:4d:09:83:8d:
4b:08:7f:7f:22:47:e0:13:1a:02:0a:81:bf:1b:5d:59:38:7d:
e9:24:7d:ac:62:ab:c4:f7:6e:35:55:ca:1c:8e:a1:01:37:8b:
bc:1c:34:cc:6e:2d:4d:42:f2:23:bc:4c:4d:0c:fe:1a:0d:ed:
02:c8:ef:e1:69:aa:bd:c0:61:53:24:03:3d:eb:b4:e9:88:66:
bf:bc:b7:87:3e:60:3c:cc:e1:9a:79:f3:9b:e8:05:75:5d:04:
5c:25:31:48:fa:82:49:49:4c:82:c9:e8:92:40:c4:7a:8c:de:
a4:49:28:b4:d8:c7:b6:db:49:15:5b:58:a1:d9:13:4c:a0:9e:
13:80:b9:45:b4:9f:f1:8c:fa:dc:6c:99:95:56:ac:fc:f1:c7:
9c:97:ed:9b:39:0e:9f:07:39:de:6c:4a:c2:ea:fa:73:cf:95:
b0:42:f3:37:7e:08:3c:72:82:79:fa:1d:2c:29:d2:6e:08:a3:
50:ac:9d:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 03:14:32 2025 by rpki-client