Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363164363a3a2f34382d3438203d3e20343031353037.roa
File: 326131343a373538343a363164363a3a2f34382d3438203d3e20343031353037.roa (raw, json)
Hash identifier: yP8R7nxNUzEwdJeGYEbENqHN5kw36DMcFUoPZ3TQK3A=
Subject key identifier: 64:1B:56:A3:DF:02:78:DF:E7:DB:1F:D4:FE:AA:9B:BA:8F:22:5B:E9
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 67A2436E3CD0BCAE96948968FE5B07485C27324B
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363164363a3a2f34382d3438203d3e20343031353037.roa
Signing time: Mon 12 May 2025 16:18:03 +0000
ROA not before: Mon 12 May 2025 16:13:03 +0000
ROA not after: Mon 11 May 2026 16:18:03 +0000
asID: 401507
IP address blocks: 2a14:7584:61d6::/48 maxlen: 48
Validation: Failed, certificate revoked on Fri 16 May 2025 04:42:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
67:a2:43:6e:3c:d0:bc:ae:96:94:89:68:fe:5b:07:48:5c:27:32:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: May 12 16:13:03 2025 GMT
Not After : May 11 16:18:03 2026 GMT
Subject: CN=641B56A3DF0278DFE7DB1FD4FEAA9BBA8F225BE9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:b3:67:ed:76:2b:1e:30:da:5a:58:e6:46:c0:
cf:f7:ea:3c:6a:37:44:1f:b4:8f:b8:8d:bf:4d:c5:
04:f4:5f:d6:d4:d3:65:2b:4a:7e:07:14:25:ec:bc:
c9:bd:a4:7e:4c:b7:c0:14:66:1b:fc:ca:e4:7d:19:
12:93:f8:71:52:d5:18:b4:b8:d7:cf:ee:56:dd:88:
a6:fe:e1:45:4b:8b:04:43:5c:7e:f4:3f:cc:29:13:
11:cc:3d:4d:a0:21:a6:6c:7f:42:a0:36:fe:f0:d8:
29:2d:08:ce:0c:97:77:e0:10:2a:db:36:17:fc:5e:
99:7a:3b:63:1c:ea:01:de:24:b7:f2:7a:25:a0:68:
70:09:cf:bf:df:9d:32:f6:17:56:38:90:ad:c8:18:
a0:72:0b:32:51:79:14:58:bd:19:3d:6c:c4:0d:75:
7c:6f:57:8a:e3:a3:ba:8a:d1:98:21:62:d2:a8:35:
98:d4:a0:ae:2e:d5:aa:c7:b1:e1:4f:e2:d2:82:79:
c3:a8:36:5c:44:f8:b9:75:8f:78:2a:8b:35:eb:73:
6b:ac:cc:02:08:e1:27:c7:02:73:c0:0c:f7:2e:fd:
9b:ca:a9:55:84:f4:f7:b8:e1:a6:ab:1c:35:84:6a:
1d:4b:1c:10:e3:08:a0:a8:dd:68:10:d9:fc:e8:87:
b4:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:1B:56:A3:DF:02:78:DF:E7:DB:1F:D4:FE:AA:9B:BA:8F:22:5B:E9
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363164363a3a2f34382d3438203d3e20343031353037.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:61d6::/48
Signature Algorithm: sha256WithRSAEncryption
a0:8e:f3:01:5f:f1:67:ea:0f:1a:27:ed:6e:d3:5d:97:04:9d:
52:7a:62:6d:e4:fe:95:80:58:87:12:ba:a1:0b:38:b0:8a:0c:
ab:8a:4d:51:56:dc:18:04:8a:db:6a:e1:66:24:d7:be:6c:03:
a2:ef:16:0f:cb:ec:c1:91:aa:13:49:54:7a:8b:16:12:8f:ba:
c2:71:fb:65:f4:da:07:59:7c:ae:82:6b:fb:32:88:74:63:bd:
db:b7:73:71:ed:1a:51:0e:86:7f:46:84:d0:19:36:f5:4b:26:
2e:39:a8:f6:1a:1f:d0:28:39:8f:3c:e6:6d:60:64:70:cf:df:
ae:cc:4b:e3:45:32:d6:bb:20:b7:36:4b:d7:e4:ce:49:7d:3f:
6c:6c:c5:c0:b4:4d:24:f3:47:95:86:78:47:1d:f2:af:7e:bb:
da:33:b0:21:03:49:c8:a5:d9:0a:40:82:8d:ac:95:ae:d2:63:
ae:1b:f1:bd:ab:97:3f:03:58:e0:7b:51:82:c8:30:f2:18:77:
05:22:48:7a:4d:f1:4c:36:f7:55:c5:58:d0:04:45:c3:f7:03:
99:25:ee:a2:bd:8c:ca:07:91:bd:70:b8:9d:ac:3e:01:a6:f9:
c1:d3:c7:25:8e:0f:f6:93:13:94:84:c6:a3:31:1b:a2:f3:56:
ab:41:35:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 14:39:54 2025 by rpki-client