Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363333653a3a2f34382d3438203d3e20343031353037.roa
File: 326131343a373538343a363333653a3a2f34382d3438203d3e20343031353037.roa (raw, json)
Hash identifier: QiFfqpXkCOB4nrcLkk9jQlmKNx40w2TdlGftYMABTUE=
Subject key identifier: B0:18:85:12:38:EC:8C:B3:D8:9A:FB:04:EB:DB:78:4F:A6:04:91:D5
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 15A53E7AFB266481F50003C9BD870576164D2C7D
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363333653a3a2f34382d3438203d3e20343031353037.roa
Signing time: Wed 21 May 2025 21:00:01 +0000
ROA not before: Wed 21 May 2025 20:55:01 +0000
ROA not after: Wed 20 May 2026 21:00:01 +0000
asID: 401507
IP address blocks: 2a14:7584:633e::/48 maxlen: 48
Validation: Failed, certificate revoked on Fri 23 May 2025 23:48:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
15:a5:3e:7a:fb:26:64:81:f5:00:03:c9:bd:87:05:76:16:4d:2c:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: May 21 20:55:01 2025 GMT
Not After : May 20 21:00:01 2026 GMT
Subject: CN=B018851238EC8CB3D89AFB04EBDB784FA60491D5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:1f:16:04:12:cd:a5:cb:52:54:c8:d2:2e:63:
08:c9:64:0d:71:f5:0c:a4:46:4f:84:c7:de:be:36:
6d:a4:1a:2e:6b:f4:15:fa:ab:a4:35:72:e1:52:e0:
12:fb:85:fa:8a:9d:e3:a9:7d:f5:ac:2c:73:62:b6:
a3:0b:56:33:31:77:38:a0:b1:69:81:3b:7a:76:2f:
40:fd:e6:78:25:39:6e:37:19:5c:58:e0:ee:2f:85:
f9:3d:76:ad:4b:ed:0d:39:54:5e:d4:0c:a9:88:0e:
da:6b:13:52:2f:7d:67:0e:17:42:81:27:26:b9:9d:
79:81:40:19:80:a9:cd:d6:e1:b7:24:22:ca:50:c1:
d9:d6:ee:85:c2:68:cc:44:69:e6:09:33:aa:52:2e:
55:2f:95:1e:d3:3b:d8:00:40:ad:8e:ac:ba:f5:03:
dd:b6:44:7c:35:cf:47:6e:66:d8:6e:10:d1:74:c7:
62:ad:b1:13:ff:59:c1:ab:d5:cf:7b:d6:76:79:07:
33:90:e9:78:af:4b:ee:55:2b:40:cc:a7:b5:6f:c2:
7e:2c:93:b0:18:a0:b4:06:5f:2d:67:5f:97:09:07:
1e:83:b4:fd:34:c1:fb:d2:7a:9f:c6:cb:13:0d:cd:
8b:85:df:5a:2e:54:b6:ca:2c:6e:aa:84:2a:33:64:
2c:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:18:85:12:38:EC:8C:B3:D8:9A:FB:04:EB:DB:78:4F:A6:04:91:D5
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363333653a3a2f34382d3438203d3e20343031353037.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:633e::/48
Signature Algorithm: sha256WithRSAEncryption
25:28:fb:66:71:c4:11:36:00:da:21:87:c1:53:3f:02:c5:89:
f2:44:a8:a2:70:6a:a8:3c:ea:7c:a0:3d:cd:e0:0b:24:99:6e:
c9:3a:13:98:a0:72:ec:eb:54:db:36:ed:38:ed:8b:f0:83:6a:
88:83:55:35:a2:be:10:04:64:19:50:9b:05:2d:f7:3c:19:a1:
03:b6:02:41:95:f6:7a:02:48:e2:ad:2b:fe:2f:3e:6d:a3:30:
cc:57:20:71:fa:aa:ba:2f:00:29:c5:94:e0:8b:98:e0:a0:e1:
3c:27:f2:fa:9b:76:62:41:4b:98:64:06:8b:50:40:48:ab:58:
a6:07:1d:2a:a1:c8:4e:6a:e8:53:d1:89:b3:f7:7f:cb:08:2c:
20:59:c7:88:e0:d2:4e:e0:52:b7:0a:4d:a7:86:bf:63:97:c9:
06:e4:79:f1:d9:d8:5c:9d:47:c8:21:67:97:42:dd:54:62:18:
29:09:5c:fc:b0:51:72:7c:2e:fb:ba:54:48:7f:44:d1:50:6b:
4d:0e:2e:72:de:01:1d:71:2c:ae:0c:5a:93:bf:eb:3f:26:3a:
4d:63:f3:41:9f:8c:88:93:f2:b1:73:d0:1f:35:a1:54:53:2c:
ef:85:d8:76:44:e5:9b:ec:1c:aa:45:5d:83:71:9b:31:21:1a:
80:0a:8c:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 06:18:44 2025 by rpki-client