Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363662623a3a2f34382d3438203d3e20343031353037.roa
File: 326131343a373538343a363662623a3a2f34382d3438203d3e20343031353037.roa (raw, json)
Hash identifier: UnhCFnnegcYRBZM8MtLB0GO2g3IYoJVe0/+5uh00zYw=
Subject key identifier: 54:E4:D5:28:1D:3F:01:73:BC:E9:31:B6:3C:08:BB:D0:59:90:A6:CC
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 1DDDD69B5BCD195CA4D45AE99F574C7CB62DAF4C
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363662623a3a2f34382d3438203d3e20343031353037.roa
Signing time: Wed 28 May 2025 00:42:01 +0000
ROA not before: Wed 28 May 2025 00:37:01 +0000
ROA not after: Wed 27 May 2026 00:42:01 +0000
asID: 401507
IP address blocks: 2a14:7584:66bb::/48 maxlen: 48
Validation: Failed, certificate revoked on Sat 31 May 2025 17:16:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1d:dd:d6:9b:5b:cd:19:5c:a4:d4:5a:e9:9f:57:4c:7c:b6:2d:af:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: May 28 00:37:01 2025 GMT
Not After : May 27 00:42:01 2026 GMT
Subject: CN=54E4D5281D3F0173BCE931B63C08BBD05990A6CC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:d5:58:6f:b2:66:2c:22:d8:c0:ae:ee:9b:d5:
d1:57:be:a8:e7:25:8a:83:1a:47:fc:46:2f:c9:2c:
67:50:a5:fa:d2:6b:00:a2:82:c7:7d:8d:38:31:b9:
9b:02:37:12:8a:b2:5a:f8:a4:b0:af:92:bb:74:fe:
0c:88:74:ec:37:90:7a:6c:3b:cd:be:92:8f:03:7c:
e1:d4:81:38:e8:8b:55:32:51:f4:a0:ae:0d:f7:ba:
8d:01:8c:e7:48:58:d5:21:ab:7b:ac:3c:6f:6b:db:
b8:83:34:df:82:45:bb:bc:8b:ae:f5:c8:94:91:cc:
11:60:d7:74:09:9a:3f:ca:23:a7:49:ea:c5:c7:2a:
fb:37:9c:c9:ff:f5:a2:0e:15:28:91:d8:ab:53:f9:
e7:b0:bc:22:20:f3:08:69:97:c2:25:55:ae:d0:f6:
fe:70:f4:f6:8f:c6:4a:67:ef:ef:c7:5f:22:ac:69:
b0:cd:a5:dc:c8:64:aa:2d:c9:dd:fd:41:05:3d:ae:
f4:ad:6b:9a:b6:0e:9e:d0:6c:30:46:94:60:c3:91:
1b:ce:95:c4:6d:ac:6f:2e:34:1d:81:ea:d1:36:53:
5d:2d:2f:a6:79:98:38:32:b6:65:50:fd:0a:aa:69:
bc:be:0e:d0:68:ce:80:a6:fc:df:2c:bf:62:18:86:
23:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:E4:D5:28:1D:3F:01:73:BC:E9:31:B6:3C:08:BB:D0:59:90:A6:CC
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363662623a3a2f34382d3438203d3e20343031353037.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:66bb::/48
Signature Algorithm: sha256WithRSAEncryption
85:b4:92:dc:51:7a:2c:00:a2:2c:f6:6e:75:3d:82:f0:58:8b:
b6:a6:2d:a1:49:78:aa:f4:63:f7:ea:ca:66:a8:09:07:7f:2c:
60:d0:85:ba:02:29:c6:96:7f:f9:fe:9d:e4:54:4c:92:3f:47:
92:d1:49:9f:8c:b6:63:5a:7a:6b:b0:3b:42:be:0c:e0:ef:2d:
33:71:d2:f7:b2:e9:57:7f:12:01:b7:69:17:0d:3a:8e:20:01:
f1:0d:08:dd:63:8d:65:72:c8:65:98:b2:b7:71:99:21:cc:87:
47:70:1d:f1:e3:dc:15:13:9e:74:3d:2e:70:b4:77:a2:aa:37:
cf:41:e6:1c:49:3e:e2:6a:bb:99:4e:82:23:36:14:74:50:78:
53:56:86:b3:48:cb:31:af:a9:93:45:c5:07:4f:fe:05:d2:cd:
f6:6c:36:6c:53:4f:72:e8:93:6e:23:1a:52:f8:0d:98:15:e0:
3b:07:78:c6:77:0e:7b:77:2f:9e:e3:d4:49:44:de:b7:80:fc:
bd:d7:55:23:72:00:ba:46:90:c5:dd:1b:d0:24:47:17:bc:05:
2c:1a:38:72:2e:bc:96:29:45:72:6e:52:d1:b7:95:57:fb:b3:
81:f3:7e:de:24:b4:e7:d5:75:25:28:bc:53:e8:8b:d6:16:30:
0d:6d:a5:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 06:01:50 2025 by rpki-client