Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363234313a3a2f34382d3438203d3e20343031353037.roa
File: 326131343a373538343a363234313a3a2f34382d3438203d3e20343031353037.roa (raw, json)
Hash identifier: ZM+yyC4JPcQclvd7n9DHuV0xsLWOlvVZBv7iRjG6YZ4=
Subject key identifier: 5B:4F:58:C4:1F:36:D1:8D:B6:CA:F0:7B:33:22:CE:E9:45:61:0F:82
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 53F30D724EAFE05A97E9FB1B51725C97CD3E88A3
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363234313a3a2f34382d3438203d3e20343031353037.roa
Signing time: Mon 12 May 2025 16:18:09 +0000
ROA not before: Mon 12 May 2025 16:13:09 +0000
ROA not after: Mon 11 May 2026 16:18:09 +0000
asID: 401507
IP address blocks: 2a14:7584:6241::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 14 May 2025 11:24:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
53:f3:0d:72:4e:af:e0:5a:97:e9:fb:1b:51:72:5c:97:cd:3e:88:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: May 12 16:13:09 2025 GMT
Not After : May 11 16:18:09 2026 GMT
Subject: CN=5B4F58C41F36D18DB6CAF07B3322CEE945610F82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:e6:2a:17:69:84:ef:85:a2:6a:01:6e:24:14:
a3:2e:56:fc:36:cc:09:2c:6e:85:c3:3c:17:70:32:
12:3d:61:b3:23:4f:b7:ea:f2:77:f8:b8:a9:d4:64:
07:02:64:b6:75:e2:88:7a:dc:8f:e9:a5:09:69:d4:
57:74:eb:6a:8d:a7:56:5b:ab:2d:43:f0:d6:43:52:
ae:24:99:b7:bd:ce:58:8f:da:db:14:a2:bb:bf:8a:
16:46:d2:06:78:70:c5:87:7a:38:75:10:a3:09:07:
67:bd:02:47:08:9e:bb:8b:bb:34:35:d3:02:e4:01:
0f:69:81:71:f0:9f:55:1f:5b:20:af:a9:4c:5f:59:
00:b3:d0:2a:05:81:4b:9d:40:01:10:3c:d6:0f:37:
35:9b:b1:2d:2b:74:92:6e:bf:ca:fc:0c:b9:95:8b:
03:1e:82:29:53:7d:af:3c:82:25:bd:4e:28:ec:89:
73:8b:d0:21:45:f5:99:60:93:dc:0d:2d:f8:86:4a:
bf:6a:10:8c:6e:54:ff:1b:69:24:25:7e:63:4c:ea:
a5:13:29:77:3b:3f:44:e2:d1:7c:62:83:29:31:df:
cc:e9:6d:4e:c4:a6:dd:b1:e1:56:22:68:5c:62:b8:
4d:5c:8d:0c:92:e2:d2:4f:3a:40:a4:96:98:49:ba:
a6:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:4F:58:C4:1F:36:D1:8D:B6:CA:F0:7B:33:22:CE:E9:45:61:0F:82
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363234313a3a2f34382d3438203d3e20343031353037.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:6241::/48
Signature Algorithm: sha256WithRSAEncryption
ae:63:9a:ff:8e:9c:23:ff:6f:fc:df:54:44:32:fe:7c:4c:d1:
7a:95:1a:31:18:51:ed:f5:03:27:14:de:1a:54:c8:5f:63:0a:
bd:fb:b1:02:7d:a7:23:6d:21:33:8e:d3:2e:fb:b9:58:f1:7a:
98:e8:1b:bc:05:41:b7:23:86:00:c7:1e:39:f5:1f:0b:fe:dd:
2b:71:b6:18:9c:a3:cd:3b:3f:05:31:da:90:72:4c:bc:fb:cf:
74:60:85:ee:46:a8:7d:36:95:68:93:85:50:56:74:8a:b2:85:
ba:1c:8a:ff:be:09:6d:28:fc:c0:03:10:06:62:d2:19:5c:a0:
33:98:b8:cc:bd:54:5f:39:e7:4c:f0:6b:cf:f9:ae:0b:f2:b7:
d8:f1:ad:c4:e9:e7:87:c3:08:3f:95:39:7d:f9:14:24:85:1a:
27:47:36:91:ac:a2:64:15:ed:41:33:7a:81:ee:d4:40:6f:71:
08:f8:32:f2:66:5b:f7:8b:f0:01:c3:e4:bf:f7:cf:dc:81:d7:
df:01:59:63:b6:a2:b7:b4:2f:14:60:a1:78:df:d5:99:d8:87:
e4:e4:2e:9d:6a:4b:33:6f:7c:8b:61:6e:bc:68:a6:86:76:60:
4b:8b:ab:97:b4:72:ba:3d:d3:91:9b:38:d6:f6:3c:2f:9b:ea:
d5:3e:6a:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 23:27:17 2025 by rpki-client