Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363233633a3a2f34382d3438203d3e20343031353037.roa
File: 326131343a373538343a363233633a3a2f34382d3438203d3e20343031353037.roa (raw, json)
Hash identifier: BtRU35HccIxjGwTznoHBQqpOTqkpi2Ui0ywGoXMO+4M=
Subject key identifier: B8:E7:C7:4F:1C:A6:16:00:A9:1A:ED:56:3E:14:EF:AD:D3:59:EE:E1
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 2A6C76A8C099A69C6C35676CB63598A2103E4095
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363233633a3a2f34382d3438203d3e20343031353037.roa
Signing time: Mon 12 May 2025 16:18:08 +0000
ROA not before: Mon 12 May 2025 16:13:08 +0000
ROA not after: Mon 11 May 2026 16:18:08 +0000
asID: 401507
IP address blocks: 2a14:7584:623c::/48 maxlen: 48
Validation: Failed, certificate revoked on Tue 13 May 2025 13:36:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2a:6c:76:a8:c0:99:a6:9c:6c:35:67:6c:b6:35:98:a2:10:3e:40:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: May 12 16:13:08 2025 GMT
Not After : May 11 16:18:08 2026 GMT
Subject: CN=B8E7C74F1CA61600A91AED563E14EFADD359EEE1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:10:8e:ea:b5:b0:06:a6:c1:7b:f3:4f:cd:3b:
4c:3e:72:55:83:4e:bf:1f:22:a7:5b:ab:0c:7f:79:
83:13:fc:5b:5b:5a:44:41:4c:af:8a:f1:03:85:4e:
1d:8b:37:87:9f:7e:7b:34:4c:68:be:5f:e8:36:0d:
19:d4:10:09:35:af:75:53:44:d2:18:b9:e7:2e:3c:
13:30:94:cf:3a:60:7d:42:46:c9:48:fa:b1:9b:f4:
4c:30:69:87:aa:0e:90:e1:01:e1:46:06:2e:1d:90:
21:23:55:b0:e5:91:93:fd:6b:0b:02:57:37:20:6f:
c6:88:3d:ec:95:4a:f6:e5:f4:91:75:0a:15:71:44:
01:cf:44:dd:61:ba:66:54:51:7e:b3:1e:89:78:bf:
df:c5:62:8a:65:80:59:44:d1:44:c4:fb:37:bd:a8:
2f:2a:8a:b5:d4:a5:f7:32:ac:19:38:8d:e0:4f:e0:
e9:44:ed:73:dd:e1:14:0c:6d:ae:4a:ba:90:3d:0f:
ba:66:8f:2d:a0:06:a1:82:5b:be:ec:23:cc:b8:0e:
53:61:96:86:a0:de:49:e9:63:b1:fe:ba:1f:c5:7b:
87:1c:ea:ce:19:32:bf:b0:15:2d:d2:c2:c8:2e:0a:
97:13:41:fe:32:e1:a0:14:4d:91:85:3d:29:9a:dd:
78:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:E7:C7:4F:1C:A6:16:00:A9:1A:ED:56:3E:14:EF:AD:D3:59:EE:E1
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363233633a3a2f34382d3438203d3e20343031353037.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:623c::/48
Signature Algorithm: sha256WithRSAEncryption
6e:df:13:bb:52:3a:12:f9:37:8b:b1:17:af:f5:1a:8b:6c:cc:
6d:e4:67:05:50:20:da:a1:26:36:d4:43:0a:a6:ef:f1:b3:ae:
cb:76:18:ed:b6:74:e1:5c:11:20:1e:96:6b:b8:17:54:66:39:
b1:bf:01:54:32:e3:c2:34:d3:50:1c:c7:4f:b8:53:a0:42:eb:
84:68:b7:84:35:ae:fd:d7:b8:2c:1e:78:fb:54:f6:1d:83:61:
a2:21:64:7c:75:e7:89:39:98:20:0c:d1:fb:b9:ae:bf:90:26:
f1:1a:81:4c:28:05:f3:c0:31:cd:56:32:db:06:0b:fc:05:e6:
0b:9a:cd:24:66:67:9c:5a:04:a7:9a:ae:aa:af:d3:d1:42:9e:
4f:93:e8:e8:62:81:51:31:8b:ae:50:8e:3d:e2:29:05:42:d4:
dc:a4:2d:36:30:81:ee:de:68:db:e1:4e:f4:a9:f5:2f:18:e1:
6d:d3:32:50:ae:47:d9:e9:a2:26:eb:7b:c9:13:70:dc:66:cf:
69:52:03:ec:f5:be:65:41:b8:d5:21:f8:4c:ec:ba:a7:46:9c:
95:6c:f2:f7:22:9f:d9:de:da:49:d3:6b:d3:5c:68:46:ce:eb:
74:f6:92:e8:eb:1d:86:2c:05:6d:14:1f:f5:b4:77:82:74:94:
06:2c:c7:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 23:22:58 2025 by rpki-client