Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363665323a3a2f34382d3438203d3e20343031353037.roa
File: 326131343a373538343a363665323a3a2f34382d3438203d3e20343031353037.roa (raw, json)
Hash identifier: ovZIr4c5hog+elEJeUxsXBAsV7kN1IDWLNnTSpLdFIE=
Subject key identifier: A9:D2:02:43:5F:2E:07:AE:B0:5A:19:B8:6E:2D:7E:E2:BF:37:AD:67
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 058969E78F8F904E32CF663C5DFE5292579CB805
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363665323a3a2f34382d3438203d3e20343031353037.roa
Signing time: Sat 24 May 2025 07:36:02 +0000
ROA not before: Sat 24 May 2025 07:31:02 +0000
ROA not after: Sat 23 May 2026 07:36:02 +0000
asID: 401507
IP address blocks: 2a14:7584:66e2::/48 maxlen: 48
Validation: Failed, certificate revoked on Thu 29 May 2025 10:30:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
05:89:69:e7:8f:8f:90:4e:32:cf:66:3c:5d:fe:52:92:57:9c:b8:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: May 24 07:31:02 2025 GMT
Not After : May 23 07:36:02 2026 GMT
Subject: CN=A9D202435F2E07AEB05A19B86E2D7EE2BF37AD67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:14:c3:9b:e4:e6:ac:ab:d3:fe:c6:5b:e7:d3:
c1:2f:b0:f6:5c:8a:69:bb:5f:5b:3a:c5:84:05:7d:
62:30:81:ee:00:fc:97:71:af:29:5c:46:05:b5:f7:
e0:98:df:46:c9:88:96:99:5a:2a:09:6d:fb:c7:ee:
d7:86:0d:ce:64:3d:6a:d2:67:55:af:06:e4:e8:74:
9c:a8:2e:4d:12:2b:0d:80:85:1f:f3:6f:f5:c7:1e:
34:ae:76:36:07:52:e6:73:18:e6:0f:77:af:38:fd:
3f:65:0a:3c:af:ef:bd:42:4b:92:e0:9b:98:6b:6a:
11:95:32:67:73:f1:60:63:5e:23:f4:0f:4f:cf:14:
b6:a9:a5:50:05:34:34:a4:be:6c:b4:d1:6f:17:b8:
e0:a1:a5:1a:30:a2:b5:4b:f1:6b:4a:4c:d5:1a:73:
e2:fb:aa:18:19:4c:51:19:aa:bd:35:cf:fe:c5:25:
94:f1:62:68:ab:d3:40:1b:ce:53:57:71:78:d5:2b:
c7:14:6e:57:76:c8:40:3c:38:ec:44:e4:6b:59:5f:
65:6b:bd:f9:5d:c6:8e:83:6b:55:12:30:61:24:2f:
ae:a9:f3:8b:94:b1:e2:3c:d8:fb:81:cb:e4:21:7f:
57:c7:b9:db:2c:d1:8e:cc:82:82:e3:61:c5:1c:b6:
0b:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:D2:02:43:5F:2E:07:AE:B0:5A:19:B8:6E:2D:7E:E2:BF:37:AD:67
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363665323a3a2f34382d3438203d3e20343031353037.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:66e2::/48
Signature Algorithm: sha256WithRSAEncryption
51:fd:bc:90:2f:7d:85:01:44:d9:37:ba:41:2f:cb:1c:b8:ad:
16:dd:d9:04:a4:91:75:a4:bf:3b:24:bf:ff:79:08:7f:80:a6:
f8:09:80:3e:47:a6:62:91:57:4f:2a:43:17:e8:9c:82:6e:47:
e0:f4:98:b0:e8:f4:d8:e9:57:e4:06:37:f4:be:6a:5a:30:a4:
0e:96:4d:0c:7f:cd:5b:4e:30:89:56:8c:7f:bd:0a:96:c0:e6:
74:67:57:28:44:39:ee:45:2d:ba:a5:c8:fe:0c:de:15:33:e6:
63:c5:bc:0f:f5:e3:ac:69:20:76:10:12:b4:7f:2c:22:ee:80:
fa:ca:56:d0:5b:bd:4f:f8:47:ae:22:e4:c1:0d:63:92:6c:b3:
d1:ba:a9:2c:20:e9:fd:b6:a4:2a:f3:5a:73:d4:e1:4e:c1:73:
0f:e9:3f:02:f3:66:7f:9d:be:ef:99:22:48:cd:d1:81:b4:9e:
89:c2:91:94:60:5e:25:11:25:28:df:ad:e0:c7:fa:c0:3c:e6:
2b:ea:e2:83:e6:ab:6d:25:c2:ff:ae:14:b2:59:3a:70:51:50:
2f:75:55:6c:6e:e7:0e:d9:6a:42:c5:6d:9a:13:8b:68:3d:3c:
b4:f6:24:e4:cb:2a:a4:e3:85:65:a4:7f:7c:fd:4e:a0:2a:86:
b8:46:0e:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 11:16:39 2025 by rpki-client