Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a366461323a3a2f34382d3438203d3e20343031353037.roa
File: 326131343a373538343a366461323a3a2f34382d3438203d3e20343031353037.roa (raw, json)
Hash identifier: H8Zy9W84g7YQ1KM0Xrbnjrs1NnafQcq0NdRsDdxXPKI=
Subject key identifier: DA:53:64:25:8C:E7:3E:2F:9E:E7:87:04:7C:7D:B5:3D:FB:35:09:37
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 4D480FFABBC252D53C8733577B07A29B421D4FCC
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a366461323a3a2f34382d3438203d3e20343031353037.roa
Signing time: Fri 23 May 2025 20:50:58 +0000
ROA not before: Fri 23 May 2025 20:45:58 +0000
ROA not after: Fri 22 May 2026 20:50:58 +0000
asID: 401507
IP address blocks: 2a14:7584:6da2::/48 maxlen: 48
Validation: Failed, certificate revoked on Mon 26 May 2025 07:30:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4d:48:0f:fa:bb:c2:52:d5:3c:87:33:57:7b:07:a2:9b:42:1d:4f:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: May 23 20:45:58 2025 GMT
Not After : May 22 20:50:58 2026 GMT
Subject: CN=DA5364258CE73E2F9EE787047C7DB53DFB350937
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:b9:2e:08:f4:30:68:9e:3b:79:f6:04:ab:f3:
4b:d1:84:4d:ee:74:48:02:65:b8:c4:9c:9d:da:b6:
1c:d7:88:af:2c:b9:0f:84:2d:3c:9e:7a:10:d4:93:
8e:36:4d:ef:ef:41:d8:4a:eb:0b:27:31:79:63:89:
0b:2c:79:1e:49:9b:4e:ae:12:9e:d7:b2:0d:0f:46:
35:92:a5:73:16:ef:85:c5:5d:be:d1:77:da:30:0c:
69:6b:7f:72:bc:fd:07:0b:3d:f6:2b:ba:7f:b0:1c:
c7:5b:90:ca:14:73:a6:47:4d:2c:7a:5a:ea:7f:1c:
3e:f8:d6:e9:ed:1b:a9:74:48:60:2d:30:73:11:7d:
a3:75:ec:89:6a:8f:1f:f7:73:2b:b8:df:9f:1a:a6:
b6:27:29:24:05:a7:c0:6a:df:74:16:8c:03:64:eb:
d5:ed:d3:30:5f:61:a6:77:43:38:a4:4e:75:85:25:
ba:01:e2:c5:37:b6:bc:c3:66:c1:0a:c8:33:4f:31:
86:c9:63:cc:cd:23:58:23:59:bd:eb:f9:3e:5b:f4:
74:0d:6d:ed:9e:06:27:00:6a:9f:08:ca:8d:d1:af:
07:22:ec:ee:16:58:9e:e2:47:85:8c:94:3a:b3:e8:
bf:0c:9d:c6:e9:0b:ce:e5:9f:90:16:7f:8d:68:27:
6a:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:53:64:25:8C:E7:3E:2F:9E:E7:87:04:7C:7D:B5:3D:FB:35:09:37
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a366461323a3a2f34382d3438203d3e20343031353037.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:6da2::/48
Signature Algorithm: sha256WithRSAEncryption
07:48:3f:de:53:cc:e8:67:b5:75:a0:1e:85:12:ba:04:cf:5f:
17:26:c9:77:e9:92:48:45:0c:ca:f4:61:4c:21:10:12:8e:b6:
e2:dc:a1:c0:08:6f:02:89:42:92:2e:d1:ec:42:98:25:6e:a5:
28:bf:51:64:06:1e:4a:cb:db:11:99:bd:7c:e6:db:fc:ec:28:
40:f4:1e:4a:48:44:8e:81:d4:35:ce:e5:c7:e3:b6:00:4e:f4:
5f:60:17:63:42:8b:ce:93:c5:f5:82:d1:4d:55:ef:fa:7e:48:
7d:d4:79:61:a7:ed:72:c4:2a:62:20:04:7a:9b:55:08:c6:11:
0f:89:06:eb:9b:b1:43:9a:00:b7:b5:6d:ab:13:f9:c3:98:a3:
de:e9:20:a3:4b:1b:ee:b9:ea:d8:04:e8:a8:8c:b6:f8:3d:c6:
13:79:08:fc:96:34:dd:b6:94:c8:19:a5:c5:ca:de:73:39:fe:
3b:8c:68:6d:03:fa:34:84:0a:84:4c:16:70:f1:bc:70:2b:7f:
3b:7f:52:d9:b6:41:c8:5e:00:d6:c5:0d:77:ba:ff:3c:b9:20:
37:05:07:bc:d0:bf:a8:c1:15:97:98:b1:2c:51:88:05:67:4e:
c9:6b:14:0f:0c:7a:3a:5c:66:8f:49:b9:20:f8:f0:e5:da:20:
27:8f:47:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 07:15:56 2025 by rpki-client