Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363431643a3a2f34382d3438203d3e20343031353037.roa
File: 326131343a373538343a363431643a3a2f34382d3438203d3e20343031353037.roa (raw, json)
Hash identifier: zwehDhb6hYsKWOcZZSl+ODiEx6ggEer+gR8WINsOjFI=
Subject key identifier: BC:33:C1:E1:7E:5E:0B:4B:55:52:96:C8:8A:96:1F:92:FB:C3:47:07
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 6559C1DB1FF65ED03BD98FFEC0FFDFD8DB7CC84F
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363431643a3a2f34382d3438203d3e20343031353037.roa
Signing time: Tue 27 May 2025 09:36:02 +0000
ROA not before: Tue 27 May 2025 09:31:02 +0000
ROA not after: Tue 26 May 2026 09:36:02 +0000
asID: 401507
IP address blocks: 2a14:7584:641d::/48 maxlen: 48
Validation: Failed, certificate revoked on Sat 31 May 2025 17:16:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
65:59:c1:db:1f:f6:5e:d0:3b:d9:8f:fe:c0:ff:df:d8:db:7c:c8:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: May 27 09:31:02 2025 GMT
Not After : May 26 09:36:02 2026 GMT
Subject: CN=BC33C1E17E5E0B4B555296C88A961F92FBC34707
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:87:67:5d:91:9b:c0:7c:32:21:5b:ad:e6:bf:
df:c7:c0:e5:f1:e7:aa:00:e3:75:a1:b3:69:fb:c9:
b0:3a:5f:51:2c:b5:a5:50:d3:dc:72:12:f9:f6:1d:
78:5d:cf:65:d5:c3:e1:42:bb:ac:bf:0c:db:48:ae:
c4:0a:16:a5:b6:43:a5:7b:a7:aa:44:a9:f0:d4:49:
26:13:b4:6b:b7:89:62:75:fe:06:60:66:ed:43:b8:
d0:ed:59:06:92:0e:db:75:2b:ab:e4:0c:b0:04:eb:
b0:7e:ce:8a:6b:c5:0e:e8:d5:f0:5e:37:6d:83:24:
01:48:bb:cf:e8:da:2c:a5:b4:6d:ae:ef:4d:3e:c3:
41:e2:20:b5:57:7a:a6:f4:33:fa:37:91:29:53:cb:
ce:3d:5b:68:92:25:a6:a1:ce:a6:9c:0d:2b:ad:e9:
ba:24:06:93:cd:16:41:97:dc:a8:cc:6f:d8:b8:94:
8d:9f:41:0a:fb:7b:53:7d:61:a7:a9:75:9a:a8:cb:
f4:fe:ef:9e:2b:5a:81:7f:98:2b:db:dc:ca:63:10:
74:5d:29:75:dc:46:f6:e0:c2:5c:35:57:e3:fb:8b:
4d:1d:46:75:19:e4:3e:cc:54:49:92:a2:e3:b8:e0:
f8:cb:4c:4d:fa:d3:ea:22:85:e3:bb:38:10:02:f0:
70:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:33:C1:E1:7E:5E:0B:4B:55:52:96:C8:8A:96:1F:92:FB:C3:47:07
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363431643a3a2f34382d3438203d3e20343031353037.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:641d::/48
Signature Algorithm: sha256WithRSAEncryption
6c:64:11:e9:3a:29:2d:59:d3:d2:9e:cf:39:2d:f1:f4:81:1e:
31:78:c1:40:e3:b2:19:86:58:d9:a3:54:90:8c:81:3f:5a:20:
15:00:be:1b:cd:e1:7b:34:c4:de:4d:01:dd:5b:17:67:42:6c:
9e:8a:13:41:d0:02:12:15:b9:81:04:6b:a0:32:75:d3:25:de:
d0:e4:84:8d:1c:94:89:66:2a:93:0a:23:f5:67:24:0c:14:e7:
f8:6d:23:41:71:74:c1:ba:1c:09:00:b4:38:62:4c:00:e1:dc:
4d:70:25:6a:97:c5:47:28:03:a9:3d:da:e9:bd:5b:0d:4b:9d:
84:de:30:b3:e4:53:85:6d:e0:01:fa:a7:78:24:92:c8:c3:fe:
7a:a9:4f:56:9d:a2:be:4d:15:ee:1a:47:e5:d2:e3:1d:6a:17:
0a:1a:b4:97:4d:d2:a7:35:0d:ae:3c:b8:66:2d:08:d2:00:3d:
93:32:b6:49:95:c0:4b:6f:47:90:a7:bc:a4:50:e4:6b:d8:ef:
aa:e3:df:88:29:ec:37:21:dd:9f:84:6e:d2:85:5d:44:56:55:
db:75:b2:cf:d1:26:b9:29:d6:3a:66:32:f1:a1:ee:67:2b:04:
85:ef:4a:8a:62:4b:cf:91:4f:ce:f9:6b:c6:ac:ad:79:49:c3:
1f:78:9b:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 06:34:33 2025 by rpki-client