Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363734353a3a2f34382d3438203d3e20343031353037.roa
File: 326131343a373538343a363734353a3a2f34382d3438203d3e20343031353037.roa (raw, json)
Hash identifier: LCESecwyS5Xtro+2Jl3MqqhePJAxmB6OEFxwBJooGkg=
Subject key identifier: 28:D4:32:2E:7A:62:B1:BD:AF:34:4A:2F:4D:60:41:3D:06:D7:FE:40
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 4C3E5DC56D7379044FF733E967A308154C648505
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363734353a3a2f34382d3438203d3e20343031353037.roa
Signing time: Fri 23 May 2025 20:50:58 +0000
ROA not before: Fri 23 May 2025 20:45:58 +0000
ROA not after: Fri 22 May 2026 20:50:58 +0000
asID: 401507
IP address blocks: 2a14:7584:6745::/48 maxlen: 48
Validation: Failed, certificate revoked on Tue 27 May 2025 09:30:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4c:3e:5d:c5:6d:73:79:04:4f:f7:33:e9:67:a3:08:15:4c:64:85:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: May 23 20:45:58 2025 GMT
Not After : May 22 20:50:58 2026 GMT
Subject: CN=28D4322E7A62B1BDAF344A2F4D60413D06D7FE40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:da:e3:14:f6:29:f1:e0:3a:4d:f7:e6:9b:2c:
6d:d9:0c:f4:23:0a:d7:f7:8a:a8:5f:ec:b4:1d:4b:
e9:6e:e1:9d:13:e9:53:e5:a7:ec:97:99:44:e8:0a:
7a:de:22:fc:4f:4d:fa:5e:c8:b0:85:ad:4e:a2:ee:
2d:27:4b:05:9a:42:8d:97:b7:bd:af:a6:0b:2e:c4:
bc:19:e9:14:2b:01:63:82:af:61:09:39:6e:76:a4:
ca:10:1c:0f:f6:13:50:02:60:27:e5:73:ff:d1:7c:
8d:d2:ed:c9:a1:fb:ce:56:f8:01:52:0e:dc:e7:93:
c4:28:89:f5:67:5e:f8:e1:e6:91:6e:ef:0f:49:37:
b8:33:d0:dc:9e:98:ff:55:93:7d:88:93:84:30:53:
37:86:05:b6:44:8d:54:3f:37:fa:4d:c4:a9:bd:de:
f9:ab:7b:8d:59:d0:84:c5:7a:46:19:26:4c:94:d0:
00:dd:ec:ad:a9:e4:a3:68:72:60:2c:e3:34:02:4f:
05:7a:69:c7:29:43:1f:f9:fe:95:ef:c1:3d:80:1e:
93:33:6a:6b:76:cd:ca:3c:d3:fb:74:51:9a:f6:9e:
d5:4e:18:eb:f0:fd:b1:76:9e:61:69:b7:ce:ea:1a:
09:31:e4:f0:84:1c:95:80:2d:61:60:ff:77:9b:67:
4c:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:D4:32:2E:7A:62:B1:BD:AF:34:4A:2F:4D:60:41:3D:06:D7:FE:40
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363734353a3a2f34382d3438203d3e20343031353037.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:6745::/48
Signature Algorithm: sha256WithRSAEncryption
39:b2:2e:ea:96:62:0a:2c:45:ed:cc:ec:1f:4e:d9:27:b5:78:
ed:ca:cf:8e:7e:ef:22:4e:bc:dc:4f:87:8c:47:18:e7:19:fc:
82:4c:a0:97:21:70:82:68:fd:8d:f8:5f:37:bb:0e:50:c8:ff:
56:1a:e4:52:13:4f:d5:ce:32:de:c7:bb:e3:bf:6f:48:16:53:
96:e6:2c:16:90:a5:40:c9:e7:4e:97:be:b1:a1:3f:b6:4c:14:
8b:c7:97:1d:9d:58:76:59:bf:9f:15:4b:50:4c:05:65:18:d5:
c8:7a:64:5f:68:bc:8c:cc:f4:88:23:35:bc:1a:8d:46:64:93:
9b:9b:db:bd:5a:5a:59:62:10:1c:39:5d:5f:82:6f:61:d8:b8:
55:00:cc:83:ad:42:30:36:6a:72:7e:2b:1a:57:cd:57:9b:99:
fd:a8:25:e8:f7:31:c8:df:7f:94:ea:15:5d:a5:13:59:b0:57:
88:8e:44:3b:cd:13:a4:73:6d:63:34:58:ef:61:af:1b:89:6f:
09:69:a2:f7:15:8a:e1:a0:f2:7b:a1:e0:45:56:f4:ff:dd:e9:
54:92:31:0e:dc:29:87:33:7d:a4:80:9a:f0:3b:d4:1f:16:ad:
c2:16:4c:7f:08:58:c0:ec:bb:21:92:25:42:28:32:b3:ce:97:
9c:2f:9e:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 06:34:44 2025 by rpki-client