Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a366433323a3a2f34382d3438203d3e20343031353037.roa
File: 326131343a373538343a366433323a3a2f34382d3438203d3e20343031353037.roa (raw, json)
Hash identifier: X0Ce+EOQhqPuQc1xXiw3DE+U9W0QuHfqMa67TFFrIrQ=
Subject key identifier: AF:24:44:D1:F7:C6:0A:04:74:70:90:A4:B9:3F:5E:3B:8D:A7:28:18
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 30FD8526C6CADD4098460033530E0AD3F96DDFEE
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a366433323a3a2f34382d3438203d3e20343031353037.roa
Signing time: Tue 27 May 2025 09:36:02 +0000
ROA not before: Tue 27 May 2025 09:31:02 +0000
ROA not after: Tue 26 May 2026 09:36:02 +0000
asID: 401507
IP address blocks: 2a14:7584:6d32::/48 maxlen: 48
Validation: Failed, certificate revoked on Sat 31 May 2025 17:16:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
30:fd:85:26:c6:ca:dd:40:98:46:00:33:53:0e:0a:d3:f9:6d:df:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: May 27 09:31:02 2025 GMT
Not After : May 26 09:36:02 2026 GMT
Subject: CN=AF2444D1F7C60A04747090A4B93F5E3B8DA72818
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:0e:93:a2:ba:8c:28:df:c8:be:1e:ae:e5:24:
54:d4:5b:d3:c8:c8:be:00:9a:2c:f6:df:e4:59:5c:
80:f3:87:6a:71:59:c0:1d:69:06:dd:80:15:ed:73:
54:bd:60:a6:94:5a:55:9b:04:3f:c1:60:c4:74:a7:
4e:d2:9c:a5:0c:d9:5f:93:d3:76:8d:b4:ab:15:12:
4b:db:af:22:6a:f0:41:d7:e9:48:0d:38:2a:e8:e5:
ba:bf:e2:e9:d0:96:c0:76:50:1c:2e:e8:2d:33:14:
9d:c7:cd:4b:af:88:51:cd:31:05:cb:31:b0:6d:c8:
db:2e:54:11:83:6d:10:83:a4:9d:02:54:53:1d:f4:
8f:b3:b3:ef:0b:f8:5d:4c:10:2a:cb:35:ed:c0:28:
73:78:50:a4:c1:07:c0:64:b9:01:7d:72:d4:9b:54:
78:95:b7:41:d9:2e:02:5c:e8:97:c0:f5:8a:9e:70:
e5:02:c8:c2:b3:c7:61:43:99:05:8e:a2:19:49:dd:
34:be:32:84:cb:ad:b6:4f:fc:d8:94:55:16:5c:d5:
cd:87:13:ad:2f:04:b8:56:ac:e3:da:dc:e2:af:7f:
4c:62:86:2c:96:11:87:74:b6:7d:99:0f:3b:d2:59:
fe:5b:26:bf:84:4c:17:f8:85:ae:3d:2f:fc:ad:7a:
4a:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:24:44:D1:F7:C6:0A:04:74:70:90:A4:B9:3F:5E:3B:8D:A7:28:18
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a366433323a3a2f34382d3438203d3e20343031353037.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:6d32::/48
Signature Algorithm: sha256WithRSAEncryption
44:52:4d:d5:f0:c3:5d:e6:f7:49:ff:a5:6e:2b:ce:90:85:5f:
69:39:9d:7c:5b:8c:d0:ba:93:00:cb:0e:c9:50:06:60:7f:58:
85:d3:08:ae:ea:a3:10:4f:20:dd:ec:44:85:d4:f2:57:da:07:
75:ab:61:8b:40:8d:3e:a3:8b:84:90:b1:7c:0a:9d:c5:ea:ce:
26:1a:b2:be:67:55:3f:c5:1a:a0:52:fd:1b:9b:00:af:f2:f1:
61:2b:02:0f:ac:89:cd:c3:05:f6:3a:b7:e9:d3:73:a4:63:bf:
b7:e0:97:df:ca:44:46:11:44:0c:17:84:2a:35:8a:37:50:d0:
5c:42:99:1e:4c:58:dc:2b:95:d0:d7:e1:48:7e:ea:eb:6f:98:
16:2e:d3:76:78:43:4e:ba:99:ab:18:05:5d:98:e7:97:bc:a7:
68:67:b8:77:92:cd:2c:a2:4b:62:08:0e:f0:b2:3e:7c:df:f0:
3f:b5:f4:17:0e:4c:99:b1:f0:a4:b5:95:d6:78:4e:ed:e6:b5:
2c:5c:40:7c:c6:37:5b:34:8a:69:94:a6:6c:84:9c:da:50:d5:
1e:ba:72:e4:75:ad:af:ae:a2:c9:47:72:36:dd:66:a6:59:1a:
cd:bd:31:94:a3:9f:f8:2b:97:9d:36:ba:cf:81:2b:d0:8c:52:
40:ff:69:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 05:00:42 2025 by rpki-client