Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363430393a3a2f34382d3438203d3e20343031353037.roa
File: 326131343a373538343a363430393a3a2f34382d3438203d3e20343031353037.roa (raw, json)
Hash identifier: q/BUfo+aK+PfKXX6BnmIEwm6Il6EEc3NYtdLafxeBqU=
Subject key identifier: C7:DE:5A:F9:35:A5:0F:FE:90:E2:A6:A7:31:29:CE:8E:4A:EB:9E:FB
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 6E99F2BBB0881B8688077AC2D4555615E6BE1477
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363430393a3a2f34382d3438203d3e20343031353037.roa
Signing time: Mon 26 May 2025 07:42:02 +0000
ROA not before: Mon 26 May 2025 07:37:02 +0000
ROA not after: Mon 25 May 2026 07:42:02 +0000
asID: 401507
IP address blocks: 2a14:7584:6409::/48 maxlen: 48
Validation: Failed, certificate revoked on Sat 31 May 2025 17:04:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6e:99:f2:bb:b0:88:1b:86:88:07:7a:c2:d4:55:56:15:e6:be:14:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: May 26 07:37:02 2025 GMT
Not After : May 25 07:42:02 2026 GMT
Subject: CN=C7DE5AF935A50FFE90E2A6A73129CE8E4AEB9EFB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:b5:b7:c9:21:16:00:c2:27:8a:98:aa:55:31:
d8:96:d4:c6:a4:ef:49:45:48:65:12:86:d8:af:00:
52:8c:e2:ed:28:b1:ba:58:f0:a3:fd:a9:f2:e7:8e:
dc:60:e8:a3:6d:da:6e:bb:fd:42:cf:4e:cb:d8:38:
54:d9:a8:48:13:20:9c:cc:33:40:03:11:ad:63:1f:
20:a6:3b:fc:49:fb:62:d5:e4:5c:31:fe:8b:b6:01:
67:40:6c:f3:d5:3c:d0:4b:07:33:74:f8:ee:3f:30:
8c:79:c0:74:f9:92:87:8c:10:da:6f:d6:b8:a4:94:
57:0a:5e:e8:30:aa:73:47:e2:d1:ab:45:cd:05:6d:
45:be:ba:ec:b3:d8:7b:95:48:77:73:59:73:b0:70:
84:3f:2a:92:d4:3a:9d:30:15:26:6b:82:3f:d8:a0:
f2:63:8e:f1:83:1c:26:ff:64:52:16:68:17:09:84:
44:31:b6:75:e6:4e:51:eb:2c:af:6d:12:c8:90:7b:
10:4e:74:18:45:91:01:9e:46:07:6e:67:bf:04:25:
84:8e:72:db:8d:f1:0f:49:8c:63:34:53:9a:64:1b:
5b:94:1a:fc:45:c0:66:67:c7:aa:8e:e7:aa:0b:07:
0a:76:f4:49:b8:0c:7d:f9:9f:20:94:49:04:35:72:
1c:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:DE:5A:F9:35:A5:0F:FE:90:E2:A6:A7:31:29:CE:8E:4A:EB:9E:FB
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363430393a3a2f34382d3438203d3e20343031353037.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:6409::/48
Signature Algorithm: sha256WithRSAEncryption
79:29:e2:5e:97:62:7c:3c:ef:85:26:97:77:f4:20:e7:a7:f0:
87:11:7d:5a:8e:aa:46:42:6c:1c:45:18:6b:25:38:92:fb:3c:
57:94:3b:f5:3e:0b:aa:47:be:72:c0:ea:46:f3:e0:27:aa:3f:
af:98:5c:6d:b5:15:ad:6e:4a:31:e0:2d:ac:55:0c:f8:22:4a:
6c:ba:e4:87:65:ea:eb:84:88:60:e6:dd:f2:d5:b8:5e:a8:ea:
14:74:35:ba:d7:86:e8:e1:7b:3a:c5:a4:ae:42:20:48:6a:3c:
59:ae:9f:9b:a3:eb:b6:a1:de:7e:25:b4:3f:19:2d:ac:bc:16:
b9:cb:c4:f6:0d:69:be:ee:9f:14:ac:9f:0c:10:b2:9b:e9:70:
f4:e9:79:01:42:f4:aa:11:75:69:fe:86:1d:16:ac:3c:02:b5:
ef:eb:a9:74:c4:44:a5:39:dc:61:49:cf:73:8d:2d:f7:dd:c7:
73:db:f9:71:fa:76:73:6f:12:2f:43:8a:13:34:73:1c:ef:a4:
66:7e:41:5a:a3:0a:4c:da:ef:b5:07:4f:f9:9e:d6:c7:c5:7d:
5c:43:50:78:d6:6e:fb:a8:c8:b9:fb:d8:14:7f:5b:8e:1f:00:
fa:62:fd:17:cc:71:8a:09:1e:dc:bd:27:d3:bf:68:5a:11:2a:
ff:b8:7c:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 06:21:56 2025 by rpki-client