Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363235323a3a2f34382d3438203d3e20343031353037.roa
File: 326131343a373538343a363235323a3a2f34382d3438203d3e20343031353037.roa (raw, json)
Hash identifier: /l1ASAxW4q2Sy2qjygzytDoFREy1ZI9cMHcUmSfCquw=
Subject key identifier: C3:F6:E7:C1:90:D5:43:5B:A4:69:A3:53:5E:1F:1A:CA:E0:75:18:28
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 1B282C673152392F164A709922EA2A34734DA199
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363235323a3a2f34382d3438203d3e20343031353037.roa
Signing time: Mon 12 May 2025 16:18:06 +0000
ROA not before: Mon 12 May 2025 16:13:06 +0000
ROA not after: Mon 11 May 2026 16:18:06 +0000
asID: 401507
IP address blocks: 2a14:7584:6252::/48 maxlen: 48
Validation: Failed, certificate revoked on Mon 19 May 2025 23:24:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1b:28:2c:67:31:52:39:2f:16:4a:70:99:22:ea:2a:34:73:4d:a1:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: May 12 16:13:06 2025 GMT
Not After : May 11 16:18:06 2026 GMT
Subject: CN=C3F6E7C190D5435BA469A3535E1F1ACAE0751828
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:fe:68:10:09:d8:2f:71:34:dc:1d:81:c1:60:
2b:41:73:c1:65:93:a8:6b:e4:da:06:ae:49:cb:f5:
ea:af:a6:01:41:c8:e3:fd:15:8e:c5:eb:00:ad:4b:
a1:62:96:7f:bc:5c:55:fd:81:91:07:c7:3a:c0:37:
69:0c:86:7e:89:40:29:b6:bf:9a:df:a2:b8:92:0f:
26:25:a9:26:76:fd:db:bc:9b:54:7f:e0:5f:24:b2:
43:b3:69:0e:fb:1d:d7:5b:56:ad:fb:71:1e:73:70:
e1:9f:84:af:98:4c:8d:e8:28:aa:e9:5c:39:22:62:
97:51:99:b8:f5:b0:ed:f3:7d:fe:88:3e:c9:83:80:
40:48:29:05:ac:3b:22:23:3f:0f:7b:e8:b5:a9:57:
4c:aa:da:9d:46:5d:37:16:1f:04:76:70:40:52:eb:
57:d7:66:a6:e0:34:c6:0d:e8:8d:38:c2:4a:d5:f6:
14:84:1c:42:ed:86:e3:a2:68:3a:4a:f3:da:d6:38:
8f:fd:ad:76:81:14:c9:ca:22:5e:a2:1f:31:8a:d2:
67:fc:8c:3c:99:27:05:24:34:d4:ef:0f:4e:a8:9e:
a6:4a:86:7e:54:b3:16:f7:b9:1c:08:2a:f2:32:26:
39:b1:98:70:6c:a0:27:fe:c8:73:e0:f7:46:75:e0:
c7:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:F6:E7:C1:90:D5:43:5B:A4:69:A3:53:5E:1F:1A:CA:E0:75:18:28
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363235323a3a2f34382d3438203d3e20343031353037.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:6252::/48
Signature Algorithm: sha256WithRSAEncryption
a7:9b:6c:59:ba:5c:b4:23:87:60:2e:1c:fe:f1:af:df:50:54:
a0:9d:c3:62:c4:4a:45:d6:95:35:40:b4:03:aa:0a:74:0d:73:
d2:bc:c4:63:06:b7:a9:e2:15:63:6d:61:59:6a:4a:18:00:9c:
25:bc:bd:b7:a0:32:f9:d2:b2:ec:5c:a4:02:8c:dc:6c:d5:f5:
06:e9:22:f3:bb:23:0b:0f:70:c7:da:93:00:30:d7:b7:9f:e1:
db:f4:96:2a:9e:f0:8c:ca:65:28:c8:e8:a9:4a:ec:5c:72:53:
5b:15:c5:cb:2c:f3:9b:8e:ea:70:48:32:03:d9:56:13:3f:d9:
c9:f4:64:4c:e1:b0:e5:1b:e8:8a:24:36:7e:21:a9:7c:ed:cf:
ce:8d:79:29:18:5d:28:93:e8:06:f5:54:b3:fe:f7:78:9b:f6:
4a:e0:f3:34:d8:49:f5:bc:ea:7b:43:77:91:f1:33:aa:f5:1e:
41:f8:12:c4:ed:9d:46:c7:f5:50:54:96:09:61:fb:25:96:96:
6e:bf:7a:3b:24:a3:1c:a9:e4:04:3c:d2:e8:80:d5:7a:0b:9d:
45:f4:3a:d8:ed:63:b3:19:fd:3e:bb:93:13:ed:c0:4c:c4:25:
71:af:a9:26:d5:6a:89:ab:fb:c5:49:b5:b6:a9:89:44:2c:96:
d7:a2:56:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 06:00:22 2025 by rpki-client