Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363230653a3a2f34382d3438203d3e203136393039.roa
File: 326131343a373538343a363230653a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier: pJR7iJb7p5u2iIhnWasHtVxReqYUcnXxanaewk44GEY=
Subject key identifier: 38:68:FD:C5:1E:64:9B:48:FA:88:1E:C2:4B:5D:AC:48:1E:76:CB:B1
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 50AEDF0DAC434A4C04C885A41B1BEAF5612280F1
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363230653a3a2f34382d3438203d3e203136393039.roa
Signing time: Mon 12 May 2025 16:18:03 +0000
ROA not before: Mon 12 May 2025 16:13:03 +0000
ROA not after: Mon 11 May 2026 16:18:03 +0000
asID: 16909
IP address blocks: 2a14:7584:620e::/48 maxlen: 48
Validation: Failed, certificate revoked on Tue 13 May 2025 05:24:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
50:ae:df:0d:ac:43:4a:4c:04:c8:85:a4:1b:1b:ea:f5:61:22:80:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: May 12 16:13:03 2025 GMT
Not After : May 11 16:18:03 2026 GMT
Subject: CN=3868FDC51E649B48FA881EC24B5DAC481E76CBB1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:a4:a8:ba:8b:4e:8c:4e:b1:e5:72:8d:db:7a:
bf:3c:4d:e2:57:f4:52:ec:5e:1d:c8:87:55:05:bf:
67:59:24:7b:b1:42:63:08:a8:36:26:b9:e6:41:89:
03:99:72:2c:bc:a8:b7:97:06:d9:ef:32:bf:2f:c7:
28:6f:ee:80:b0:d9:14:84:a1:85:87:72:11:18:b3:
a3:19:9e:21:a2:77:19:37:0c:32:de:93:c3:7f:fc:
ac:5c:35:cc:2c:0a:25:16:37:d0:a6:97:53:19:88:
b2:e6:89:6c:7e:ef:d0:bd:35:96:6f:2e:e4:0d:0c:
2c:2d:01:f3:fe:37:8a:13:3c:c4:05:42:66:8d:69:
ec:8a:26:79:be:2d:69:53:aa:bb:91:46:a0:41:f2:
d7:b4:7d:02:2d:53:5c:ed:84:de:ce:1a:9c:ca:95:
e4:00:da:e0:1c:4d:3b:0f:21:54:cb:93:09:f7:ec:
15:22:52:b1:18:d5:c3:59:1e:49:8b:94:65:3e:30:
14:8f:68:47:73:79:dc:f4:42:9a:8f:55:ce:cd:b0:
47:c6:8a:a9:8f:4d:a8:35:d7:e1:86:d1:d6:f2:f8:
c3:32:37:c1:b3:1c:5f:bb:e2:a5:0b:76:2c:a8:07:
c4:1d:54:e2:15:8f:16:7b:ea:e9:04:83:d2:23:c4:
40:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:68:FD:C5:1E:64:9B:48:FA:88:1E:C2:4B:5D:AC:48:1E:76:CB:B1
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363230653a3a2f34382d3438203d3e203136393039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:620e::/48
Signature Algorithm: sha256WithRSAEncryption
61:15:68:53:f6:06:a1:c7:2c:e8:55:85:e8:d2:18:cd:2c:c8:
0a:68:50:f3:9f:89:2d:d0:7e:7d:08:8b:67:d2:da:e8:59:ef:
b1:55:e8:e2:6a:ab:d3:6c:ed:0d:0f:dc:71:a0:7a:8e:92:93:
99:47:af:52:f8:62:6b:d2:71:2f:b5:74:be:66:89:cb:99:27:
b3:ed:85:02:4a:47:58:3a:30:a9:e2:27:3f:d8:84:4f:31:18:
d5:1f:8b:06:d3:d5:be:10:4d:4c:4d:05:b9:41:d7:c1:c4:a5:
ad:58:9b:9b:74:7d:b5:87:3c:53:b8:4c:91:36:5d:72:ec:af:
f8:fb:62:9b:5a:e6:99:d6:66:2d:69:ca:de:f2:ab:e0:6e:4b:
f2:4c:f3:1b:2a:e0:96:2b:53:20:aa:f9:e0:c3:e6:a7:0c:ea:
fc:ba:e1:d5:3a:48:be:3c:14:14:8f:d7:11:db:e1:9d:d6:95:
a1:8c:46:2c:67:4e:fc:81:f9:1e:75:c4:4d:69:c0:ca:93:7c:
2a:d8:d2:64:01:76:94:0f:b8:7f:d4:de:14:eb:70:11:43:4b:
bc:d6:4a:dd:ff:a5:b4:2f:d7:7c:71:e7:db:69:4d:ef:d1:90:
b2:85:84:84:c1:3e:50:25:84:62:c2:57:f2:25:78:2f:38:9d:
bd:38:e4:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 14:36:54 2025 by rpki-client