Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a366134313a3a2f34382d3438203d3e20343031353037.roa
File: 326131343a373538343a366134313a3a2f34382d3438203d3e20343031353037.roa (raw, json)
Hash identifier: +TzwMVaCjTu7qm2L54DJ5isoNx7TgApFYkUExI2tBIU=
Subject key identifier: 88:C4:AA:D6:78:60:04:39:75:F8:CC:13:B2:63:04:CF:97:BD:E9:7E
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 1339B75BD1439B348F6A57D470E5042D99E890B9
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a366134313a3a2f34382d3438203d3e20343031353037.roa
Signing time: Fri 23 May 2025 20:50:58 +0000
ROA not before: Fri 23 May 2025 20:45:58 +0000
ROA not after: Fri 22 May 2026 20:50:58 +0000
asID: 401507
IP address blocks: 2a14:7584:6a41::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 28 May 2025 17:24:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
13:39:b7:5b:d1:43:9b:34:8f:6a:57:d4:70:e5:04:2d:99:e8:90:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: May 23 20:45:58 2025 GMT
Not After : May 22 20:50:58 2026 GMT
Subject: CN=88C4AAD67860043975F8CC13B26304CF97BDE97E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:b7:f8:39:23:f6:69:07:b9:a4:c1:32:ae:dc:
85:61:57:a8:bb:74:a6:db:f7:8b:5c:1b:63:a6:be:
9e:10:b1:af:58:0a:b8:19:77:e7:ab:dd:dc:ff:d8:
c3:1c:4c:e3:d4:e7:21:9f:22:ed:90:4e:f6:e2:54:
38:09:27:ed:f3:a3:29:01:f2:cd:3d:f4:b5:c1:8d:
01:7b:f2:70:f6:43:bc:ea:ce:bb:9d:79:80:2c:b2:
d8:f5:9f:16:5d:4e:0d:39:ad:31:53:58:92:14:74:
e2:55:ce:50:f3:81:d6:1c:9f:0b:8b:33:a7:8b:43:
57:0e:6e:dd:61:56:1c:8b:86:72:df:ee:c7:26:64:
e3:d0:23:b5:de:30:08:55:9c:fc:09:b5:63:39:fc:
69:63:cb:1d:68:9d:28:1a:aa:04:e9:d1:0a:dc:3b:
cf:12:e1:0c:0f:60:14:b3:14:ab:71:f2:db:00:51:
02:52:d3:34:84:74:4b:a6:ea:fd:0e:7e:bd:16:93:
d8:81:65:1b:a5:f9:bb:ed:bc:0a:7e:82:8b:28:2a:
a7:9d:a5:59:5d:87:65:1a:8f:da:31:4d:1b:39:2a:
d3:cb:17:5f:75:09:f3:39:9d:4a:b7:0d:bf:fb:40:
4d:9c:e9:b9:eb:ba:39:89:a4:f8:a1:1f:66:e6:54:
d3:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:C4:AA:D6:78:60:04:39:75:F8:CC:13:B2:63:04:CF:97:BD:E9:7E
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a366134313a3a2f34382d3438203d3e20343031353037.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:6a41::/48
Signature Algorithm: sha256WithRSAEncryption
61:6d:e8:13:c5:a1:2d:af:23:7a:e8:dd:e7:c0:62:5d:8a:b7:
ee:49:12:38:bf:17:34:d9:04:20:f8:11:17:57:df:bc:61:19:
3f:9d:02:3e:ac:8b:00:02:db:b5:44:a5:25:9b:94:11:df:25:
09:1c:69:61:fb:19:71:9e:a2:23:cf:60:27:4f:58:66:7b:ae:
98:17:da:fa:1d:29:a2:01:90:c7:6f:5a:43:93:4e:d4:04:85:
4e:06:e5:27:0c:52:88:15:3b:dc:f3:ab:af:ee:08:ba:c5:c3:
e4:a2:01:f6:e5:7c:b2:a0:0f:c5:7e:10:c0:49:17:bd:79:fe:
df:a5:9f:c5:13:d6:8f:05:8c:a7:cb:82:3c:4e:d3:80:b0:59:
c9:c2:e3:1f:da:db:96:02:b0:a0:3b:88:04:d3:c6:cd:ae:3b:
f8:b0:71:c3:20:c5:58:d2:ef:97:8c:16:dd:c3:2b:67:72:81:
c9:33:4e:9d:01:7b:47:18:5f:2b:4b:24:78:20:9b:d4:c9:f2:
b5:36:6b:f0:14:fa:d9:9e:ae:60:9e:0e:ad:e9:fd:65:b4:72:
25:34:49:4d:80:43:80:f2:05:5c:47:7e:0a:03:33:75:4a:e5:
56:6f:7a:00:b3:45:f3:90:a9:df:90:ed:58:7f:a0:fa:34:7a:
b6:1e:98:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 00:41:59 2025 by rpki-client