Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363435643a3a2f34382d3438203d3e20343031353037.roa
File: 326131343a373538343a363435643a3a2f34382d3438203d3e20343031353037.roa (raw, json)
Hash identifier: IsnfhZbeeXmAewheNsPkJKCEsts/tvlkKKmDMUiEnhU=
Subject key identifier: 4F:69:66:D9:E6:E5:B6:78:5F:06:0E:67:FA:E8:AC:24:8D:4C:13:B5
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 6592EC81281A2C2FE4017F9FAE7334B2581F9A6E
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363435643a3a2f34382d3438203d3e20343031353037.roa
Signing time: Wed 28 May 2025 12:48:02 +0000
ROA not before: Wed 28 May 2025 12:43:02 +0000
ROA not after: Wed 27 May 2026 12:48:02 +0000
asID: 401507
IP address blocks: 2a14:7584:645d::/48 maxlen: 48
Validation: Failed, certificate revoked on Sat 31 May 2025 17:16:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
65:92:ec:81:28:1a:2c:2f:e4:01:7f:9f:ae:73:34:b2:58:1f:9a:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: May 28 12:43:02 2025 GMT
Not After : May 27 12:48:02 2026 GMT
Subject: CN=4F6966D9E6E5B6785F060E67FAE8AC248D4C13B5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:01:b7:48:f3:91:76:c2:78:25:e1:a4:af:08:
00:25:80:92:79:26:5b:eb:0c:5b:2d:a4:f3:55:df:
18:da:c3:c2:f1:dc:0a:34:9d:49:47:35:04:04:8c:
b5:83:39:18:e6:04:63:f9:8c:86:b6:f3:ca:e1:62:
02:b7:6e:78:50:3a:93:80:db:90:50:5e:f9:89:0c:
fd:54:7d:31:6e:bc:31:e7:05:66:c1:e8:ec:b6:55:
ae:d1:56:41:82:f5:6f:3d:df:e9:53:58:31:a0:e2:
02:e0:db:f2:62:5b:00:ce:50:53:d2:3c:5b:71:25:
9c:56:09:6d:42:ce:db:09:46:64:a8:a2:27:20:ab:
6d:19:30:f2:5e:2a:4c:27:53:41:0e:15:e2:44:cc:
40:ed:7f:6a:12:81:53:b2:3d:89:5f:81:d8:e6:4b:
a1:d6:32:ab:95:1a:67:2e:7a:96:78:00:51:23:dc:
b6:d7:f6:d4:99:10:f6:17:0c:b4:27:1f:b1:19:9c:
a6:bf:a5:1b:55:ec:bf:b6:e1:e1:ce:5c:e9:12:01:
cd:32:79:43:8a:cc:41:4b:81:e9:d1:b0:ed:34:bc:
cf:b5:88:04:4a:04:bd:63:37:b8:ef:1d:37:2c:a5:
4d:2c:11:0b:b3:44:6e:0a:d1:f5:22:7f:a7:d1:4f:
6d:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:69:66:D9:E6:E5:B6:78:5F:06:0E:67:FA:E8:AC:24:8D:4C:13:B5
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363435643a3a2f34382d3438203d3e20343031353037.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:645d::/48
Signature Algorithm: sha256WithRSAEncryption
a0:47:37:41:48:d5:f7:95:77:fd:14:68:bb:eb:62:c4:35:43:
23:b1:91:13:71:d8:02:77:05:ca:f6:90:88:5f:3f:63:b6:64:
7c:73:cc:e6:f7:62:09:3e:63:6f:9b:9d:67:66:f2:25:aa:60:
af:2f:3b:61:14:89:3e:66:f2:0b:df:71:ec:ce:5b:5e:a0:78:
bc:8b:d6:03:39:36:b1:14:de:1a:d9:77:59:b1:f4:a3:d3:87:
5a:7e:10:02:fc:df:c5:9c:6a:ab:34:46:fd:d0:eb:8e:8c:f1:
80:6c:bc:4b:bb:41:a0:d7:26:e8:1c:94:c3:ee:bc:7a:3c:da:
5d:7d:02:6a:03:d4:60:1d:ca:d5:2f:1f:86:a8:4c:6c:17:a6:
08:6b:f3:2c:f9:c4:49:72:2f:8d:46:ae:41:d5:d5:69:bb:29:
09:1d:53:ee:4e:d0:64:9c:b2:55:76:3e:43:6f:6c:4d:ef:cf:
ad:0a:41:26:05:b4:09:c6:d7:a5:2d:a2:aa:0d:4f:22:ee:5c:
12:55:84:9e:05:7c:fc:67:c9:68:22:74:bc:f2:e5:55:56:c2:
00:bb:30:42:23:85:1f:34:c7:9d:66:33:cf:5c:cc:78:ab:0e:
d7:9c:a5:db:fa:47:f8:f2:de:7f:bf:6f:2a:6e:9d:18:00:18:
c1:ff:46:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 07:19:23 2025 by rpki-client