Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363432383a3a2f34382d3438203d3e203136393039.roa
File: 326131343a373538343a363432383a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier: 2ARYi8ytbMCbQzSLfYmqtgqWucbj1EZzi1GFqiiAxd0=
Subject key identifier: EE:93:7A:29:1D:93:7E:B9:5E:B3:AA:95:6F:F7:0B:A4:55:CF:62:9F
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 4A55535EB2BCA5293F7DF49B4825325F1BD20E8A
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363432383a3a2f34382d3438203d3e203136393039.roa
Signing time: Sun 25 May 2025 02:42:01 +0000
ROA not before: Sun 25 May 2025 02:37:01 +0000
ROA not after: Sun 24 May 2026 02:42:01 +0000
asID: 16909
IP address blocks: 2a14:7584:6428::/48 maxlen: 48
Validation: Failed, certificate revoked on Mon 26 May 2025 14:24:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4a:55:53:5e:b2:bc:a5:29:3f:7d:f4:9b:48:25:32:5f:1b:d2:0e:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: May 25 02:37:01 2025 GMT
Not After : May 24 02:42:01 2026 GMT
Subject: CN=EE937A291D937EB95EB3AA956FF70BA455CF629F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:ba:0f:ec:ee:ce:b9:85:4f:28:03:c6:a0:df:
e7:ee:1b:22:12:f6:21:01:01:49:80:7a:c3:e4:93:
50:1c:87:b6:cd:b3:ad:3b:cb:fb:42:e1:6e:d7:d6:
db:ed:66:cd:2c:3a:2f:bd:89:0b:ac:7f:01:4f:88:
8f:2e:95:27:16:13:3e:d2:c6:68:d7:c3:6a:4a:55:
16:ed:36:03:70:74:fd:63:90:cd:97:ea:a0:70:92:
f3:6c:d1:03:c3:df:41:02:8d:29:85:0c:45:25:30:
6d:f2:70:9a:96:b8:c6:2b:52:31:d0:09:61:88:61:
86:8b:e7:1e:5b:f2:66:a5:8c:76:00:36:89:8c:e7:
58:e5:cc:cf:04:6f:01:bb:5a:54:d5:6d:5e:ec:29:
1d:c7:b1:fc:d1:47:3e:22:f7:8b:04:1c:55:61:f3:
09:a9:10:06:70:5c:a2:d3:0b:8a:89:c7:f8:0a:21:
67:00:48:f3:2c:cb:5a:b8:be:e6:40:36:0f:ac:df:
d9:2b:77:2f:2e:1d:d5:62:13:27:bf:6b:12:f9:1f:
03:3f:f9:5c:91:e2:0b:89:12:61:19:94:80:d4:21:
31:57:21:a9:60:9b:23:00:cb:d5:21:75:9c:56:3b:
d7:74:20:bf:83:1c:8f:8a:bd:88:fc:72:0d:09:32:
d7:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:93:7A:29:1D:93:7E:B9:5E:B3:AA:95:6F:F7:0B:A4:55:CF:62:9F
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363432383a3a2f34382d3438203d3e203136393039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:6428::/48
Signature Algorithm: sha256WithRSAEncryption
a5:46:a4:a1:12:c9:16:17:cb:d7:6c:39:81:6d:51:7e:7c:6d:
5e:7f:de:9b:e0:0b:a4:af:61:2a:38:26:c4:b4:46:d8:aa:2f:
cb:34:21:e0:a8:33:6d:09:f5:4f:f7:11:8c:81:9e:b8:f2:fe:
64:2b:12:40:df:54:b5:77:d5:83:73:76:52:9b:9d:43:b0:1f:
06:c4:72:1b:6b:5b:d5:a4:38:f4:19:f4:cd:2a:21:4c:5f:d0:
7e:cf:78:91:34:94:9a:b6:04:94:43:35:60:1d:26:45:c2:6a:
8c:99:a6:38:53:c1:2a:fc:be:95:d5:1c:e2:37:d1:47:76:fe:
ca:7d:4f:d5:3c:42:80:ed:a2:69:fb:7c:4b:f8:92:3e:e1:8b:
84:0d:97:c5:0b:40:eb:cf:23:ef:f8:f3:7e:14:39:2e:40:66:
b8:b0:a6:28:3a:b3:1f:60:7b:8e:ce:44:52:70:b5:55:db:9e:
4f:9e:3d:4f:96:cf:c5:d3:96:66:be:5a:a3:2e:39:ba:8e:71:
d6:14:88:bf:71:d6:c8:36:52:a4:37:70:27:34:68:91:66:a0:
d8:78:de:45:3c:35:76:59:77:ce:12:dc:6b:ee:e2:1f:e6:4a:
28:77:72:47:d7:59:03:e4:90:a6:0a:08:e5:23:42:7b:0e:d5:
4b:06:a6:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 25 01:02:46 2025 by rpki-client