Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363335323a3a2f34382d3438203d3e20343031353037.roa
File: 326131343a373538343a363335323a3a2f34382d3438203d3e20343031353037.roa (raw, json)
Hash identifier: G9OTORPEHLRM+qFd1TsN6kbEauqw6tjS1XnjMo14lXQ=
Subject key identifier: 25:5D:43:CF:DA:1B:6A:58:98:4A:06:7F:CD:D8:FF:98:AB:D7:65:B9
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 1183B50D5DA535729821C5302D230D44D7812896
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363335323a3a2f34382d3438203d3e20343031353037.roa
Signing time: Thu 22 May 2025 16:36:02 +0000
ROA not before: Thu 22 May 2025 16:31:02 +0000
ROA not after: Thu 21 May 2026 16:36:02 +0000
asID: 401507
IP address blocks: 2a14:7584:6352::/48 maxlen: 48
Validation: Failed, certificate revoked on Thu 29 May 2025 05:42:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
11:83:b5:0d:5d:a5:35:72:98:21:c5:30:2d:23:0d:44:d7:81:28:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: May 22 16:31:02 2025 GMT
Not After : May 21 16:36:02 2026 GMT
Subject: CN=255D43CFDA1B6A58984A067FCDD8FF98ABD765B9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:84:a3:af:7e:74:c3:29:d8:d5:de:76:50:0b:
a0:a2:bb:aa:e8:91:4a:de:74:31:a6:9e:3c:f6:67:
f8:a2:83:0d:91:2a:9e:a8:98:4a:94:7a:a5:96:1d:
7d:f8:ab:02:52:3d:a3:85:e3:ef:35:ca:4c:9a:3d:
7d:b1:d8:4b:42:34:ff:bd:68:3d:af:d9:7f:31:9a:
d3:c3:33:e8:95:10:04:6e:23:1f:56:a4:a7:e4:55:
04:21:d4:a0:47:3d:cc:38:e9:91:07:e2:89:e1:e9:
31:3b:a1:af:df:76:94:1c:ae:c9:3a:7d:30:d9:e4:
c0:81:52:11:39:92:9c:64:63:bf:a0:ba:d1:dd:2c:
42:1b:04:be:c1:e0:68:43:de:4e:97:17:fc:04:7a:
d9:77:09:6b:04:98:e4:e0:d9:c7:26:13:22:f1:9e:
47:79:3e:cf:aa:53:03:7a:03:59:7f:87:17:f6:a2:
ec:c8:9a:ef:2a:99:ab:50:b7:af:db:46:01:32:6a:
21:1d:fa:3e:e9:5f:fd:d9:94:40:12:be:6a:ce:6d:
15:c3:58:88:c5:f9:97:f7:7a:ba:19:46:a6:84:68:
ce:65:27:fd:98:0b:4c:c7:3e:82:1f:c5:56:f1:cc:
37:c2:65:e8:fd:86:00:ee:76:ec:02:6b:17:04:d6:
0d:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:5D:43:CF:DA:1B:6A:58:98:4A:06:7F:CD:D8:FF:98:AB:D7:65:B9
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363335323a3a2f34382d3438203d3e20343031353037.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:6352::/48
Signature Algorithm: sha256WithRSAEncryption
31:aa:3c:fc:82:39:0e:5f:0a:8e:37:f4:85:40:da:69:f0:ba:
97:4b:a3:5e:e2:02:89:a0:80:bf:66:13:4c:36:61:51:f2:0f:
d6:01:8e:5a:04:17:97:f2:12:d7:6d:2f:fb:1b:5f:ae:d2:cf:
10:bd:73:b2:28:41:a0:e6:a4:06:2f:9e:d2:37:95:02:1d:a8:
f9:6d:2d:5e:ed:ec:03:ba:cd:52:bb:81:c1:0c:55:a1:f3:39:
40:42:47:ae:e4:78:08:a9:0b:4f:30:30:8f:70:f5:72:35:b1:
83:8c:f1:c2:ba:bd:52:2f:92:fa:5b:71:a2:75:9d:5e:6b:69:
54:7b:0d:fa:d6:5d:0f:ac:52:e6:b5:46:b7:cf:42:b7:36:30:
26:dd:40:5a:94:58:25:97:7c:1d:cb:bd:81:77:33:f9:b7:7f:
f6:31:e8:d3:d4:b9:7b:4b:c3:3e:b5:d6:cb:eb:40:25:08:da:
6c:bd:32:ea:6f:60:81:c2:e0:5b:8b:25:ce:f1:6e:3b:38:00:
b1:2c:33:e9:b4:03:49:96:53:13:89:8b:c5:0f:de:67:80:94:
44:1b:3d:fa:ed:0f:3e:92:33:c1:c2:6a:99:4e:ab:f7:24:7a:
c0:42:9e:7b:39:3d:1d:40:d8:1e:8f:82:b4:fe:42:05:4e:1a:
5a:2b:fc:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 11:13:15 2025 by rpki-client