Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a366335643a3a2f34382d3438203d3e20343031353037.roa
File: 326131343a373538343a366335643a3a2f34382d3438203d3e20343031353037.roa (raw, json)
Hash identifier: 3Tn2yMkhmEXctIAi23Qlel1L0o2rT44AaCax5bRq5uI=
Subject key identifier: CB:A9:48:0C:DB:AD:74:26:31:7F:B9:B9:AC:0C:ED:06:53:F6:16:CB
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 192D27603C7CBC461970341D21F8C0970A4475A0
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a366335643a3a2f34382d3438203d3e20343031353037.roa
Signing time: Fri 23 May 2025 20:50:59 +0000
ROA not before: Fri 23 May 2025 20:45:59 +0000
ROA not after: Fri 22 May 2026 20:50:59 +0000
asID: 401507
IP address blocks: 2a14:7584:6c5d::/48 maxlen: 48
Validation: Failed, certificate revoked on Sat 24 May 2025 16:48:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
19:2d:27:60:3c:7c:bc:46:19:70:34:1d:21:f8:c0:97:0a:44:75:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: May 23 20:45:59 2025 GMT
Not After : May 22 20:50:59 2026 GMT
Subject: CN=CBA9480CDBAD7426317FB9B9AC0CED0653F616CB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:8c:dc:44:be:ee:fe:eb:11:33:98:68:ac:50:
3e:7c:6d:c8:10:2a:86:a0:5e:35:0e:9b:48:b3:41:
b0:af:b7:3c:e0:9e:bf:b7:e0:99:99:18:ae:e7:06:
47:12:d7:d0:e8:bc:66:e2:bf:08:6f:48:9c:2f:cd:
1f:b6:4d:df:6f:db:b2:61:d9:80:ec:66:e1:b0:b4:
66:5e:8f:b9:ec:a6:78:c5:6f:25:a3:5b:1f:09:b8:
8d:6b:e5:8c:41:3b:51:fd:24:de:d4:ab:be:a2:02:
7d:8c:d0:e3:00:45:55:b6:2b:16:eb:63:80:c4:92:
8b:51:aa:09:45:f0:d3:a3:a8:77:8c:dd:e6:cd:07:
86:61:56:54:25:4c:ce:a2:32:71:74:ee:2e:f4:85:
63:3a:d9:53:8d:21:5d:66:6a:7b:5f:1a:18:c6:ad:
e5:7a:11:00:17:fc:87:8d:bf:c9:85:3b:9e:99:16:
07:cd:a0:46:a8:0c:17:ae:b1:ef:3c:00:c6:9f:5f:
b4:40:e3:89:a5:f1:9b:66:a5:09:b4:a6:ec:e7:7a:
b5:f5:34:63:ae:a2:c0:22:c3:c1:2e:c6:3f:25:92:
25:a9:0b:66:0d:8b:f9:9a:b7:e5:77:8a:16:c9:15:
1c:65:51:7a:d2:3e:89:81:24:b6:b7:ed:26:1d:ae:
91:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:A9:48:0C:DB:AD:74:26:31:7F:B9:B9:AC:0C:ED:06:53:F6:16:CB
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a366335643a3a2f34382d3438203d3e20343031353037.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:6c5d::/48
Signature Algorithm: sha256WithRSAEncryption
4f:39:99:d8:f0:0d:fe:e3:db:cb:2d:5c:62:37:dc:a7:94:1c:
c9:0f:fd:c0:b7:c1:86:0d:a1:98:5e:50:52:a1:71:45:df:c6:
25:15:8c:a7:fb:a6:90:6c:f5:16:27:e3:6d:fe:c7:b5:f7:94:
d0:c6:8e:f5:71:a2:36:3d:2d:88:9b:48:5b:da:04:95:02:bd:
f2:52:4e:10:21:f1:76:ca:94:ab:a5:18:7a:da:ae:ba:ee:d1:
0f:e5:18:48:b3:49:b5:59:f1:38:84:4b:c4:21:b2:29:f7:21:
c3:b9:d5:a8:bc:c4:0b:3a:c7:d5:aa:9e:27:ac:79:a2:5b:06:
f8:c4:12:6b:c8:d0:00:d1:11:1f:eb:9c:e6:36:35:3d:74:7d:
e5:16:92:a2:5b:35:ea:f5:0a:72:be:b2:2e:a2:e4:ed:f9:f1:
a2:59:ed:7d:7b:18:6a:d0:b3:77:41:07:81:00:19:82:90:90:
7a:9d:15:a9:dd:01:bf:2b:73:db:bd:87:ac:73:1f:06:05:90:
0c:e8:45:34:a8:48:a3:18:fc:2e:fb:e1:c2:d7:94:ae:1b:73:
99:ca:ee:88:09:80:41:c6:cb:d8:10:60:33:f1:c8:66:d1:97:
ad:54:da:37:ad:9e:0c:8c:6c:95:e8:0b:1f:d0:de:5a:77:79:
68:23:14:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 04:23:18 2025 by rpki-client