Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363332393a3a2f34382d3438203d3e203136393039.roa
File: 326131343a373538343a363332393a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier: im4kZzivRnZdePDE0VmmijPVXm7iQA7nLop0JCUO3Wg=
Subject key identifier: 9B:8F:C2:F9:24:B4:F5:F4:6B:D2:39:EF:D9:3F:AD:25:AF:77:E3:CC
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 57F1863ED38230788D82D8AEE7575379B111DC92
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363332393a3a2f34382d3438203d3e203136393039.roa
Signing time: Tue 20 May 2025 18:12:02 +0000
ROA not before: Tue 20 May 2025 18:07:02 +0000
ROA not after: Tue 19 May 2026 18:12:02 +0000
asID: 16909
IP address blocks: 2a14:7584:6329::/48 maxlen: 48
Validation: Failed, certificate revoked on Thu 22 May 2025 10:30:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
57:f1:86:3e:d3:82:30:78:8d:82:d8:ae:e7:57:53:79:b1:11:dc:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: May 20 18:07:02 2025 GMT
Not After : May 19 18:12:02 2026 GMT
Subject: CN=9B8FC2F924B4F5F46BD239EFD93FAD25AF77E3CC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:74:31:79:c4:aa:dd:e1:f6:e4:7b:3b:d4:4a:
9f:1b:67:1c:8d:15:14:32:9a:03:c6:8d:9e:ac:e9:
e0:f6:42:f9:e5:dc:84:dc:49:39:01:bf:f3:e7:0c:
6d:be:3f:b0:62:6d:d6:3f:ac:d4:5f:c2:ea:a7:1b:
7a:ad:4e:5e:ec:11:d3:99:cf:1e:9c:7f:c4:ef:20:
d1:27:ac:36:aa:4c:25:e0:a3:18:e2:d0:7a:dc:dd:
43:95:ed:86:c3:0b:f8:36:a6:27:54:69:34:32:98:
97:11:5d:22:91:17:d5:5c:5a:e4:e2:cf:87:20:59:
38:b0:6f:5d:f4:93:ac:fa:35:b7:58:cd:8c:7a:41:
82:b6:4a:bd:eb:c6:5f:7d:0c:67:f3:69:66:7d:15:
53:83:06:95:34:0c:68:f1:3a:43:ad:26:fd:e1:77:
ce:22:a4:94:99:77:37:eb:58:9a:50:52:56:bc:74:
ed:a3:9e:52:c7:5d:5d:5e:b9:9f:00:a1:e9:25:87:
b7:ad:fe:e7:52:35:7e:ee:a2:68:be:f2:ae:ef:5b:
e9:db:0b:d2:69:88:45:e9:98:74:06:de:23:90:96:
30:b2:95:9d:16:6b:cd:ad:a7:3b:68:69:c8:e4:32:
2b:09:29:5a:54:1c:de:2b:bb:1d:8a:24:5f:d1:43:
f0:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:8F:C2:F9:24:B4:F5:F4:6B:D2:39:EF:D9:3F:AD:25:AF:77:E3:CC
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363332393a3a2f34382d3438203d3e203136393039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:6329::/48
Signature Algorithm: sha256WithRSAEncryption
b8:f1:87:ef:32:35:31:2d:de:c4:aa:88:1a:46:a0:f4:16:ce:
37:43:16:78:5a:35:f0:bf:91:53:1a:5b:f9:b5:10:85:a4:5d:
95:ec:fb:fb:cc:83:69:ea:f9:d5:eb:41:9d:7a:56:79:4c:ef:
91:9d:b4:6f:90:e7:f0:cc:70:f4:09:e1:35:8c:ed:ca:e3:c2:
8a:ef:a3:ac:15:44:cc:20:d6:c0:0f:3b:6b:70:91:46:9b:49:
22:fb:3e:48:dd:4c:15:aa:49:6e:a9:83:b6:80:eb:68:9e:a4:
49:5f:3b:04:5f:ce:9d:df:81:98:05:d3:40:09:50:85:3d:0d:
4e:f1:f1:a1:a2:a2:d2:e6:2f:e3:69:0b:c0:18:f2:2b:3c:84:
b1:80:40:1b:b9:ee:b9:eb:6c:85:e0:c5:1b:57:1c:dd:a4:36:
c3:6f:7a:2a:cf:ab:82:d9:b9:64:47:a0:93:7d:b0:73:d6:9c:
b1:d0:7b:05:1c:ad:55:6d:79:d5:30:89:e7:27:f6:4c:d2:fb:
ae:db:32:fa:41:da:d3:aa:30:20:04:ba:56:43:f9:cb:a0:8d:
03:7e:a5:75:bb:9a:c8:47:3e:ab:4a:a1:98:a4:24:e0:c1:97:
b8:f1:60:8c:34:1a:ec:58:de:75:e4:79:01:69:4f:94:e5:39:
39:5a:b4:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 23 23:54:13 2025 by rpki-client