Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363337383a3a2f34382d3438203d3e203136393039.roa
File: 326131343a373538343a363337383a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier: zw9s7axo9g145DtwbtEHaG9vsJPHHC71NTfX0Sm1SZw=
Subject key identifier: 36:A0:F0:D9:B7:5D:CD:C6:2A:DD:EC:E4:78:9E:75:02:5A:03:D1:03
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 59EDCCA6EC8C49BD74C71DC3823FAE11E9E509F0
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363337383a3a2f34382d3438203d3e203136393039.roa
Signing time: Fri 23 May 2025 20:36:02 +0000
ROA not before: Fri 23 May 2025 20:31:02 +0000
ROA not after: Fri 22 May 2026 20:36:02 +0000
asID: 16909
IP address blocks: 2a14:7584:6378::/48 maxlen: 48
Validation: Failed, certificate revoked on Sun 25 May 2025 03:06:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
59:ed:cc:a6:ec:8c:49:bd:74:c7:1d:c3:82:3f:ae:11:e9:e5:09:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: May 23 20:31:02 2025 GMT
Not After : May 22 20:36:02 2026 GMT
Subject: CN=36A0F0D9B75DCDC62ADDECE4789E75025A03D103
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:2d:c0:5a:fd:a1:f7:f0:0f:f3:2b:de:45:68:
65:32:58:0c:3b:14:d7:09:d8:a4:ee:b7:ea:95:21:
dd:fc:ff:70:be:a4:06:65:35:ff:08:f8:70:43:ba:
8d:82:4c:b9:33:b5:32:cd:7d:8b:90:a1:f4:2a:c9:
c2:c0:98:d8:6e:96:48:86:0d:61:55:d4:97:94:cd:
5a:2f:34:9e:ba:35:29:cf:96:1f:6c:c3:06:bb:f6:
be:9a:bd:c5:dd:d2:e2:1a:19:25:39:de:ed:a2:b0:
5c:8d:da:d6:16:05:59:cc:9a:14:5f:aa:7e:b0:33:
74:a1:9e:8f:d0:c0:83:55:f7:42:17:68:a2:9a:32:
9c:c0:c3:9a:b5:28:5b:c2:fb:7d:ea:98:98:50:22:
e1:64:6f:47:7f:01:8a:56:19:6d:4b:3f:de:59:d7:
36:42:d1:b6:da:50:64:2b:b2:32:22:f8:73:86:3e:
e7:af:9c:75:70:c3:ac:3f:80:a4:a1:e2:c4:37:55:
10:9d:76:b5:a0:19:4c:76:12:a1:cd:81:fb:17:a7:
38:39:7e:36:75:88:ae:7b:8c:8c:6c:ac:93:f1:1c:
3a:0a:e7:9b:5a:33:7a:17:90:9e:7e:14:61:ab:18:
39:57:9f:e4:ab:ff:d3:a7:78:96:a4:cd:b5:b3:ea:
1e:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:A0:F0:D9:B7:5D:CD:C6:2A:DD:EC:E4:78:9E:75:02:5A:03:D1:03
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363337383a3a2f34382d3438203d3e203136393039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:6378::/48
Signature Algorithm: sha256WithRSAEncryption
6a:62:58:aa:24:b3:5e:c6:22:11:eb:ca:2e:bc:cd:76:1c:a7:
7a:15:f3:ec:e8:a3:c6:7a:6f:99:f8:d3:60:4c:cc:c0:d2:9a:
56:04:10:57:ea:27:3e:ff:91:28:54:f2:c0:0c:c9:7e:49:21:
81:ad:9d:9c:08:29:54:fb:f1:2d:d7:df:27:74:6e:b1:fa:54:
f8:e8:08:b9:ac:40:ec:fd:3b:d9:93:0d:69:2c:0d:f7:11:cb:
e0:0a:6d:16:c6:bb:00:d6:0f:c5:ab:d8:92:2e:a1:86:a8:e5:
2a:6c:4e:a4:ad:d9:18:f6:42:4a:2c:21:b0:43:88:c2:50:67:
a5:98:fd:af:23:9d:98:46:2b:de:b0:4e:71:0f:c6:d1:c4:81:
e8:95:2e:dc:82:a7:ac:6d:25:34:97:5f:86:54:02:bc:5f:d4:
4d:e4:6b:3b:b3:ec:3c:d8:e5:d5:59:7b:2e:1c:7f:19:5b:f2:
ae:d8:d5:d0:49:04:93:29:f3:a4:1e:d6:f0:13:2d:c6:9d:59:
cd:83:92:1c:fb:d3:cb:b0:cb:d1:ca:bf:f1:e9:30:1c:68:09:
3d:b1:64:86:e0:57:8b:76:b1:17:13:90:9a:ff:f1:a7:ec:35:
18:3f:0b:66:87:57:db:96:35:eb:2c:2e:bb:98:64:9a:67:c3:
c7:29:a0:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 23 23:55:19 2025 by rpki-client