Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363432613a3a2f34382d3438203d3e20343031353037.roa
File: 326131343a373538343a363432613a3a2f34382d3438203d3e20343031353037.roa (raw, json)
Hash identifier: 8s96aCjkyrm3KWo6iqLt6W+ajWyTOf2D+cxFupBWRNk=
Subject key identifier: FA:3A:02:21:57:64:CE:8C:03:C5:B7:D6:2B:3C:38:6A:E5:2B:81:3D
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 44E47213BE465CA77DF40C433EB11EFE62D275C9
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363432613a3a2f34382d3438203d3e20343031353037.roa
Signing time: Fri 30 May 2025 10:18:01 +0000
ROA not before: Fri 30 May 2025 10:13:01 +0000
ROA not after: Fri 29 May 2026 10:18:01 +0000
asID: 401507
IP address blocks: 2a14:7584:642a::/48 maxlen: 48
Validation: Failed, certificate revoked on Sat 31 May 2025 17:16:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
44:e4:72:13:be:46:5c:a7:7d:f4:0c:43:3e:b1:1e:fe:62:d2:75:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: May 30 10:13:01 2025 GMT
Not After : May 29 10:18:01 2026 GMT
Subject: CN=FA3A02215764CE8C03C5B7D62B3C386AE52B813D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:6d:01:2a:70:4a:03:9c:6b:a8:08:90:92:4a:
22:ce:9c:e5:84:d7:ca:dd:09:58:b9:d7:d7:7b:f8:
71:ca:82:0f:00:7a:b4:df:27:24:d0:9d:d1:c6:fc:
cd:29:25:52:c5:06:75:43:73:e4:0c:12:18:ac:cf:
9c:57:8a:bb:4b:68:42:b9:65:6d:5d:6d:b2:2b:a1:
a5:06:3a:2b:67:dc:2a:15:7e:90:d0:dd:cc:4b:8b:
1a:48:82:e2:a4:51:2b:10:fd:d3:50:0f:53:6e:6d:
cf:44:38:76:f6:2b:98:19:94:1e:61:0c:33:6f:d9:
ec:c0:5d:b7:52:d7:62:08:dd:d4:64:83:7a:24:10:
dd:03:ac:1d:98:7b:3f:b2:a7:45:3e:2c:57:14:16:
3d:b7:a8:72:21:46:11:e1:23:d4:b8:76:c1:d1:f5:
92:e7:1e:e1:3a:41:e9:1e:54:fb:cf:5e:1e:c2:c6:
8f:4c:4b:04:03:ce:33:35:f9:55:fd:88:de:e9:d0:
9c:7f:c3:f4:63:ac:02:c9:b7:c6:0e:9e:45:6c:44:
a1:64:66:61:c6:0b:e6:10:0b:9b:f3:ad:0b:28:f7:
2d:d2:ab:cc:1b:03:51:8e:37:0f:c2:a4:1e:33:98:
61:87:a1:d7:10:db:ef:3d:50:97:14:de:4e:d4:62:
c0:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:3A:02:21:57:64:CE:8C:03:C5:B7:D6:2B:3C:38:6A:E5:2B:81:3D
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363432613a3a2f34382d3438203d3e20343031353037.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:642a::/48
Signature Algorithm: sha256WithRSAEncryption
5f:b3:3e:eb:83:96:43:73:05:3a:74:63:68:28:f9:4c:b7:10:
04:e1:1d:5e:09:1e:04:d7:ec:b8:13:1c:27:dd:b4:49:e8:8d:
68:22:c7:b8:66:b3:2f:da:b7:a6:17:f1:67:91:3f:38:9f:a6:
82:50:b5:85:cb:7f:5a:8b:89:4b:a9:20:e6:6e:7e:11:a6:70:
3d:ff:dd:46:d2:0b:ca:87:19:74:a5:be:78:66:cb:3a:ec:b2:
1b:9d:cb:3b:ca:01:04:c8:0e:81:48:37:aa:8b:4c:bc:1c:dc:
fb:c7:9d:8c:01:ce:15:14:b2:14:08:bb:93:23:99:d0:93:27:
5c:f0:66:0d:81:e3:d9:e2:45:d3:69:dc:71:69:b4:28:93:20:
98:2d:07:ed:ba:2b:0c:ab:d1:1b:7a:9f:e2:9c:a4:e3:1a:c5:
8b:a4:66:19:38:f9:b0:39:cd:8c:38:e5:bd:6a:98:48:0e:27:
af:91:e7:8a:7e:75:8f:b7:7d:db:e7:ab:69:5e:26:3b:42:89:
a2:a1:1f:1b:26:40:3e:49:1e:6c:df:92:9d:e9:81:8f:e7:a8:
6b:99:22:6a:fe:cc:2b:40:67:59:df:af:3c:a3:89:4d:49:78:
47:16:f1:21:e1:96:ff:c7:56:2e:1c:2f:12:37:dd:8e:2d:61:
d8:9e:ea:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 06:00:23 2025 by rpki-client