Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363335353a3a2f34382d3438203d3e20343031353037.roa
File: 326131343a373538343a363335353a3a2f34382d3438203d3e20343031353037.roa (raw, json)
Hash identifier: 3HOQ7zDOmtHHT1Y4bQ8oSl97GwfererGxLT1aOqE0VI=
Subject key identifier: C1:75:E3:C9:0A:4E:75:33:FB:58:0A:5A:DF:31:95:CA:79:7B:F2:79
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 45A48D00D3C45D8BDB8EA6F45A51F6DA9B519FA7
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363335353a3a2f34382d3438203d3e20343031353037.roa
Signing time: Thu 22 May 2025 16:54:02 +0000
ROA not before: Thu 22 May 2025 16:49:02 +0000
ROA not after: Thu 21 May 2026 16:54:02 +0000
asID: 401507
IP address blocks: 2a14:7584:6355::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 28 May 2025 12:42:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
45:a4:8d:00:d3:c4:5d:8b:db:8e:a6:f4:5a:51:f6:da:9b:51:9f:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: May 22 16:49:02 2025 GMT
Not After : May 21 16:54:02 2026 GMT
Subject: CN=C175E3C90A4E7533FB580A5ADF3195CA797BF279
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:85:3e:ae:b5:db:b0:0b:87:e0:73:7c:cc:4e:
9b:3d:ca:4a:0b:b2:1e:fb:1c:a8:b0:88:45:9c:a6:
c5:41:2f:f9:38:4e:af:21:40:ec:db:05:62:0b:61:
46:99:2d:35:e9:bc:d5:5e:65:3d:80:bf:ff:e7:cd:
d8:d6:02:80:e2:e1:b4:3a:1f:23:7f:e3:e3:cb:c4:
4b:03:e6:e8:1a:40:d6:74:1a:22:a0:10:f3:7e:dc:
60:be:62:f8:e2:ae:67:9f:05:ca:8a:b4:bd:7e:36:
a2:9a:e2:c7:10:48:98:72:21:50:56:9a:35:14:cc:
88:34:99:f8:f3:a8:af:d3:65:2e:8e:1d:44:82:8c:
58:ac:7f:ca:34:ff:ac:bd:cc:17:c1:eb:f1:2a:0c:
e9:dc:d0:d9:ae:af:9c:31:8f:1a:91:2f:33:1e:44:
ea:c0:50:30:21:b4:cf:f6:75:42:10:f3:21:0f:2a:
37:cb:e4:94:55:5f:09:1d:aa:6e:d8:2d:fe:66:e1:
21:71:e5:38:25:a6:4a:51:89:7f:79:5b:17:70:e1:
11:e8:9b:0b:7a:80:03:c5:7b:f8:ad:7d:30:82:13:
c0:b5:1c:47:3d:e1:c7:69:c7:18:05:4d:c3:81:a4:
ee:a0:e3:5b:70:8c:5d:c4:ee:bd:0b:4a:ad:95:4e:
73:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:75:E3:C9:0A:4E:75:33:FB:58:0A:5A:DF:31:95:CA:79:7B:F2:79
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363335353a3a2f34382d3438203d3e20343031353037.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:6355::/48
Signature Algorithm: sha256WithRSAEncryption
a2:03:bb:27:1a:87:47:80:d4:88:c0:51:eb:01:4c:f8:e1:ff:
88:e9:94:b0:bb:d0:18:97:b1:aa:c5:42:d1:b5:ee:d7:9a:91:
93:5c:5b:9e:d8:0a:08:c1:cf:b9:ea:76:85:c9:f4:67:a9:ca:
51:a9:e5:71:e2:7e:d2:8c:c5:49:96:f9:be:e4:79:f0:2d:98:
fe:3d:3a:20:7e:ad:65:99:aa:04:d9:09:bb:4b:c9:74:64:98:
a5:00:ad:b4:d9:96:e4:f4:9e:28:53:10:0e:86:97:23:00:9f:
cf:a9:66:c8:db:79:c5:39:b9:0e:34:ef:68:fc:d4:18:b1:06:
f9:74:29:12:18:bf:24:fd:4e:55:fa:ff:1d:f9:1d:e9:79:f8:
30:02:6a:16:e7:41:fd:80:b8:77:2b:25:e7:5a:50:5b:1b:64:
30:b6:3a:10:14:c1:a9:d1:bd:35:f9:2b:75:df:41:ae:3a:a9:
df:4f:e1:c8:ee:99:4f:8f:94:58:85:cd:5d:53:de:9f:fa:f3:
dc:d9:86:33:c6:e2:f0:a8:d6:fe:68:50:b1:98:e9:7d:9e:35:
af:d7:6d:08:5b:7f:96:56:cd:fb:f8:d2:80:1a:ae:5f:f6:09:
ca:37:c2:96:1c:86:a0:c7:a2:e5:79:9e:9f:e1:8b:30:2c:c8:
89:ea:25:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 11:04:11 2025 by rpki-client