Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363234373a3a2f34382d3438203d3e20343031353037.roa
File: 326131343a373538343a363234373a3a2f34382d3438203d3e20343031353037.roa (raw, json)
Hash identifier: TbEQvZZqNC7D88PPAIm7pUX/+NcYbwaXJIdJH6WEQB0=
Subject key identifier: 88:A6:D9:14:E0:66:B3:5D:DF:9F:F3:AB:28:44:6C:F3:7A:F8:5E:B0
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 6AFBBDC1EAE8EEE9C4EC7BBEDBAA9C1028F56F
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363234373a3a2f34382d3438203d3e20343031353037.roa
Signing time: Mon 12 May 2025 16:18:04 +0000
ROA not before: Mon 12 May 2025 16:13:04 +0000
ROA not after: Mon 11 May 2026 16:18:04 +0000
asID: 401507
IP address blocks: 2a14:7584:6247::/48 maxlen: 48
Validation: Failed, certificate revoked on Sat 17 May 2025 15:06:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6a:fb:bd:c1:ea:e8:ee:e9:c4:ec:7b:be:db:aa:9c:10:28:f5:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: May 12 16:13:04 2025 GMT
Not After : May 11 16:18:04 2026 GMT
Subject: CN=88A6D914E066B35DDF9FF3AB28446CF37AF85EB0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:55:83:76:0e:ac:0d:80:eb:73:4b:49:7a:09:
c0:2f:f4:32:3f:45:a3:88:31:33:2c:c3:3f:40:0b:
51:f2:cc:55:00:09:4c:b1:c7:6d:76:77:f1:ea:74:
26:39:e4:9d:20:d3:91:f1:39:30:87:d7:30:ee:af:
2c:b3:71:a6:b2:07:91:96:c0:47:30:f8:8e:c6:2b:
ab:f5:0a:ba:e7:92:13:e7:37:8a:50:2c:56:cd:6c:
14:03:e7:ac:13:40:6b:c1:08:1e:ab:de:cb:46:45:
fa:3d:6a:9c:35:5b:e0:fd:c0:8d:58:47:76:d2:56:
95:c4:aa:a3:6b:ab:dd:e7:15:61:85:71:74:0a:68:
d6:5c:8b:42:65:3d:d4:26:a3:38:fa:22:66:b0:09:
f3:70:77:1b:c5:c9:c8:51:bb:12:3b:bc:40:d9:fe:
5e:64:55:f6:da:8d:b5:0d:60:1b:67:3e:d4:40:22:
e6:cc:ae:7f:3c:48:0c:ad:22:28:fd:7a:06:88:85:
1f:7a:d5:58:dd:1b:72:39:ab:f8:4a:2b:77:e3:12:
28:95:de:69:30:30:f3:6f:cb:85:89:9e:22:33:0a:
10:c7:30:a2:29:5e:a9:47:d6:55:f4:91:de:f9:ad:
ce:c5:84:39:d8:b4:48:f8:19:88:44:6d:cd:76:11:
a5:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:A6:D9:14:E0:66:B3:5D:DF:9F:F3:AB:28:44:6C:F3:7A:F8:5E:B0
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363234373a3a2f34382d3438203d3e20343031353037.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:6247::/48
Signature Algorithm: sha256WithRSAEncryption
43:f6:12:05:7f:da:fe:af:3c:ec:b2:82:c0:c5:c1:5d:fa:84:
e3:f4:ae:e8:9e:f8:5e:7c:b0:46:c3:a4:37:07:cd:b1:4a:8a:
b3:5f:39:a6:31:99:85:fe:5d:dc:cb:87:53:e4:7f:a7:66:e7:
00:64:93:f4:f7:66:5f:16:ff:94:ac:27:c0:f2:5c:6d:c5:9f:
b8:bd:69:c1:50:a9:68:1f:f4:99:ad:79:27:e8:30:eb:92:3b:
31:14:54:43:28:a3:63:aa:6b:d5:42:c2:2c:fa:26:64:26:54:
a5:fd:bd:eb:05:1a:34:f1:e8:22:50:49:ed:54:4e:31:2b:d0:
b9:0d:a2:83:db:47:73:e1:3e:2e:1d:38:f1:b0:a3:98:3e:22:
85:78:e8:39:40:3c:86:77:f2:e6:cd:eb:3a:34:c3:ec:09:d8:
27:63:a5:48:00:61:97:cc:4d:19:75:0d:97:78:ee:78:88:52:
ee:8f:17:fa:d6:dd:29:c5:4e:91:b7:e6:0f:04:c7:db:41:af:
c5:31:8f:39:ca:59:3e:36:b5:3c:0c:43:3a:4a:e9:be:8a:4e:
b7:e2:c0:69:41:2c:67:5c:1c:c0:82:7d:9a:1e:11:65:86:44:
da:60:01:d5:31:e1:b2:b6:28:e6:43:5b:ef:c0:5c:25:b5:44:
4e:d1:23:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 06:50:12 2025 by rpki-client