Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363839613a3a2f34382d3438203d3e20343031353037.roa
File: 326131343a373538343a363839613a3a2f34382d3438203d3e20343031353037.roa (raw, json)
Hash identifier: gb4kGQI5qnjlYIOalIRY3rX0EIe/AxDODTnlvUwCDKA=
Subject key identifier: CF:1D:A3:76:C7:0D:1C:21:FE:F8:A2:36:9E:42:D2:86:4F:26:05:A3
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 4B3776EA987836AC9EA141ACA1D11594A05B9C19
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363839613a3a2f34382d3438203d3e20343031353037.roa
Signing time: Fri 30 May 2025 10:18:02 +0000
ROA not before: Fri 30 May 2025 10:13:02 +0000
ROA not after: Fri 29 May 2026 10:18:02 +0000
asID: 401507
IP address blocks: 2a14:7584:689a::/48 maxlen: 48
Validation: Failed, certificate revoked on Sat 31 May 2025 17:16:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4b:37:76:ea:98:78:36:ac:9e:a1:41:ac:a1:d1:15:94:a0:5b:9c:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: May 30 10:13:02 2025 GMT
Not After : May 29 10:18:02 2026 GMT
Subject: CN=CF1DA376C70D1C21FEF8A2369E42D2864F2605A3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:85:12:a1:50:2b:99:b2:66:00:7a:95:6a:45:
0a:82:9f:ff:5c:2f:be:8b:d6:7b:d0:16:6d:f1:49:
f4:81:cd:1d:a3:9e:bc:7d:0a:8e:34:a1:a9:a2:fe:
c9:00:33:3d:75:12:fd:c0:66:18:e3:0d:90:2a:74:
ce:55:db:c1:07:b4:75:29:d1:74:bb:18:8d:b4:39:
a6:a0:72:1f:d8:52:b8:64:63:6e:e3:cb:da:99:09:
0b:04:11:c8:cc:1d:ee:e9:bc:aa:df:58:d2:48:13:
63:07:f8:c4:0b:82:d6:2a:89:f1:e1:1a:05:95:c9:
0c:47:56:3a:fe:31:50:ca:9f:a6:af:52:f7:52:2b:
7a:21:a2:f2:6d:c7:ea:db:2f:bb:3a:3e:9c:73:b9:
56:1b:80:08:9a:f0:8a:46:03:3c:10:9f:a0:e9:ce:
e0:8e:21:d4:48:b1:09:7a:2c:39:85:08:f9:ea:8d:
8a:c8:65:ec:0d:2d:72:5b:15:2a:c8:9d:ce:7b:4f:
7d:5e:a4:5e:09:83:0f:02:5e:8c:1a:c2:86:97:a2:
d2:84:3e:ae:4b:15:83:39:01:3c:68:a4:85:9f:e5:
5f:31:cf:8a:a8:7e:4b:23:aa:57:de:fc:5f:9f:87:
58:22:24:15:64:de:9c:84:07:4e:9a:ec:56:15:c1:
c5:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:1D:A3:76:C7:0D:1C:21:FE:F8:A2:36:9E:42:D2:86:4F:26:05:A3
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363839613a3a2f34382d3438203d3e20343031353037.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:689a::/48
Signature Algorithm: sha256WithRSAEncryption
86:d3:64:8b:c0:dc:db:d7:f4:2f:39:d7:66:48:d2:25:e4:cf:
81:56:cf:78:6d:0d:cd:60:69:ef:13:38:25:ff:2e:cf:14:a3:
f1:c7:92:17:04:10:fc:cb:f5:66:ff:0c:1b:c2:86:24:c8:4e:
15:b7:9f:1d:7f:48:76:54:8f:32:2d:fd:8e:1f:0d:82:86:32:
0d:e3:e5:c6:26:3c:50:f7:94:26:32:36:bc:61:65:e3:08:fe:
ba:bf:67:d6:6a:5d:57:8a:84:ac:a0:5f:83:57:ff:04:32:26:
03:09:84:f0:5f:ab:5b:ca:b9:da:99:29:5a:dd:c4:fe:64:93:
70:be:b0:8d:69:e3:a9:2d:c4:53:07:28:15:fd:f8:21:c4:ef:
97:c2:74:04:d9:f7:c1:80:14:3a:5a:0b:54:49:9b:3c:88:fe:
8b:5e:14:72:ce:ee:da:c9:7b:58:d0:a7:52:69:cc:e7:33:a5:
fe:10:c3:ff:b6:fa:89:fa:d8:a8:e5:30:bd:de:13:8b:6d:e0:
fd:12:37:6b:31:59:28:fb:a0:1f:55:68:4c:ca:58:c8:7a:7d:
9c:ea:33:52:bb:bd:9a:67:fb:19:10:33:34:be:c3:f1:e4:a6:
cc:f3:8b:42:ef:fa:96:04:62:46:d0:48:89:a6:6d:a3:bf:b5:
4e:63:62:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 07:25:24 2025 by rpki-client