Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363264343a3a2f34382d3438203d3e203136393039.roa
File: 326131343a373538343a363264343a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier: MRugF7PQ0ZGaf9UTE1YwWG/doMJFo63HCDowFce2kcg=
Subject key identifier: 3F:5A:EC:9A:87:DB:DD:60:FF:F1:3C:FD:24:1D:36:A2:2B:C2:79:B9
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 56EAA48307104EC10633157FAB35172639D7E6C8
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363264343a3a2f34382d3438203d3e203136393039.roa
Signing time: Sun 18 May 2025 00:06:01 +0000
ROA not before: Sun 18 May 2025 00:01:01 +0000
ROA not after: Sun 17 May 2026 00:06:01 +0000
asID: 16909
IP address blocks: 2a14:7584:62d4::/48 maxlen: 48
Validation: Failed, certificate revoked on Tue 20 May 2025 01:24:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
56:ea:a4:83:07:10:4e:c1:06:33:15:7f:ab:35:17:26:39:d7:e6:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: May 18 00:01:01 2025 GMT
Not After : May 17 00:06:01 2026 GMT
Subject: CN=3F5AEC9A87DBDD60FFF13CFD241D36A22BC279B9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:92:6a:66:a0:f6:7a:55:d2:0b:2e:3d:0f:7e:
f3:21:ec:95:92:c9:48:1c:d8:a9:d2:6a:da:3a:66:
78:ff:b1:c3:69:5a:f2:83:63:9c:58:93:f4:6a:7d:
ff:24:1f:a4:ec:c9:c7:e9:fa:df:82:89:ab:bf:1a:
b2:f0:2f:72:5d:a8:19:cb:46:8b:7a:ef:2b:0c:f7:
7d:45:8a:5f:6d:1c:b5:63:5e:75:23:5f:1e:73:6b:
05:9d:7e:b2:fe:ca:ad:9d:f8:c2:1e:b0:0a:07:48:
09:97:0c:b0:f4:be:68:98:cb:fe:42:1d:2d:c2:ee:
db:4d:35:8f:f5:c2:66:98:cc:73:b4:81:c2:c1:e4:
21:d8:31:31:2f:37:11:2b:0b:c7:e3:32:f3:78:ef:
99:6f:82:e8:d2:a3:0f:69:31:e1:4b:2e:6d:b1:05:
a9:99:16:dd:01:a1:9f:73:ca:c3:75:f9:cc:81:12:
50:56:69:41:94:cf:7f:23:a1:0b:01:e5:a4:81:b3:
8e:aa:ff:66:88:4a:60:8d:de:26:21:5a:10:cb:07:
b3:4d:71:73:e1:32:3f:e6:4f:3b:7f:fc:9e:91:6e:
8e:38:34:8f:4a:d2:32:5a:9b:25:0d:0d:07:3d:9a:
ef:e6:f2:7f:36:f2:a6:42:e9:eb:94:e7:f4:9e:0f:
9c:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:5A:EC:9A:87:DB:DD:60:FF:F1:3C:FD:24:1D:36:A2:2B:C2:79:B9
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363264343a3a2f34382d3438203d3e203136393039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:62d4::/48
Signature Algorithm: sha256WithRSAEncryption
51:7a:26:44:2d:14:bc:68:2e:0c:0b:44:e9:2f:d6:48:06:85:
bd:94:bb:0a:0d:80:c6:ab:f8:fb:0f:39:09:61:7c:11:09:f5:
c1:2f:74:65:93:46:d8:b7:6c:47:79:d5:e7:87:60:53:eb:dc:
a5:f3:f2:fb:af:dc:ea:58:ca:b0:e8:f0:d5:39:c9:ec:39:6d:
34:49:92:2f:11:49:7e:24:47:8c:b0:f1:62:31:ae:80:3f:26:
8d:5a:e5:14:91:ec:45:71:c0:de:bf:b1:c5:dd:c9:fc:63:48:
9f:7b:01:30:6e:37:8b:9e:34:3d:71:9a:f6:12:fa:a9:d6:25:
58:d4:95:b5:29:fe:69:ed:9a:4c:50:1e:18:1b:4f:d6:c2:16:
ee:52:03:fd:0e:0c:5b:94:8f:d6:b7:df:64:0c:01:89:6b:86:
a4:e8:4a:5b:1e:7f:0a:9e:2a:c0:3b:77:8d:43:0c:ce:60:4a:
2f:41:3b:58:e7:45:5c:81:f7:70:5d:d5:86:0f:71:7d:c7:d1:
80:96:af:9c:6d:a7:a6:aa:8e:da:b3:15:1d:7b:77:e9:a4:e6:
60:04:cf:16:0d:69:4b:0b:68:75:bb:4a:de:84:c8:4b:d0:85:
ac:0f:f0:e3:af:5a:21:94:4f:d4:06:72:0e:26:4f:91:18:8b:
50:be:e6:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 23 23:53:18 2025 by rpki-client