Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363235633a3a2f34382d3438203d3e203136393039.roa
File: 326131343a373538343a363235633a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier: ndMak91cl6w+DySvi32F4SQv3dXQavSXTy8dERh1IHo=
Subject key identifier: 1F:14:BB:EB:0E:3E:3B:B8:65:A3:F7:7C:EA:DF:79:C2:9F:E2:2D:67
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 534FFE5F1F62F75F0A00B689CEB27E3078545E6C
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363235633a3a2f34382d3438203d3e203136393039.roa
Signing time: Mon 12 May 2025 16:18:10 +0000
ROA not before: Mon 12 May 2025 16:13:10 +0000
ROA not after: Mon 11 May 2026 16:18:10 +0000
asID: 16909
IP address blocks: 2a14:7584:625c::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 14 May 2025 13:59:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
53:4f:fe:5f:1f:62:f7:5f:0a:00:b6:89:ce:b2:7e:30:78:54:5e:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: May 12 16:13:10 2025 GMT
Not After : May 11 16:18:10 2026 GMT
Subject: CN=1F14BBEB0E3E3BB865A3F77CEADF79C29FE22D67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:b8:16:2c:e3:90:b6:93:6c:e1:e4:52:6a:71:
fb:08:ff:74:49:7d:c0:92:89:71:6f:08:4f:71:79:
18:b6:2d:ed:63:e2:1f:12:3c:ad:4a:1d:c7:f1:7b:
8f:2f:41:23:9b:4c:73:f6:1b:fe:c1:6a:3c:01:cd:
4f:08:94:07:2b:6b:75:75:fa:51:e8:42:4d:15:7f:
b3:d9:ab:93:79:9d:fa:b6:e9:0e:aa:fe:13:49:a1:
17:b7:7a:46:5b:5a:df:93:2b:57:62:3c:72:e2:49:
75:16:85:ec:d8:7d:4c:ed:39:e9:d8:9b:d0:9b:b4:
35:3d:88:0c:a7:be:57:7a:bb:b2:0b:8d:66:3b:a0:
a3:6e:b5:df:78:83:74:b4:ea:76:98:e1:41:ad:96:
6d:b3:d8:7d:38:fc:1f:29:2c:a7:7d:ee:09:dc:5b:
8e:0e:96:4b:63:fa:a3:0d:4b:4d:bd:71:53:3c:50:
7e:f3:e0:cc:53:1e:1d:f7:55:ec:0c:f7:4a:42:c8:
25:d2:f9:77:0a:fe:0c:f7:2d:50:2a:22:57:1d:da:
e4:c9:b9:6a:22:a2:e8:12:39:88:1a:1b:09:c6:1a:
83:af:74:17:03:5c:22:31:70:74:05:bd:07:c9:a9:
a4:a8:4b:94:36:b6:04:51:b9:5c:a9:6a:68:0b:d3:
bd:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:14:BB:EB:0E:3E:3B:B8:65:A3:F7:7C:EA:DF:79:C2:9F:E2:2D:67
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363235633a3a2f34382d3438203d3e203136393039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:625c::/48
Signature Algorithm: sha256WithRSAEncryption
5b:23:0e:0f:41:04:32:82:93:05:fa:ac:62:f5:87:ee:16:e4:
67:03:3c:14:09:87:64:b8:08:69:10:29:56:ba:f6:d4:2f:95:
65:f7:cb:50:08:ea:9e:55:f8:6f:6f:08:c3:ea:62:1e:ff:f2:
c0:03:32:3d:ca:ce:64:aa:61:bc:70:cd:5d:3a:b9:0b:3d:56:
05:ca:32:fa:f7:9a:ce:91:5f:d0:2f:42:a6:af:67:64:8a:b7:
f7:73:54:18:5b:97:3f:8c:a0:9a:f8:ea:ea:7d:70:f3:2e:a6:
51:3f:85:76:d0:a9:63:be:36:36:a0:2f:bb:c0:58:27:91:0e:
ac:6f:23:ea:38:b8:3e:50:c6:91:88:d1:dd:b6:3d:6f:f1:4f:
dd:9a:76:9f:06:cf:ea:aa:ed:1f:41:1b:51:22:af:18:24:58:
1f:b2:5c:80:12:c1:61:ee:36:57:bc:7d:85:f0:29:5d:87:8c:
4c:12:f7:9d:bd:6b:1b:0a:c5:5d:2a:48:d2:50:89:8e:64:f6:
e1:b2:46:1d:fb:20:84:12:ef:3b:0d:db:e8:cd:4e:c7:c8:1c:
82:d2:c4:64:25:e9:8d:55:8c:be:f2:fa:f3:c1:f6:49:17:61:
c0:85:62:b2:6e:1a:a2:ca:8b:d8:a9:7e:bc:39:04:35:40:53:
16:49:25:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 25 00:58:28 2025 by rpki-client