Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363233613a3a2f34382d3438203d3e20343031353037.roa
File: 326131343a373538343a363233613a3a2f34382d3438203d3e20343031353037.roa (raw, json)
Hash identifier: 5tRFSw2a2inEx6uXcn2V1YIYLKGxXQFIOuBQuIS8r0Q=
Subject key identifier: DF:60:EF:F4:8D:6D:1A:BB:35:4C:04:2A:3D:C1:DF:33:CF:9B:4B:CA
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 764278671B443CC1367CF2F400EE4A99F9D3EE92
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363233613a3a2f34382d3438203d3e20343031353037.roa
Signing time: Mon 12 May 2025 16:18:07 +0000
ROA not before: Mon 12 May 2025 16:13:07 +0000
ROA not after: Mon 11 May 2026 16:18:07 +0000
asID: 401507
IP address blocks: 2a14:7584:623a::/48 maxlen: 48
Validation: Failed, certificate revoked on Tue 13 May 2025 02:54:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
76:42:78:67:1b:44:3c:c1:36:7c:f2:f4:00:ee:4a:99:f9:d3:ee:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: May 12 16:13:07 2025 GMT
Not After : May 11 16:18:07 2026 GMT
Subject: CN=DF60EFF48D6D1ABB354C042A3DC1DF33CF9B4BCA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:10:8c:58:ec:c8:6e:aa:32:2f:a2:6a:d1:8b:
98:4e:68:e5:b7:de:3b:56:43:b2:93:b8:b2:53:74:
1b:98:0e:5e:8e:a3:b3:80:80:26:96:99:23:c4:e5:
ff:46:0c:34:9d:4e:a9:3a:dd:12:fc:a8:50:ef:c4:
91:a2:1a:0c:10:ae:e0:a0:1a:a9:67:7b:91:bc:ae:
85:71:bd:02:62:5c:ab:c9:9c:70:ef:ee:85:23:7d:
81:1f:00:6e:df:2e:e2:0e:0a:04:3a:21:fb:43:d0:
1b:f5:58:72:16:a0:86:08:f4:3d:e1:21:46:f4:59:
2b:41:6e:9b:b6:4a:02:67:de:85:99:3f:89:b2:1a:
61:92:99:2d:e9:8b:f1:5d:2d:94:a0:19:b9:a4:c0:
7a:0d:bf:03:f2:15:f3:77:97:e5:d4:63:da:04:da:
f7:18:72:af:cd:f9:ed:cc:8b:96:b1:ab:58:43:00:
af:e9:da:a6:3a:5d:81:2a:79:f2:d4:29:a4:14:1d:
06:a8:4a:b4:93:19:a0:26:84:f5:c1:8e:49:cc:82:
d2:cc:b8:af:4f:e3:51:27:57:aa:64:4a:7f:52:3c:
1a:b0:f7:cf:2e:5d:b4:b9:d3:97:cf:99:1e:2a:61:
78:bc:62:23:6d:ee:3e:b0:e0:cc:61:12:a2:53:55:
ae:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:60:EF:F4:8D:6D:1A:BB:35:4C:04:2A:3D:C1:DF:33:CF:9B:4B:CA
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363233613a3a2f34382d3438203d3e20343031353037.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:623a::/48
Signature Algorithm: sha256WithRSAEncryption
77:1b:13:a2:ac:f7:10:e7:2c:9c:d6:95:01:a4:df:04:92:c6:
15:40:79:2f:96:fb:41:b6:02:f9:d6:a3:04:ed:5e:f9:d5:1d:
f0:3c:dc:24:35:21:9f:d2:dc:5c:61:6d:cc:4b:fa:4f:9e:36:
de:f9:aa:1c:64:1c:ae:1a:90:b0:15:c7:52:56:70:43:49:49:
63:9b:eb:29:cd:0c:b0:e4:49:e9:3e:5d:dc:72:31:6b:43:e4:
54:f0:fc:ff:c7:19:00:60:5c:91:a4:c8:ce:15:fe:04:3a:93:
2c:b3:d5:e6:1b:93:6a:46:4d:b5:16:0e:e4:bc:a6:b4:bd:13:
f9:9b:43:12:82:71:ce:09:1d:f5:5c:60:06:91:9f:91:34:a8:
aa:02:6c:89:b3:ce:7a:c3:94:08:b1:34:c4:4e:6a:74:7f:49:
5f:ba:0a:19:19:bc:16:84:ad:a3:93:0d:1a:fd:08:c7:8a:ef:
7e:ad:ee:b4:0e:78:44:ec:05:8d:6e:2e:5f:98:41:65:27:95:
ee:4a:61:da:b1:01:1f:8d:16:f1:87:a9:ce:05:92:a3:e6:89:
79:30:a6:b5:bb:da:5c:f5:ee:30:ec:1d:b2:7c:1f:5d:f3:f6:
3f:8f:c7:6d:9b:76:9d:c3:19:46:6a:97:92:5f:49:09:05:e8:
28:fc:a2:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 00:41:37 2025 by rpki-client