Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363065363a3a2f34382d3438203d3e203136393039.roa
File: 326131343a373538343a363065363a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier: CLIPLov9ARPqvKQuKn8otJv6bX16sMkpjPxJbHZhtro=
Subject key identifier: 9D:0D:B3:93:06:5C:04:30:C2:F4:19:FC:17:DF:F8:29:2D:CC:5C:F1
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 5EE840751EA25604A7734167CDFEED8C1B161F19
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363065363a3a2f34382d3438203d3e203136393039.roa
Signing time: Wed 26 Mar 2025 14:21:43 +0000
ROA not before: Wed 26 Mar 2025 14:16:43 +0000
ROA not after: Wed 25 Mar 2026 14:21:43 +0000
asID: 16909
IP address blocks: 2a14:7584:60e6::/48 maxlen: 48
Validation: Failed, certificate revoked on Fri 11 Apr 2025 18:30:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5e:e8:40:75:1e:a2:56:04:a7:73:41:67:cd:fe:ed:8c:1b:16:1f:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: Mar 26 14:16:43 2025 GMT
Not After : Mar 25 14:21:43 2026 GMT
Subject: CN=9D0DB393065C0430C2F419FC17DFF8292DCC5CF1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:fc:fe:32:7d:5d:d7:bd:3f:c8:f6:bc:8f:48:
4d:a2:80:c7:1d:b0:ce:4b:fa:6f:28:34:f1:70:8b:
99:24:5a:d5:50:30:97:46:47:b7:d9:65:27:51:b8:
6f:b9:b5:0a:4f:24:17:d3:db:53:c0:d2:dd:98:06:
62:fe:be:e3:92:fc:b5:41:13:c3:a7:2b:be:1c:c1:
6e:79:50:3f:ca:3f:42:2b:e7:37:93:6b:63:fb:50:
57:d6:68:6d:fe:75:08:f3:9b:b4:68:cb:ff:d3:41:
09:b1:6d:dc:32:54:db:a1:eb:47:3a:c1:68:56:d7:
ac:8f:6a:f5:bb:eb:e7:0f:9f:c3:7d:d5:6d:41:b4:
e5:3f:e4:d9:d5:ed:c9:d6:27:8c:87:5c:59:08:09:
3f:61:d0:f7:b5:be:8f:bf:8d:4e:77:c8:dc:65:99:
b6:0d:1e:6b:f0:ac:32:f9:dc:ac:bf:0d:50:85:b3:
cf:18:12:54:cd:ae:5b:28:3a:72:06:36:a0:14:e7:
a9:81:fd:cc:57:cc:c1:6a:93:b1:8b:1a:18:f1:7f:
f7:13:05:99:db:02:a2:9c:f5:04:13:6a:52:e8:6c:
f4:10:b5:cf:be:be:ff:cf:80:50:d5:59:94:b9:93:
dc:2e:4c:7a:20:d4:23:60:7e:5c:f4:da:38:05:ad:
ca:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:0D:B3:93:06:5C:04:30:C2:F4:19:FC:17:DF:F8:29:2D:CC:5C:F1
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363065363a3a2f34382d3438203d3e203136393039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:60e6::/48
Signature Algorithm: sha256WithRSAEncryption
8b:ec:af:be:6e:e0:cc:99:7a:84:97:8f:38:82:c7:c3:38:c8:
f4:c1:87:bc:f6:23:ee:62:1b:15:bb:2e:a8:be:c2:1c:b1:50:
9a:e3:d7:10:38:40:b0:b9:c1:29:d2:cd:fa:c8:3a:0a:02:35:
49:ad:63:f5:57:58:a7:ab:00:fc:e0:2a:36:5f:55:44:5c:26:
a4:c5:a7:54:44:74:13:cd:24:1e:ee:36:04:36:68:04:87:14:
f1:4f:25:35:67:90:e0:56:36:ca:48:c5:6d:7c:ad:37:a5:2f:
09:99:4e:63:81:6e:a7:bb:03:88:18:dc:09:f0:36:75:bc:9e:
b2:77:a0:63:36:d9:6d:cd:9e:f5:96:bd:65:56:1d:a1:9f:2e:
41:67:f6:88:0e:9d:d8:a2:7a:18:a5:ec:d5:25:89:f5:1b:e9:
6c:a2:c4:5d:6b:da:39:e1:98:ff:12:d3:9e:73:b9:9f:d5:db:
d6:0e:18:0a:d1:de:04:42:dc:33:66:8f:1d:6d:31:aa:b2:62:
85:69:69:5a:fb:f1:91:07:24:0b:4c:6c:fe:81:42:03:9d:26:
a8:06:a5:9f:74:e2:7a:59:0d:8f:86:a1:87:7e:83:5e:f7:03:
4e:8e:8e:fc:27:e9:0e:60:f8:58:c2:66:e0:1d:ff:f4:48:16:
ba:ec:5e:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 00:42:15 2025 by rpki-client