Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a366439313a3a2f34382d3438203d3e20343031353037.roa
File: 326131343a373538343a366439313a3a2f34382d3438203d3e20343031353037.roa (raw, json)
Hash identifier: sY0p0JL0UHrZJg4G9AR60Dn1cRut0rHciHrXgncGt7I=
Subject key identifier: 32:90:39:FE:09:86:BF:15:8C:90:10:3C:4C:80:3B:80:B3:B0:9E:D8
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 5ECE789DC524C1BC647BA0CA8317EC587D62B5E4
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a366439313a3a2f34382d3438203d3e20343031353037.roa
Signing time: Fri 30 May 2025 10:18:02 +0000
ROA not before: Fri 30 May 2025 10:13:02 +0000
ROA not after: Fri 29 May 2026 10:18:02 +0000
asID: 401507
IP address blocks: 2a14:7584:6d91::/48 maxlen: 48
Validation: Failed, certificate revoked on Sat 31 May 2025 17:16:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5e:ce:78:9d:c5:24:c1:bc:64:7b:a0:ca:83:17:ec:58:7d:62:b5:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: May 30 10:13:02 2025 GMT
Not After : May 29 10:18:02 2026 GMT
Subject: CN=329039FE0986BF158C90103C4C803B80B3B09ED8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:4a:16:ed:94:db:d9:fe:4b:30:03:8e:b4:c5:
a0:7f:d4:d7:af:69:5d:9a:60:f7:c7:c8:21:25:57:
e8:fe:a9:15:4d:4c:12:d6:2a:2f:bd:41:e0:34:08:
92:87:15:79:b1:48:f1:d3:ca:61:36:51:ab:45:ba:
b6:44:1a:ad:20:e4:2f:28:03:6f:ac:1e:5e:bf:1e:
01:98:a3:45:aa:1f:d3:af:4b:1d:87:d1:52:32:10:
6a:8d:a3:89:f6:8b:dd:59:77:fe:85:2d:63:1b:70:
a8:0b:02:48:a4:9b:0d:ce:67:f4:7c:31:41:91:63:
27:35:d0:3e:e8:14:a7:a1:bd:4a:ee:87:e7:55:33:
73:c7:ce:bd:dd:90:d6:c3:55:9c:6c:1d:d2:19:e4:
05:36:36:5d:53:bf:fc:f6:54:f1:9f:6f:31:ea:f7:
6c:24:56:9b:ee:27:96:00:40:14:1e:39:ae:58:ed:
78:ad:26:56:24:3a:d7:e0:85:5d:88:a7:07:38:2f:
69:bc:c0:0f:d2:ed:50:8a:38:c7:0b:85:6f:f4:3a:
89:a9:9a:7c:67:2c:28:fe:7f:c3:0d:72:ed:8c:4b:
6c:a1:d7:86:0b:53:12:7b:52:51:6e:6b:01:ee:ca:
31:2d:01:f6:4a:38:91:b7:06:5f:11:7b:5f:6e:f0:
cd:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:90:39:FE:09:86:BF:15:8C:90:10:3C:4C:80:3B:80:B3:B0:9E:D8
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a366439313a3a2f34382d3438203d3e20343031353037.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:6d91::/48
Signature Algorithm: sha256WithRSAEncryption
12:71:d3:8d:1f:ef:fb:29:40:b9:c3:14:60:d6:aa:e6:00:c5:
df:43:d0:47:0e:ec:26:23:3e:67:33:77:e2:83:87:e9:1c:3e:
58:a3:14:36:a8:88:8f:fe:8e:35:61:64:22:8b:7c:d6:2c:8c:
57:0b:09:1b:df:7e:b6:48:51:f2:8d:3b:59:00:9c:1b:06:99:
99:8d:9f:7a:85:be:d2:06:c2:25:37:df:9f:18:e5:32:08:f5:
c7:1e:e8:ea:e2:69:61:e9:47:c1:2d:b0:b5:30:0d:03:98:03:
f1:9c:72:04:4f:ae:0b:a6:05:b9:44:05:ae:87:2a:e2:a4:29:
19:11:34:fa:27:bf:fd:b9:cf:d0:eb:5d:80:db:61:f0:c4:e4:
79:55:ad:95:aa:ed:71:a1:2d:05:c0:f6:c9:4a:3f:69:ea:68:
c0:19:7c:16:08:60:3f:75:06:9a:19:7e:73:3d:51:07:b6:61:
14:cd:21:07:bc:8d:86:4e:2c:67:88:7b:72:8d:6b:f6:8b:d8:
cd:6d:c6:01:b6:a4:a1:ac:b9:c3:09:09:47:51:4a:c6:97:c8:
85:0c:b3:70:fe:b2:80:d6:7f:2c:d6:87:d8:4f:de:60:dd:85:
77:5d:7a:f4:2b:17:01:c2:a4:46:73:48:42:a0:11:d5:ff:7b:
d4:43:5e:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 04:43:06 2025 by rpki-client