Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363231633a3a2f34382d3438203d3e203136393039.roa
File: 326131343a373538343a363231633a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier: iWtdWuAIqzg4fjVFQAIc7GSHvsApY/N5qkXMjHz5vO4=
Subject key identifier: 4C:33:00:57:94:1A:86:37:BC:92:56:B1:C1:4A:79:22:62:A2:98:7D
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 2A3252A8AD58DBBA547C7B5AA0C1F1375A4E2698
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363231633a3a2f34382d3438203d3e203136393039.roa
Signing time: Mon 12 May 2025 16:18:09 +0000
ROA not before: Mon 12 May 2025 16:13:09 +0000
ROA not after: Mon 11 May 2026 16:18:09 +0000
asID: 16909
IP address blocks: 2a14:7584:621c::/48 maxlen: 48
Validation: Failed, certificate revoked on Sat 31 May 2025 17:16:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2a:32:52:a8:ad:58:db:ba:54:7c:7b:5a:a0:c1:f1:37:5a:4e:26:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: May 12 16:13:09 2025 GMT
Not After : May 11 16:18:09 2026 GMT
Subject: CN=4C330057941A8637BC9256B1C14A792262A2987D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:b0:b7:f7:25:47:b1:ac:c1:4d:2e:03:19:54:
20:22:81:95:1b:68:b2:5c:21:bf:ba:a6:5a:e6:e4:
6b:c4:99:cf:50:a0:b3:ab:c6:d5:54:84:39:e7:a0:
f8:c9:14:b0:3a:9b:e1:e9:05:c5:24:da:bc:ff:26:
ce:eb:4d:a9:50:66:d1:94:51:13:50:a7:84:0f:c9:
5e:e0:b8:04:f1:ee:1b:7c:af:1d:b0:8d:ef:41:d6:
e9:ad:e6:3e:3a:76:e2:99:af:a8:fe:16:eb:1d:40:
6a:a3:41:58:00:2e:15:61:ae:01:9c:7e:43:a8:45:
13:3d:2a:f5:c9:74:f8:34:56:47:ea:e1:8d:1e:60:
b0:be:2d:ac:9d:e6:b2:39:a8:61:a3:f3:f0:dc:c6:
1d:5f:40:6d:d9:45:73:5b:16:dd:e2:1b:c1:1f:54:
dc:35:1f:58:d8:1b:8a:8f:68:75:5f:9e:61:35:fa:
af:4e:bc:61:dd:e0:7d:11:d2:ec:b7:41:12:d2:2e:
db:e7:a7:5b:c8:12:dd:a6:6e:4d:f4:c0:a9:3c:5e:
45:63:1d:80:b8:17:ba:9f:0c:28:9c:e0:6b:0e:65:
2c:10:d7:8e:7e:8b:d2:5a:f8:27:08:84:1a:ea:f8:
d9:ab:83:58:50:9e:4f:e8:bc:c6:b3:a9:5f:d7:8a:
81:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:33:00:57:94:1A:86:37:BC:92:56:B1:C1:4A:79:22:62:A2:98:7D
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363231633a3a2f34382d3438203d3e203136393039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:621c::/48
Signature Algorithm: sha256WithRSAEncryption
49:a0:97:77:d7:d8:b4:4c:eb:cb:71:72:aa:37:87:50:a9:aa:
b3:0b:7a:6b:6b:e7:7d:59:02:81:4c:07:0d:c0:10:1b:fa:60:
e1:b9:71:fc:62:f8:42:18:e8:8e:a0:f7:82:11:e0:ee:c8:90:
6c:a4:f0:d1:c6:3e:a9:f5:d6:8b:63:73:e7:b4:3d:49:d2:0e:
f2:42:35:17:1f:0c:e9:01:5f:6e:68:75:9e:1a:e0:1d:8a:8c:
06:1a:bc:17:1f:55:cf:25:6f:9d:fc:07:a7:e5:15:59:4d:0e:
6a:b3:d2:c0:55:55:91:2a:8a:f8:ec:bd:2b:7a:7e:ef:4d:97:
76:b7:6c:86:a5:b0:09:c7:f3:97:83:5d:8e:2a:97:c6:f3:92:
6e:39:81:af:12:ff:e7:0d:2e:05:15:61:f8:76:93:b8:0b:fe:
53:f3:80:4d:58:77:69:55:f3:1e:8c:68:4e:78:2b:63:2e:8a:
4c:70:f9:bf:68:74:27:21:0d:cf:13:d4:75:11:23:bc:5b:cf:
aa:77:b9:90:d5:42:2a:e4:03:d9:26:f8:f8:6a:61:be:3b:68:
68:73:02:03:64:bd:e0:11:c9:d7:3c:f9:ed:9b:46:5a:76:f1:
53:b9:2b:49:96:1f:fb:a7:3e:20:7d:60:45:87:6c:0a:a3:f9:
9b:f0:5a:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 06:00:55 2025 by rpki-client