Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a366232633a3a2f34382d3438203d3e20343031353037.roa
File: 326131343a373538343a366232633a3a2f34382d3438203d3e20343031353037.roa (raw, json)
Hash identifier: wglwTm9VrHWkgW1LFfzjnvQ0OD3T9iSU+VKY7PuOrao=
Subject key identifier: 37:37:F0:23:DD:3F:7C:A7:09:58:FB:9B:90:1C:CF:26:62:E9:FF:EA
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 0F628FA7FA05EF0842C8DCBE9638A49803A5D40C
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a366232633a3a2f34382d3438203d3e20343031353037.roa
Signing time: Sat 24 May 2025 07:36:02 +0000
ROA not before: Sat 24 May 2025 07:31:02 +0000
ROA not after: Sat 23 May 2026 07:36:02 +0000
asID: 401507
IP address blocks: 2a14:7584:6b2c::/48 maxlen: 48
Validation: Failed, certificate revoked on Thu 29 May 2025 16:13:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0f:62:8f:a7:fa:05:ef:08:42:c8:dc:be:96:38:a4:98:03:a5:d4:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: May 24 07:31:02 2025 GMT
Not After : May 23 07:36:02 2026 GMT
Subject: CN=3737F023DD3F7CA70958FB9B901CCF2662E9FFEA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:3f:59:79:24:fa:2a:1d:78:94:95:da:95:03:
7b:2d:b1:99:6e:36:ad:b9:aa:d2:61:9d:aa:86:ea:
bf:63:bb:d6:f0:16:66:d0:dc:3a:f4:a1:b3:4e:8d:
18:cf:03:74:70:aa:c6:ed:87:e6:9a:39:35:95:da:
53:de:b0:75:23:fc:5c:a4:22:a9:3f:6f:43:93:11:
b1:f4:ba:d4:68:e1:35:4e:87:3f:65:dd:eb:3a:59:
f4:28:6a:85:c3:4b:d0:18:69:05:5d:e2:a0:bb:9e:
20:e1:b3:09:74:b5:cb:45:9a:91:21:be:32:e5:da:
d3:67:77:9a:5b:a8:0c:1b:c1:b6:b4:36:85:1d:cc:
a2:ee:68:2f:54:4c:bf:27:d7:69:91:7f:ea:46:ac:
d1:52:38:4b:66:90:6c:12:a5:f9:21:2e:ee:ba:a3:
17:39:aa:ed:a0:9a:29:19:5c:cf:4b:0c:ad:44:42:
5d:10:de:71:79:88:2d:06:5e:68:9f:e0:52:5f:32:
3a:15:b5:2d:01:38:99:91:81:00:21:cb:84:c7:17:
35:67:7a:47:3c:f6:e3:1f:49:94:6c:e3:c9:b1:a8:
39:35:38:86:2f:d1:1c:f8:2d:b7:97:9a:4c:59:b9:
68:c7:6a:c8:a1:04:b7:6f:17:50:3d:22:9f:5a:87:
9b:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:37:F0:23:DD:3F:7C:A7:09:58:FB:9B:90:1C:CF:26:62:E9:FF:EA
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a366232633a3a2f34382d3438203d3e20343031353037.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:6b2c::/48
Signature Algorithm: sha256WithRSAEncryption
48:f8:e4:83:d4:d4:67:3d:aa:9f:4c:86:8f:e0:13:a2:73:c8:
34:d4:2a:d9:e0:40:66:59:8b:56:25:7d:b3:3c:57:c2:19:13:
aa:91:77:37:80:a3:ff:52:a9:8b:db:f8:f0:10:c9:88:bc:bf:
0e:e7:93:bf:fc:92:a2:c9:37:03:de:58:ef:48:51:4f:7f:ef:
09:69:38:c0:72:4c:ab:1e:72:af:24:d0:5a:60:a2:ae:75:7f:
5c:a5:5f:7f:e2:fa:69:59:1f:12:8b:63:b3:97:09:8f:29:00:
9e:05:af:b2:e8:bb:10:f6:01:f3:f0:ad:b4:11:a0:c9:ec:8f:
c8:a8:0e:b7:75:a9:43:d0:6d:be:e6:06:df:5b:9e:52:29:36:
7a:7b:d6:fa:89:40:d4:05:06:96:8b:e9:fe:41:4d:2a:ee:19:
77:bb:b8:79:a4:9f:3c:84:fb:f0:a2:92:61:86:ad:18:5e:2b:
c2:04:e2:00:8b:40:68:93:54:60:a4:57:ab:79:46:e8:11:a3:
c1:c1:b6:2c:bb:c6:bf:4b:d9:a2:da:f7:f7:a2:d6:1e:32:be:
06:8c:f5:9b:d7:80:14:69:54:fa:94:24:1f:8a:c6:f3:e7:fb:
c2:7a:d9:d2:e8:e7:49:9c:02:03:a4:4b:23:3a:ab:39:61:4b:
7b:23:3b:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 05:44:33 2025 by rpki-client