Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a366635313a3a2f34382d3438203d3e20343031353037.roa
File: 326131343a373538343a366635313a3a2f34382d3438203d3e20343031353037.roa (raw, json)
Hash identifier: vH05unhDZZaBexTsUhMjOZ8b40Wvbif21zCjOeeIxEw=
Subject key identifier: 8E:12:80:A8:4E:76:D3:48:34:B6:9D:85:CD:70:FD:B5:03:F0:80:D7
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 2EBBDBC2141A35FC469EB45ECE26439C3B255CD1
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a366635313a3a2f34382d3438203d3e20343031353037.roa
Signing time: Fri 23 May 2025 20:50:59 +0000
ROA not before: Fri 23 May 2025 20:45:59 +0000
ROA not after: Fri 22 May 2026 20:50:59 +0000
asID: 401507
IP address blocks: 2a14:7584:6f51::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 28 May 2025 00:36:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2e:bb:db:c2:14:1a:35:fc:46:9e:b4:5e:ce:26:43:9c:3b:25:5c:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: May 23 20:45:59 2025 GMT
Not After : May 22 20:50:59 2026 GMT
Subject: CN=8E1280A84E76D34834B69D85CD70FDB503F080D7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:96:5b:42:9d:04:a2:ab:75:79:7f:60:89:2b:
7a:f7:e4:85:80:e1:37:28:10:1d:11:e5:33:ad:19:
c4:49:c6:e7:8a:a7:aa:00:1e:ef:42:c6:47:96:bd:
72:97:1b:28:27:1c:e3:04:79:66:5b:b3:1e:4d:f5:
9d:d7:ca:12:3f:29:79:92:8b:73:74:22:02:e7:2f:
b8:30:16:5c:83:ee:77:22:8c:ab:c6:6d:b1:1c:f9:
fd:85:f2:1d:f3:24:3f:3d:1d:3d:5a:90:43:e9:ab:
25:89:1a:32:fc:dc:e2:bb:46:ff:34:98:97:e9:da:
52:e2:d3:43:43:c0:77:0a:8e:f7:8c:54:c0:fb:07:
1d:7c:55:8e:72:dc:ac:11:93:6b:e2:30:98:20:6a:
65:4a:79:fc:75:2d:4f:86:73:82:04:93:2e:a6:a0:
bb:12:5d:43:d6:52:c7:ca:09:c5:fe:22:fe:79:17:
04:41:67:68:5d:03:ca:57:59:74:b4:84:2d:9a:a8:
64:d1:42:51:7e:71:5c:ad:67:df:c9:c9:7d:d3:6c:
b5:f6:f0:15:4d:5a:6e:a9:35:de:97:2c:46:29:5f:
70:07:dd:61:bc:08:71:28:87:b1:f7:c4:e9:da:57:
9b:f9:29:e3:8c:10:1d:a8:a5:20:1d:c8:84:00:18:
cc:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:12:80:A8:4E:76:D3:48:34:B6:9D:85:CD:70:FD:B5:03:F0:80:D7
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a366635313a3a2f34382d3438203d3e20343031353037.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:6f51::/48
Signature Algorithm: sha256WithRSAEncryption
8b:d2:57:19:54:3b:14:35:68:63:61:3f:9b:6b:b6:d2:52:03:
65:40:2c:82:d1:f0:b5:48:46:9d:cd:9f:34:46:1a:d0:32:66:
07:7c:af:e7:43:73:b1:c7:58:04:40:71:30:ec:1b:5e:2f:49:
0a:3c:41:19:31:21:cd:5e:4b:54:93:d0:a1:17:73:b0:71:c8:
6f:69:26:85:3c:bd:6c:b5:0d:01:52:77:90:b8:0f:63:32:fb:
36:fe:1e:3b:20:5e:fb:36:d8:9a:d2:aa:38:53:41:59:12:97:
4e:b2:f0:cf:4a:59:96:cf:71:99:d5:42:85:ce:83:7c:ee:47:
12:21:6f:38:0e:38:79:da:07:b3:d6:04:73:c8:15:99:5c:d3:
13:79:f4:07:88:d3:9d:a9:0a:c5:70:0b:61:25:e3:5d:9a:5d:
2c:12:b2:36:73:6f:22:38:35:c9:87:6c:60:be:5a:86:65:e1:
b6:44:9f:a5:a5:53:39:39:25:5a:7d:d1:4e:cb:41:10:50:8d:
a5:5b:0c:a1:a8:4e:48:93:50:64:de:d2:69:eb:ca:da:3b:a7:
2a:44:35:36:60:fc:d5:11:0d:61:a9:2f:31:59:41:e8:1c:3f:
cf:20:21:14:cd:90:9c:b9:fc:8e:16:5f:3f:6f:59:d7:a2:44:
19:13:7b:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 14:36:08 2025 by rpki-client