Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a366334313a3a2f34382d3438203d3e20343031353037.roa
File: 326131343a373538343a366334313a3a2f34382d3438203d3e20343031353037.roa (raw, json)
Hash identifier: MTEbczzoYiAYztiZnBVAHKs9ry4nDaxTGSp49r8YiTg=
Subject key identifier: 6D:39:E5:2E:24:2D:56:4F:98:3F:D0:67:33:B3:69:F3:23:AF:61:1A
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 587AB9CFB4556F1E3FDA387C9E5EDBB1EB68DD9C
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a366334313a3a2f34382d3438203d3e20343031353037.roa
Signing time: Sat 24 May 2025 07:36:02 +0000
ROA not before: Sat 24 May 2025 07:31:02 +0000
ROA not after: Sat 23 May 2026 07:36:02 +0000
asID: 401507
IP address blocks: 2a14:7584:6c41::/48 maxlen: 48
Validation: Failed, certificate revoked on Thu 29 May 2025 21:06:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
58:7a:b9:cf:b4:55:6f:1e:3f:da:38:7c:9e:5e:db:b1:eb:68:dd:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: May 24 07:31:02 2025 GMT
Not After : May 23 07:36:02 2026 GMT
Subject: CN=6D39E52E242D564F983FD06733B369F323AF611A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:88:f9:29:50:52:46:a2:57:88:49:a8:ae:13:
c7:f9:ed:54:3a:09:2a:9f:bc:9f:5a:ce:e5:8f:90:
f7:20:0b:93:ea:71:50:68:8a:3c:5d:8b:02:40:ca:
91:7e:ba:4f:34:1e:da:91:3d:43:9e:2a:70:16:35:
a8:e8:3d:d7:10:7f:67:f4:41:d5:2e:e5:7c:2e:b3:
8c:4c:58:b7:87:8e:2e:02:de:14:51:15:f9:7f:72:
1f:82:69:48:b7:43:8c:a0:f8:d3:38:55:61:77:0f:
8d:ad:42:75:7f:25:56:42:93:45:0b:f9:e2:74:bb:
00:e2:22:a1:ea:e3:a6:84:19:74:bc:83:fd:ee:ed:
08:d6:8e:eb:63:d9:33:01:43:c1:ef:62:7a:cd:c5:
d9:23:75:d1:db:85:08:29:57:49:94:9c:4e:c0:cf:
1f:2c:6e:87:f5:07:38:13:e7:00:de:1f:c9:75:9c:
aa:9e:8c:6c:f4:b5:b5:c9:78:87:97:7f:29:a9:d6:
81:72:14:b0:95:57:ce:b8:ca:63:69:2d:4d:56:a4:
3c:a4:4b:81:ba:43:6f:bc:9a:07:19:b2:17:67:9d:
aa:d7:cb:a4:ba:9c:95:27:98:62:aa:ac:70:68:70:
81:65:3e:1b:1e:a0:d4:07:3c:34:02:2d:e6:2c:f2:
ad:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:39:E5:2E:24:2D:56:4F:98:3F:D0:67:33:B3:69:F3:23:AF:61:1A
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a366334313a3a2f34382d3438203d3e20343031353037.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:6c41::/48
Signature Algorithm: sha256WithRSAEncryption
9d:24:d0:13:49:98:c9:fb:fa:ac:48:0a:67:ac:cf:3d:cc:d3:
18:4c:7b:c6:ad:68:28:b7:59:f3:aa:1f:79:b6:ab:05:99:84:
90:53:f1:ad:af:34:ef:a7:87:b1:90:66:24:8d:de:f3:76:39:
bb:09:fc:ad:70:32:5b:d8:c3:45:6e:32:5e:7a:99:22:6b:6b:
86:8e:67:b1:0a:49:a9:f5:00:bc:80:c1:c1:49:c5:3d:d8:d7:
bd:6a:b8:95:60:37:d6:1b:7c:6d:b3:07:26:10:c1:c3:ba:8e:
5d:c4:18:86:85:1f:d9:28:74:d0:1b:4c:24:5d:75:b6:bc:99:
ef:f6:2c:61:14:d0:cf:fa:80:39:27:de:cd:d6:ee:f0:49:b8:
e6:f9:75:83:f9:ab:9e:b0:45:fb:ec:a9:6a:82:55:09:db:fa:
9c:53:e2:16:f6:79:41:7f:bd:53:a3:ff:fa:2c:4a:97:93:e1:
2e:0b:9d:e7:dd:ec:4c:01:56:6b:e5:ef:20:72:1e:eb:16:ad:
61:51:b5:6e:fa:d1:b4:41:63:bc:29:eb:64:01:07:58:1b:03:
88:6c:69:07:8b:f1:3f:08:63:3e:cb:c0:23:39:d4:b2:b3:61:
c2:41:26:cb:30:f3:1a:34:d6:41:df:54:9b:94:9c:8a:13:b1:
53:f4:19:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 00:34:22 2025 by rpki-client