Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363261633a3a2f34382d3438203d3e20343031353037.roa
File: 326131343a373538343a363261633a3a2f34382d3438203d3e20343031353037.roa (raw, json)
Hash identifier: SvwjyWOg1GMnhs47H9fsz5ZWGOHhz+nOjN1KcQ9IwQs=
Subject key identifier: 6E:85:FD:49:95:20:28:17:AC:A9:33:78:96:7A:DB:82:D5:74:03:0B
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 24D07D3B7CE0B0349F573E40AAFEF6979A7A93CE
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363261633a3a2f34382d3438203d3e20343031353037.roa
Signing time: Fri 16 May 2025 21:00:02 +0000
ROA not before: Fri 16 May 2025 20:55:02 +0000
ROA not after: Fri 15 May 2026 21:00:02 +0000
asID: 401507
IP address blocks: 2a14:7584:62ac::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 21 May 2025 03:48:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
24:d0:7d:3b:7c:e0:b0:34:9f:57:3e:40:aa:fe:f6:97:9a:7a:93:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: May 16 20:55:02 2025 GMT
Not After : May 15 21:00:02 2026 GMT
Subject: CN=6E85FD4995202817ACA93378967ADB82D574030B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:71:1e:62:05:d0:6a:70:56:b5:a7:f4:08:69:
76:30:b6:d3:16:df:2a:da:52:9e:86:89:94:d8:a0:
d8:5c:e5:16:c9:13:ec:db:d4:e0:89:e5:fa:7a:3a:
6b:87:6c:3b:85:24:21:01:75:22:f1:93:b9:2c:30:
e3:13:43:2f:04:17:73:73:12:3e:30:9f:b6:38:b0:
91:e7:f4:aa:89:12:3b:3e:27:05:b2:90:78:33:de:
b8:b8:aa:e9:00:d0:be:6b:f8:0c:54:64:2d:3e:a8:
f4:d0:a2:0a:69:be:94:15:7f:04:3c:37:a3:34:4b:
10:4e:ff:11:02:2f:68:92:cb:03:ec:98:10:0d:b3:
92:8c:fd:08:99:b7:2f:97:4c:d7:cd:b1:37:e4:69:
e4:ad:80:fe:4b:15:a4:89:0a:f4:8a:b4:a1:b4:bf:
c3:85:14:b1:f8:0e:87:0e:fb:f9:81:0b:db:c2:6f:
20:5f:8b:7e:1d:b4:a0:07:da:e9:02:71:63:15:72:
64:a6:9b:d5:a6:61:42:6e:12:de:ec:b7:1b:de:ca:
7c:81:20:0c:2a:38:11:bc:fb:22:b5:f8:a4:fa:29:
40:f0:ce:47:d8:87:90:c6:2a:17:16:84:4e:19:ff:
e3:5c:f4:96:67:45:e4:54:37:75:cc:8b:9e:ef:88:
63:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:85:FD:49:95:20:28:17:AC:A9:33:78:96:7A:DB:82:D5:74:03:0B
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363261633a3a2f34382d3438203d3e20343031353037.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:62ac::/48
Signature Algorithm: sha256WithRSAEncryption
40:53:34:b9:96:ad:2f:a5:58:6b:ff:a8:a8:30:39:b1:b1:78:
e7:13:c8:55:d0:5d:c3:56:5e:0f:ca:c9:a8:b7:b5:76:6f:5d:
88:da:29:8f:bb:26:19:be:af:01:45:80:0d:31:ce:9b:4f:0d:
4c:4a:de:35:b8:e1:54:aa:43:00:8c:15:e3:53:1c:ea:18:b2:
39:12:ce:9a:5b:37:98:44:4e:5d:ad:e3:b0:02:81:1b:01:98:
f7:ad:87:d9:e0:01:9f:ec:71:5b:a9:4d:35:75:ab:77:30:cc:
f1:3a:75:8f:65:ac:52:01:99:9b:17:bd:ac:63:3f:61:48:df:
e0:e8:50:d8:2a:2e:3c:87:67:db:2e:2d:d5:fb:e6:be:07:25:
a9:8c:0b:bb:63:e5:b8:2a:97:90:94:34:97:19:09:b1:06:cc:
60:13:c0:ef:02:30:3e:a4:1a:a0:d3:da:b8:6e:34:c0:e0:81:
dd:70:72:aa:c8:b9:0e:51:51:1a:77:aa:33:59:79:d4:cd:f8:
66:e0:07:b0:71:5b:52:74:66:82:21:af:c3:93:51:24:b5:e0:
c6:bc:10:9f:5f:39:94:cd:e2:56:25:f5:9a:9f:ba:49:b3:6e:
b8:b4:a6:9f:86:59:e2:7d:c4:d2:4a:7e:4b:8c:65:98:64:36:
c8:cf:34:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 06:10:18 2025 by rpki-client