Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363336623a3a2f34382d3438203d3e20343031353037.roa
File: 326131343a373538343a363336623a3a2f34382d3438203d3e20343031353037.roa (raw, json)
Hash identifier: SAi7QSJRiotKEvO6IcKC3d8s+U5qAvPAa0cKALMiNl0=
Subject key identifier: 2B:EE:60:AF:03:53:C2:08:05:3E:16:31:2A:6C:4D:DA:A7:17:FE:3A
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 25C1A355332FAECB7F6966DBB88E0A360F3C4F3F
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363336623a3a2f34382d3438203d3e20343031353037.roa
Signing time: Fri 23 May 2025 15:42:02 +0000
ROA not before: Fri 23 May 2025 15:37:02 +0000
ROA not after: Fri 22 May 2026 15:42:02 +0000
asID: 401507
IP address blocks: 2a14:7584:636b::/48 maxlen: 48
Validation: Failed, certificate revoked on Sun 25 May 2025 21:12:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
25:c1:a3:55:33:2f:ae:cb:7f:69:66:db:b8:8e:0a:36:0f:3c:4f:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: May 23 15:37:02 2025 GMT
Not After : May 22 15:42:02 2026 GMT
Subject: CN=2BEE60AF0353C208053E16312A6C4DDAA717FE3A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:aa:b8:4c:4d:25:33:0f:ea:d9:4a:f7:db:15:
63:09:a1:a0:bb:4b:52:5c:7d:de:e0:aa:45:e3:d7:
4e:06:ec:bd:24:43:26:99:20:04:0b:a7:86:8b:43:
3f:c0:27:94:fa:87:ee:ec:43:05:ef:82:72:0f:54:
a2:59:a5:ca:68:c2:2e:85:49:b0:03:5d:3c:b1:4c:
9e:56:92:8e:4c:aa:a3:60:a8:4b:a7:56:a0:80:1b:
8c:f5:58:24:25:58:ff:16:55:31:b0:df:9d:f8:b7:
44:03:84:ad:59:79:4a:54:91:8a:fe:ad:ab:21:e6:
b2:23:cd:3a:59:1c:4a:9a:cd:0a:b9:3f:8b:24:35:
f0:73:7b:98:d4:c2:09:bb:2d:d8:79:3f:94:89:67:
33:e5:49:37:be:02:72:3c:20:29:57:6d:1f:42:c4:
ca:c3:8e:60:2a:bb:61:ab:6d:d6:47:63:ce:67:61:
a8:bc:13:b8:90:16:27:02:7a:d6:f0:4a:90:ef:61:
78:35:e0:f7:73:05:6f:34:ad:2c:3d:48:56:fe:91:
64:ea:2a:42:8b:4f:6f:04:b7:69:e6:86:5f:77:76:
2f:3e:28:25:b1:95:03:09:19:e6:19:40:14:bf:dc:
71:40:e3:3d:98:f9:5d:3f:14:4d:64:3b:fa:65:93:
0f:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:EE:60:AF:03:53:C2:08:05:3E:16:31:2A:6C:4D:DA:A7:17:FE:3A
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363336623a3a2f34382d3438203d3e20343031353037.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:636b::/48
Signature Algorithm: sha256WithRSAEncryption
b9:e0:e9:4a:36:7f:8a:31:19:e9:04:5c:fb:9c:6f:f5:24:ab:
a0:c9:d2:5e:99:2d:c0:60:9e:ad:17:2c:63:97:ea:b6:b6:62:
f1:92:91:16:9e:e0:40:5d:aa:ea:98:4f:60:99:32:68:8c:64:
f2:9a:21:8a:bf:7d:34:d5:ef:4d:b2:1f:8a:04:6a:b5:58:ce:
92:81:14:94:02:86:8a:a4:ee:c3:2c:d0:e7:fe:7c:e4:6c:d8:
e5:09:fc:72:4c:07:d6:f4:44:4e:63:c2:ae:c7:96:a1:21:db:
42:01:b7:66:ac:84:27:2a:9b:19:4d:17:a8:1e:25:3b:5d:8d:
ba:cd:1f:31:ad:b8:d4:3a:ae:e4:56:97:ca:19:58:4e:1d:ec:
ad:07:05:dd:33:8c:e5:63:51:c0:62:8a:8f:4f:e4:00:a4:85:
e8:09:1b:24:26:ed:0f:1a:e1:ed:57:29:fc:cd:18:38:77:6b:
a2:58:35:a6:84:2e:f7:52:9b:c3:cd:34:c0:f7:da:c2:61:a0:
7e:fe:18:a2:17:a5:20:da:a4:2a:62:39:1a:58:5e:77:5b:e0:
5f:3c:4a:20:4b:a7:5c:dd:24:4a:5a:96:c1:8d:9e:a5:d5:27:
87:4e:df:d0:f4:ea:39:bb:d5:91:22:b1:11:12:e0:d2:d8:94:
c8:9d:51:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 06:02:26 2025 by rpki-client