Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363233623a3a2f34382d3438203d3e20343031353037.roa
File: 326131343a373538343a363233623a3a2f34382d3438203d3e20343031353037.roa (raw, json)
Hash identifier: 4hXd5ndO2/QScRfVv6nSm8ExXgt9mIkNbxVD3uZcC/c=
Subject key identifier: 86:5E:DC:22:02:46:6D:80:C2:95:4B:D3:B5:08:54:77:1B:59:D6:97
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 35A73B9D43AAC621BC2C11765BE1FED2379960A3
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363233623a3a2f34382d3438203d3e20343031353037.roa
Signing time: Mon 12 May 2025 16:18:07 +0000
ROA not before: Mon 12 May 2025 16:13:07 +0000
ROA not after: Mon 11 May 2026 16:18:07 +0000
asID: 401507
IP address blocks: 2a14:7584:623b::/48 maxlen: 48
Validation: Failed, certificate revoked on Tue 13 May 2025 08:18:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
35:a7:3b:9d:43:aa:c6:21:bc:2c:11:76:5b:e1:fe:d2:37:99:60:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: May 12 16:13:07 2025 GMT
Not After : May 11 16:18:07 2026 GMT
Subject: CN=865EDC2202466D80C2954BD3B50854771B59D697
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:35:a1:98:b7:1f:02:ea:58:8d:df:d5:cb:95:
37:cf:f2:ea:7a:d5:1c:a8:16:15:50:7e:99:2f:8d:
cd:e4:88:b7:5f:86:d8:94:09:f9:c8:b2:23:ab:b4:
0b:81:b4:a7:0e:92:ff:5e:ad:fe:ba:f3:0c:09:12:
4e:8c:65:4c:b7:d4:73:bc:1b:47:d9:4c:c0:38:54:
fe:04:95:a1:b9:8e:c5:95:b5:52:28:94:e6:73:72:
46:57:c3:8b:39:19:7c:64:dc:58:ca:3b:11:d0:0f:
f4:a9:1e:6d:a2:5a:da:0e:e7:ac:c3:f8:3d:01:ab:
f9:47:f7:1d:6c:67:4c:2d:4b:e7:48:27:a5:23:a5:
b1:12:b7:0b:03:06:00:c0:a7:7b:e2:29:6c:4e:22:
32:34:9b:db:e8:b2:39:dd:c5:91:f4:a3:8a:de:c8:
4a:01:19:5a:e7:10:98:6f:d7:3a:e2:2a:ac:5f:4a:
04:c0:d8:a5:27:cd:85:10:d0:f2:0f:24:2b:a1:d7:
0e:18:06:f7:e8:0b:fa:87:fa:1e:f7:6d:04:32:ff:
a3:a1:96:a6:00:44:19:38:04:31:07:12:3d:5f:cf:
a3:2d:29:9c:8d:dd:dd:66:8a:bf:b1:bd:07:ae:e7:
3e:34:ec:13:ee:ee:83:f2:6a:5f:8e:4c:63:fe:7b:
ef:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:5E:DC:22:02:46:6D:80:C2:95:4B:D3:B5:08:54:77:1B:59:D6:97
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363233623a3a2f34382d3438203d3e20343031353037.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:623b::/48
Signature Algorithm: sha256WithRSAEncryption
55:ae:36:f4:97:e4:1a:b3:73:22:48:66:14:52:27:82:8d:d0:
e9:17:2f:4d:c5:40:6a:88:c1:49:ee:4f:05:1a:3e:f7:fb:aa:
a8:74:7c:0e:20:f6:aa:70:ac:d2:76:c0:74:f0:fd:5a:01:b7:
72:82:fc:6f:6f:ff:16:f5:e9:66:32:5e:9c:89:82:bc:63:c4:
ac:a9:b6:8e:14:b0:82:28:ef:07:95:4e:5c:bd:52:69:b6:bc:
38:f6:57:2d:49:6f:00:c1:1a:ad:61:cc:48:11:ab:b6:1c:c9:
71:b0:7a:9f:a6:c3:18:82:39:76:a8:bc:4a:52:02:3a:15:49:
e5:55:85:bf:98:dc:cf:a8:65:a8:11:d9:a7:82:5b:71:5b:09:
3d:d2:82:da:f2:33:c8:54:26:eb:f9:00:4a:8f:db:a8:ac:16:
92:0e:46:41:cc:0f:c9:5f:e5:23:f3:28:19:7e:31:e0:ac:17:
f6:74:6c:3f:aa:eb:22:79:9c:dd:b2:ff:21:9a:75:d7:28:c7:
58:af:42:b0:26:80:36:d9:ae:1e:d3:45:a8:0d:1f:b5:8d:60:
f1:9d:d8:05:56:15:77:7c:f3:95:05:42:19:7e:63:a1:5a:77:
92:f0:6d:c3:74:6d:2b:fa:12:cc:e9:0a:25:c2:07:6d:83:36:
8b:8a:e4:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 00:46:34 2025 by rpki-client