Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a366365643a3a2f34382d3438203d3e20343031353037.roa
File: 326131343a373538343a366365643a3a2f34382d3438203d3e20343031353037.roa (raw, json)
Hash identifier: Q1uC7vrjO7M/2OM6+GZXf8me9tRlvIN6P+q4Y9b2+10=
Subject key identifier: 83:ED:D4:BF:99:F8:FC:B7:C3:31:8F:CA:EC:E1:AB:89:D6:25:37:E0
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 0B9FE964D0E26E60B0699FE9016E44DAFAEB8520
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a366365643a3a2f34382d3438203d3e20343031353037.roa
Signing time: Sat 31 May 2025 00:54:02 +0000
ROA not before: Sat 31 May 2025 00:49:02 +0000
ROA not after: Sat 30 May 2026 00:54:02 +0000
asID: 401507
IP address blocks: 2a14:7584:6ced::/48 maxlen: 48
Validation: Failed, certificate revoked on Sat 31 May 2025 17:16:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0b:9f:e9:64:d0:e2:6e:60:b0:69:9f:e9:01:6e:44:da:fa:eb:85:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: May 31 00:49:02 2025 GMT
Not After : May 30 00:54:02 2026 GMT
Subject: CN=83EDD4BF99F8FCB7C3318FCAECE1AB89D62537E0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:3d:96:e2:c6:2b:b8:d2:fb:7b:1b:d9:5c:70:
56:10:af:05:6c:ce:56:1c:7b:d1:4f:27:4c:04:eb:
cb:9b:d8:8b:84:a8:61:0e:b5:6a:91:1a:45:c5:2f:
a9:cc:b0:58:5e:3b:08:3a:86:c3:10:06:86:04:cd:
e7:f3:1c:85:04:bf:43:0b:96:45:24:a7:eb:02:2e:
e8:cd:99:80:e3:2f:bb:6b:35:1a:87:0c:9b:be:bf:
d8:15:1a:ec:ef:b5:47:00:6d:75:09:32:81:5d:9c:
2d:33:1b:45:71:2c:75:b4:56:75:2b:88:3c:51:a4:
64:c4:82:35:35:07:89:5b:a0:ed:f3:5a:3f:21:40:
b6:5e:0a:f1:3d:24:bc:7a:cb:25:33:f0:6c:d8:0b:
5f:79:7c:89:b9:e6:fe:8b:74:72:a8:f5:87:9f:f5:
ec:6b:97:c6:97:7c:36:5b:1c:f2:88:c4:36:be:7f:
66:76:39:42:80:a4:ac:e2:91:04:44:31:f8:fd:34:
f5:87:b8:6b:32:fc:5b:f0:34:27:19:f3:5d:52:af:
d1:79:8c:17:91:8d:40:73:bb:e1:e3:91:a0:2a:fe:
cc:41:0e:10:94:c1:dd:30:07:fb:78:72:79:a9:fd:
f6:62:1b:a8:28:83:a3:c6:28:0c:5f:74:a0:37:82:
e4:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:ED:D4:BF:99:F8:FC:B7:C3:31:8F:CA:EC:E1:AB:89:D6:25:37:E0
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a366365643a3a2f34382d3438203d3e20343031353037.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:6ced::/48
Signature Algorithm: sha256WithRSAEncryption
71:81:ae:f9:45:b6:10:6e:17:38:47:cf:73:13:a7:a5:35:7a:
2e:ed:c0:80:a5:7a:be:98:43:89:0b:dc:1d:04:f7:44:e3:9e:
9f:09:ab:db:d0:9b:b3:3f:e5:a0:0f:86:06:ff:c3:d8:bf:95:
36:aa:19:e9:60:d0:51:12:57:c5:20:e7:1f:a4:3f:97:51:1e:
41:cc:30:e2:c1:1e:e5:de:08:b9:cd:da:46:c5:4f:b4:4c:9f:
14:6f:b1:69:bc:bd:9e:3d:87:80:65:25:01:ae:67:41:bc:1a:
e1:0e:c7:8d:1c:8c:7f:b6:d0:a4:37:70:e8:8b:c2:a9:04:fe:
0e:99:c5:bd:e7:82:7d:56:e1:15:2f:2c:7b:13:8e:00:ee:5f:
da:f7:1e:5e:5f:8c:05:1e:a8:00:87:4d:80:b8:62:a9:58:ba:
4e:99:33:9c:e8:3a:d9:7e:91:86:e7:51:f3:5b:3e:56:d6:62:
85:ad:84:f3:d4:0d:ff:ba:6d:88:97:7e:1d:3f:eb:d5:37:8a:
bb:91:d8:b9:8d:aa:6d:6a:03:58:38:47:11:0d:7f:35:75:f1:
a4:5d:72:2b:49:79:bd:68:97:1d:7e:85:e0:0d:c2:65:40:32:
fb:01:03:72:e4:7f:34:f4:c8:21:4c:93:20:ea:ae:a4:da:49:
3e:1b:23:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 01:26:32 2025 by rpki-client