Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363231373a3a2f34382d3438203d3e203136393039.roa
File: 326131343a373538343a363231373a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier: P8RbTs7szdSpIo3ebdur1aZEuom0pUzssDExa4md7AY=
Subject key identifier: FD:D5:12:D6:59:B3:53:F0:97:8D:37:F5:B6:56:F2:AA:F7:33:7E:C2
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 5AB527C6B86070692E8A6D1AF08A63033D35DFF7
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363231373a3a2f34382d3438203d3e203136393039.roa
Signing time: Mon 12 May 2025 16:18:10 +0000
ROA not before: Mon 12 May 2025 16:13:10 +0000
ROA not after: Mon 11 May 2026 16:18:10 +0000
asID: 16909
IP address blocks: 2a14:7584:6217::/48 maxlen: 48
Validation: Failed, certificate revoked on Tue 13 May 2025 03:24:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5a:b5:27:c6:b8:60:70:69:2e:8a:6d:1a:f0:8a:63:03:3d:35:df:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: May 12 16:13:10 2025 GMT
Not After : May 11 16:18:10 2026 GMT
Subject: CN=FDD512D659B353F0978D37F5B656F2AAF7337EC2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:6b:55:9d:72:39:34:45:8a:50:82:f0:5f:cc:
17:40:a6:ba:f9:6a:3c:90:e8:8a:48:8e:05:77:be:
db:27:8e:fe:ea:ea:f6:46:99:f0:1f:f8:61:a4:cf:
56:da:13:c6:71:e3:29:4c:9e:1f:65:2b:b2:5e:9f:
1f:94:4c:26:0c:39:c6:38:6d:19:cf:0d:24:29:b9:
3b:e6:f8:93:11:d7:8a:1d:38:87:8a:d2:13:32:9d:
32:85:11:fc:02:25:2d:23:64:e7:65:83:34:19:fb:
24:0f:5b:12:6d:76:16:4b:43:c0:bf:13:80:b3:eb:
f6:ba:19:43:86:af:95:c9:9b:16:70:15:02:b8:39:
c5:06:ae:7d:01:e7:65:20:ac:be:e4:76:cb:a9:f0:
97:57:bf:38:6d:5f:25:18:b6:33:c5:71:21:5e:83:
d8:51:72:38:e2:42:d0:7f:29:29:76:4c:65:76:d1:
f9:40:3c:1a:8b:a9:70:ac:da:a8:92:8a:61:da:df:
f7:31:54:92:99:77:6e:22:07:f3:41:eb:e0:c3:0c:
95:2f:7d:65:5b:25:36:1a:69:e3:d2:dd:1d:bf:d8:
3a:46:c8:aa:12:5a:77:bf:33:67:73:c0:36:ea:be:
fd:74:48:b2:28:99:d0:2f:22:54:32:4a:5b:04:1a:
3e:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:D5:12:D6:59:B3:53:F0:97:8D:37:F5:B6:56:F2:AA:F7:33:7E:C2
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363231373a3a2f34382d3438203d3e203136393039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:6217::/48
Signature Algorithm: sha256WithRSAEncryption
22:ac:24:f7:7a:c9:7a:1b:0e:c4:bc:4d:81:9b:6c:c1:f4:01:
90:41:7b:6f:82:a0:ce:a3:64:12:f1:b0:d4:29:47:69:bd:c9:
97:31:3b:f9:56:b4:b5:03:10:30:2b:a7:fb:4e:11:4a:97:43:
e6:5d:a0:ec:67:b6:07:a1:ee:7f:35:69:2f:6a:f6:ed:58:57:
29:c0:00:18:a5:9d:91:45:25:ce:85:48:84:ee:45:d4:d5:9d:
fd:80:fd:f5:63:bd:c1:50:e8:1d:38:3b:77:2c:2e:74:87:7c:
d4:5f:41:9f:c5:15:54:6a:b1:00:1e:a5:aa:c2:fb:b6:93:e6:
da:eb:5d:16:bb:22:17:69:9a:71:bf:6f:3a:48:e6:33:03:8a:
3a:69:a8:9f:c8:bb:8a:2b:df:b2:19:28:d8:f7:7b:a3:57:ff:
aa:19:54:c3:12:55:13:37:23:01:05:71:ba:4d:9c:03:1f:f9:
02:ae:9e:49:1b:8e:b4:3a:ab:f9:b1:f5:8a:e1:ad:17:ca:fb:
57:3a:33:62:46:56:de:a9:7d:c7:07:c7:b9:f1:f8:7f:98:78:
f3:a9:d2:ee:02:35:cf:cd:88:1a:d7:c3:4d:37:a0:f4:b1:63:
b3:64:8b:3e:b9:f4:59:0a:bc:34:34:7b:f0:b6:4b:a4:62:31:
a3:ad:57:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 06:18:46 2025 by rpki-client