Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a366239323a3a2f34382d3438203d3e20343031353037.roa
File: 326131343a373538343a366239323a3a2f34382d3438203d3e20343031353037.roa (raw, json)
Hash identifier: 2ofsrWiUrhXQuos8jHGmnBGymTyUSOfNII4LQdoJtmQ=
Subject key identifier: B1:47:B4:3C:85:3A:42:B4:94:1C:51:2B:3D:89:4F:4A:27:06:59:B7
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 401BA4AA56378D647A8A7D2E6D9C6027BF578406
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a366239323a3a2f34382d3438203d3e20343031353037.roa
Signing time: Tue 27 May 2025 00:30:01 +0000
ROA not before: Tue 27 May 2025 00:25:01 +0000
ROA not after: Tue 26 May 2026 00:30:01 +0000
asID: 401507
IP address blocks: 2a14:7584:6b92::/48 maxlen: 48
Validation: Failed, certificate revoked on Sat 31 May 2025 17:16:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
40:1b:a4:aa:56:37:8d:64:7a:8a:7d:2e:6d:9c:60:27:bf:57:84:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: May 27 00:25:01 2025 GMT
Not After : May 26 00:30:01 2026 GMT
Subject: CN=B147B43C853A42B4941C512B3D894F4A270659B7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:13:1a:53:88:56:83:ed:05:0e:fc:b3:84:0b:
48:0a:9c:51:65:27:7f:a8:d2:0b:a6:ee:a4:6f:54:
8d:80:54:9a:0d:c5:c8:84:5c:44:65:57:12:09:48:
7e:6a:3b:ec:99:50:65:fc:5f:96:91:75:3c:77:04:
25:f4:1f:f3:c6:b7:07:5d:34:e8:12:0a:36:00:26:
cf:d6:d2:86:78:b5:47:be:03:52:4b:47:d5:a7:15:
be:ba:c5:38:c3:08:6f:83:d8:87:c8:3d:45:99:d6:
8d:72:89:4b:b4:15:21:ec:5c:dc:34:7b:a8:36:3a:
b2:e9:9a:0b:1f:ba:70:e2:ef:67:7c:7e:b5:fa:ed:
83:2b:c8:cc:51:42:3f:1e:24:6c:3a:59:86:4a:b5:
a0:ba:1e:91:3f:42:b9:eb:23:30:62:f8:90:bb:ef:
2f:29:ff:d9:53:e6:35:8e:0b:c0:4d:e0:ff:48:dc:
31:58:4b:73:18:b0:7b:d2:b1:cf:c8:f1:5d:15:48:
09:57:9f:f1:97:8f:70:bf:5c:c9:d8:72:1a:75:a9:
c8:6b:c9:95:41:fe:bd:41:d6:e4:52:66:d7:b7:ca:
38:2d:c6:35:50:8b:d9:ca:2c:a8:7b:b7:9c:d3:7d:
4b:13:10:3a:b6:13:37:ea:0e:96:aa:5f:8b:84:36:
03:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:47:B4:3C:85:3A:42:B4:94:1C:51:2B:3D:89:4F:4A:27:06:59:B7
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a366239323a3a2f34382d3438203d3e20343031353037.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:6b92::/48
Signature Algorithm: sha256WithRSAEncryption
b4:2b:18:5d:08:86:9d:f6:11:74:9c:b5:a7:66:18:dd:f9:80:
07:c7:7a:35:e9:17:76:d4:de:02:57:b4:07:f2:0b:db:38:25:
12:b2:ad:ab:9e:95:af:22:f0:5b:c4:15:22:20:7d:1b:b6:f7:
99:5a:4b:35:72:48:38:c5:b0:9e:e8:35:b1:c8:5b:a4:9b:bd:
ce:0d:e8:85:c1:0a:c8:3a:08:1a:06:09:b8:c9:2b:8d:3d:3d:
6c:f9:fa:3f:77:3f:06:bb:1f:f4:8e:e4:08:5c:b6:e3:be:53:
7c:b9:4d:b7:39:66:b3:f9:e1:06:33:10:11:57:94:89:fb:46:
ab:4d:cd:27:71:6b:f8:3c:32:2f:45:c5:cf:a9:b8:92:d1:55:
a6:94:2a:3c:cb:93:fc:99:42:88:12:24:31:21:73:d8:cd:0c:
7c:b2:31:b7:f8:f6:cc:1b:ba:13:53:1c:47:16:c6:11:c6:d2:
b3:7f:ad:98:b0:e0:c7:d9:a3:f5:f2:59:61:c5:f0:a9:d2:a3:
60:c1:81:9b:19:ea:d9:9e:95:c0:f1:08:22:78:9b:cd:1a:2e:
34:2a:66:02:b6:22:ca:31:b5:17:b4:e7:8e:50:00:bc:fe:c4:
71:09:38:f7:96:4f:c9:76:b7:d5:f4:b5:51:a3:15:a0:c2:97:
93:52:17:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 23:35:10 2025 by rpki-client