Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363331373a3a2f34382d3438203d3e203136393039.roa
File: 326131343a373538343a363331373a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier: YpBrbyRO2tUoB8V2kOpsb0WqDUDQme/y/kgl/hZ1/bI=
Subject key identifier: BD:62:65:A3:25:DD:62:86:20:15:48:51:BE:11:29:CC:64:DC:F3:DB
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 4A348B7F60F91E4AFE16A0D7307A5A93442C1712
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363331373a3a2f34382d3438203d3e203136393039.roa
Signing time: Tue 20 May 2025 02:00:02 +0000
ROA not before: Tue 20 May 2025 01:55:02 +0000
ROA not after: Tue 19 May 2026 02:00:02 +0000
asID: 16909
IP address blocks: 2a14:7584:6317::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 21 May 2025 09:24:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4a:34:8b:7f:60:f9:1e:4a:fe:16:a0:d7:30:7a:5a:93:44:2c:17:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: May 20 01:55:02 2025 GMT
Not After : May 19 02:00:02 2026 GMT
Subject: CN=BD6265A325DD628620154851BE1129CC64DCF3DB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:fe:d3:e2:e8:ef:36:14:03:4f:46:78:46:2a:
54:40:9b:a9:1e:e8:50:67:dd:54:e7:23:57:2f:89:
34:9c:2d:85:9b:d3:11:ea:74:e7:1f:2d:11:10:e0:
e5:0b:81:b2:35:a1:b9:0c:a7:01:d0:9f:9d:46:4e:
48:d2:8d:db:37:8d:9d:76:55:f1:fa:99:bb:d6:8c:
92:76:cc:3a:ff:87:09:3a:de:7e:e4:93:0c:e6:fd:
01:ca:6d:7d:8d:8e:3c:ce:f3:60:6d:92:10:71:47:
04:f7:b7:23:82:cc:59:96:43:17:44:80:20:75:1b:
a0:c2:69:e3:68:a9:a5:52:42:4a:ef:21:20:ef:c5:
b1:b6:f8:75:65:c0:ac:b5:9f:e1:0e:7b:7b:19:0b:
45:2d:01:de:a5:90:6e:7e:94:15:b6:30:ed:46:3d:
54:de:a9:16:44:33:a0:21:9c:96:f4:53:04:c7:e5:
49:f4:50:44:0a:d7:6f:43:88:0b:3d:78:73:db:c0:
b9:29:a0:ea:fa:c2:e8:5d:09:f5:11:2b:cf:27:fa:
a1:ff:00:5d:61:6c:84:e4:bf:c9:94:15:f8:3c:59:
8b:1e:e2:86:55:f3:a2:b0:03:b0:b1:66:77:8c:81:
8d:d6:af:5c:1c:18:34:9c:d0:06:a4:d9:b6:74:c9:
02:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:62:65:A3:25:DD:62:86:20:15:48:51:BE:11:29:CC:64:DC:F3:DB
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363331373a3a2f34382d3438203d3e203136393039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:6317::/48
Signature Algorithm: sha256WithRSAEncryption
1e:3c:90:71:be:9c:d9:86:c2:0e:85:96:ae:10:f7:9c:62:f5:
f0:5d:1f:ca:ca:78:75:60:e4:84:0e:f4:59:0a:48:44:f2:d0:
db:00:6b:02:a7:14:65:d5:a5:e3:56:0a:41:0d:80:ea:6d:7f:
f2:b6:78:c0:da:3c:7a:f0:8c:de:52:e9:e2:41:ca:07:1e:ef:
43:a2:9b:16:c4:5b:84:99:92:8e:c4:59:57:86:32:0c:0c:03:
64:e6:21:39:30:d3:ba:da:2f:18:4e:66:c1:e4:09:8c:f3:80:
58:4c:8c:e0:f1:52:0c:a2:ee:01:9f:5f:e6:f4:ff:49:c1:c8:
fc:50:f2:3a:95:bb:63:63:a6:24:fa:83:f3:30:d0:7c:59:08:
9e:b1:78:88:79:2c:d4:df:6a:09:34:7c:7c:7b:0c:15:7b:39:
55:49:89:2e:11:11:26:c9:c2:41:a9:79:6b:35:99:7a:2a:c2:
8a:64:d1:c6:1d:c6:c4:83:7e:27:41:8c:ea:ad:4d:6e:0b:ae:
64:eb:e9:5f:b3:e5:7c:60:1d:89:63:6a:dc:94:ae:e7:21:3b:
a0:fb:25:07:40:1e:8e:ae:d5:7f:17:49:7e:4a:0a:67:f1:fb:
e1:d8:eb:ee:62:ab:d6:4b:5e:1f:6b:e9:76:28:96:9f:26:1a:
46:35:62:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 23 23:52:57 2025 by rpki-client