Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363334633a3a2f34382d3438203d3e20343031353037.roa
File: 326131343a373538343a363334633a3a2f34382d3438203d3e20343031353037.roa (raw, json)
Hash identifier: 6TWCQjixpB9zkEnuP7hR9NtRLYB+41qQz/AxQWcapuM=
Subject key identifier: 61:43:61:89:77:D2:F9:CF:DC:8A:91:8E:71:FF:08:2D:33:32:EF:D4
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 3FBC38FB68D552599946049F7911DAAE48B52B8F
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363334633a3a2f34382d3438203d3e20343031353037.roa
Signing time: Thu 22 May 2025 16:18:02 +0000
ROA not before: Thu 22 May 2025 16:13:02 +0000
ROA not after: Thu 21 May 2026 16:18:02 +0000
asID: 401507
IP address blocks: 2a14:7584:634c::/48 maxlen: 48
Validation: Failed, certificate revoked on Sun 25 May 2025 10:42:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3f:bc:38:fb:68:d5:52:59:99:46:04:9f:79:11:da:ae:48:b5:2b:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: May 22 16:13:02 2025 GMT
Not After : May 21 16:18:02 2026 GMT
Subject: CN=6143618977D2F9CFDC8A918E71FF082D3332EFD4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:18:c0:1e:9b:54:f3:55:33:85:d9:2b:15:60:
25:d6:43:16:f5:9c:21:2e:83:3e:39:01:a4:71:64:
8c:5a:8d:13:c2:a6:fd:f4:f3:23:2a:c9:01:7d:95:
be:42:33:70:e5:ee:10:1e:a2:f8:c1:85:3e:63:dc:
9d:51:fa:20:4b:0b:60:66:29:57:6f:8e:20:f6:37:
81:e1:2b:a1:b8:0e:a7:49:5e:1e:61:73:2d:8b:26:
ed:81:e0:dd:59:4a:b5:78:90:e5:e0:74:a8:d6:ee:
66:60:54:93:84:8c:97:d4:06:24:e6:6a:76:ed:40:
90:16:dc:2d:bc:5d:bd:e2:0e:49:00:08:4c:55:f2:
ab:b6:87:a3:8b:ec:9f:ae:42:1b:1c:fe:12:23:6d:
f5:c5:52:66:0c:fd:28:d9:4d:c1:e7:6a:38:7d:c3:
cd:62:09:de:47:b5:71:71:71:b1:c8:f4:0d:44:74:
93:88:82:6c:97:85:40:5c:da:c0:af:60:fc:4c:9f:
f8:1d:0b:79:a1:36:0c:4d:82:61:43:18:c1:d9:33:
35:e8:4e:c2:48:19:c5:f4:e4:9d:de:71:a2:1b:2a:
c8:9a:5a:02:fc:d6:c8:fe:26:32:6a:14:b1:e0:56:
28:52:a8:53:9d:04:e7:27:4f:21:f4:01:86:68:f4:
f4:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:43:61:89:77:D2:F9:CF:DC:8A:91:8E:71:FF:08:2D:33:32:EF:D4
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363334633a3a2f34382d3438203d3e20343031353037.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:634c::/48
Signature Algorithm: sha256WithRSAEncryption
71:52:76:e6:cb:98:1c:91:28:9d:b5:64:53:d5:25:18:1b:2f:
42:3b:cc:29:92:97:c3:77:58:32:9f:7e:3f:fa:49:9e:c4:fc:
fe:93:cf:cc:f3:95:8a:50:f2:4d:6f:ec:1c:9f:43:a2:a5:e9:
70:4a:7d:b4:2f:4c:41:fe:25:a9:1f:39:3f:d1:69:cb:ce:4b:
39:fd:0f:3f:12:d5:27:f5:fe:ed:f5:51:b2:f6:02:d0:71:7b:
5e:fe:7c:e7:e1:3c:f8:02:1f:bf:41:c3:8e:02:55:5e:c7:eb:
9b:35:37:0f:9d:f7:6e:5d:cf:5e:44:28:8e:a1:95:c8:ed:67:
00:09:fc:2f:d8:b0:72:f8:6e:33:87:1b:b3:b9:0b:7a:94:a9:
5b:92:e3:f9:a1:02:21:33:c0:f7:a6:8a:33:f3:5b:66:09:96:
da:18:a2:5f:b3:87:5f:26:c4:62:dd:4c:74:47:f1:e4:e5:dc:
2b:2f:47:43:cc:93:6c:6d:43:10:63:8e:9b:18:60:90:6b:94:
a4:93:e3:f5:1a:c4:f7:34:05:0e:b4:1c:32:14:81:af:f0:54:
2c:00:41:e8:5f:f5:34:a0:57:34:8f:02:c2:a8:da:44:15:17:
82:e1:cb:7d:86:98:26:20:a3:98:fa:2b:37:cb:4f:d8:72:12:
6d:8a:12:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 07:38:04 2025 by rpki-client