Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363233653a3a2f34382d3438203d3e20343031353037.roa
File: 326131343a373538343a363233653a3a2f34382d3438203d3e20343031353037.roa (raw, json)
Hash identifier: AOsj5zAt/s3OXdphKJHfTz+6CHDNpNRtOl6FAEB9F5I=
Subject key identifier: B8:6A:C2:F0:3A:29:53:AA:48:6C:B8:AD:BC:09:B1:88:58:0F:6B:6B
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 488C24A433ECFC88D693791B177B90AB6EE0974C
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363233653a3a2f34382d3438203d3e20343031353037.roa
Signing time: Mon 12 May 2025 16:18:06 +0000
ROA not before: Mon 12 May 2025 16:13:06 +0000
ROA not after: Mon 11 May 2026 16:18:06 +0000
asID: 401507
IP address blocks: 2a14:7584:623e::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 14 May 2025 00:18:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
48:8c:24:a4:33:ec:fc:88:d6:93:79:1b:17:7b:90:ab:6e:e0:97:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: May 12 16:13:06 2025 GMT
Not After : May 11 16:18:06 2026 GMT
Subject: CN=B86AC2F03A2953AA486CB8ADBC09B188580F6B6B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:90:52:4c:6d:ee:d8:d6:d2:b4:dc:be:5d:a6:
57:98:13:77:0b:9c:92:83:f5:c5:ef:8a:30:f5:b3:
99:0b:00:b7:b9:4b:4e:60:dc:fb:08:4b:f8:47:bf:
71:6e:f2:b8:b7:fc:48:4e:be:d6:f0:b7:9f:d2:6a:
7d:82:73:66:2c:bd:68:c6:53:97:3f:b1:dc:59:b6:
e8:dc:d3:14:a1:2d:28:9c:92:61:f0:e2:03:0d:12:
46:8a:ed:a1:71:7e:6a:62:ff:e5:16:25:01:10:98:
55:a0:88:6a:a9:2d:62:25:0a:38:a2:26:a8:a0:95:
77:37:0d:03:f0:41:12:5f:6d:84:f4:00:e0:cf:4a:
aa:37:1e:69:62:83:b9:e9:f0:19:26:69:e1:1c:6d:
15:3c:ae:e3:08:cb:28:07:83:2e:b3:9f:27:b5:ad:
ce:b9:94:ca:2d:47:d9:7d:da:ea:94:45:9d:de:e1:
04:51:a0:e1:b2:76:a6:44:42:47:3c:56:d0:a2:5f:
94:a0:a2:09:da:b9:a7:00:4c:e0:f7:53:46:fa:8b:
d8:2e:c2:73:64:ff:75:c7:d0:05:3a:a9:cd:45:24:
18:9e:c6:52:3e:03:29:d0:76:bd:95:50:5c:99:f5:
ec:32:76:16:5f:5c:92:c7:d1:84:63:6a:04:c8:3c:
f3:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:6A:C2:F0:3A:29:53:AA:48:6C:B8:AD:BC:09:B1:88:58:0F:6B:6B
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363233653a3a2f34382d3438203d3e20343031353037.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:623e::/48
Signature Algorithm: sha256WithRSAEncryption
08:e6:85:2c:a6:6c:90:10:30:08:5a:bd:5c:b1:94:b8:59:26:
66:b7:01:03:3b:cc:9a:35:93:db:96:32:e0:41:e4:81:15:87:
e2:04:0d:45:d9:3e:6f:09:7f:a8:6d:26:ae:e3:b7:d5:02:68:
a3:76:ef:5f:1d:12:68:a4:6a:42:ca:db:8d:46:5a:86:99:6b:
f7:c1:27:04:37:c7:7a:cf:de:22:d5:b9:30:ba:27:0b:53:12:
b3:d0:5e:d4:86:ed:a5:75:2d:1a:ab:d5:bb:f6:cd:aa:21:c4:
6b:14:d3:6c:3d:93:1f:21:9d:de:59:76:bf:6a:19:6e:b2:fc:
7e:19:1a:f8:a1:e6:e8:86:27:8f:be:61:79:5c:4c:1a:35:1d:
b4:62:78:2a:8a:c8:e9:b8:1e:39:2a:da:fb:01:1f:75:43:b8:
47:b0:6a:aa:11:04:d1:c6:af:aa:5a:43:41:bf:26:56:1d:5b:
ed:bf:8c:37:d8:09:f9:63:e2:03:6f:fd:b1:87:bf:43:f8:84:
87:f3:6f:73:4f:42:42:e0:1e:8f:93:d0:cc:f5:f4:1b:58:e0:
16:75:dd:6c:91:4e:d9:3f:ed:5b:b3:9e:9a:5f:21:10:87:17:
18:2d:d8:b9:39:0e:77:9c:1a:be:ab:6b:9e:8f:55:a7:1d:24:
f4:35:f5:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 23:23:00 2025 by rpki-client