Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363231643a3a2f34382d3438203d3e203136393039.roa
File: 326131343a373538343a363231643a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier: wxxGeW2QBtO20rO3FGfriO2lgXed5ujgrL8BpkEqrY0=
Subject key identifier: 3D:52:24:AF:E6:35:C6:1D:D9:16:37:91:3F:4D:AD:78:A5:13:D9:D2
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 1830D160601CF85F901FCA77276D9D6178C1F5B8
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363231643a3a2f34382d3438203d3e203136393039.roa
Signing time: Mon 12 May 2025 16:18:03 +0000
ROA not before: Mon 12 May 2025 16:13:03 +0000
ROA not after: Mon 11 May 2026 16:18:03 +0000
asID: 16909
IP address blocks: 2a14:7584:621d::/48 maxlen: 48
Validation: Failed, certificate revoked on Sat 31 May 2025 17:16:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
18:30:d1:60:60:1c:f8:5f:90:1f:ca:77:27:6d:9d:61:78:c1:f5:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: May 12 16:13:03 2025 GMT
Not After : May 11 16:18:03 2026 GMT
Subject: CN=3D5224AFE635C61DD91637913F4DAD78A513D9D2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:7b:6b:71:6b:3f:ae:3f:e9:33:0e:50:cc:c4:
f6:ac:81:e3:82:be:c9:56:2a:60:7e:72:eb:e5:b3:
7d:63:1e:3d:a0:64:c1:ef:b8:59:af:33:67:eb:61:
ec:ec:c1:73:f2:92:3c:75:01:f3:58:bb:6e:53:73:
46:67:bc:2c:61:45:75:3b:49:dd:35:88:90:27:4b:
b3:36:1d:c0:6f:f1:2c:93:e2:9e:fd:07:a5:7f:4e:
cb:e7:cc:f4:c8:f2:0a:69:09:66:81:69:68:6e:6d:
54:88:fd:13:14:45:ae:4c:ac:f9:d4:ec:6d:3e:5f:
13:66:ff:3a:fb:74:92:a1:6b:a6:dc:e4:2e:65:f0:
a3:9e:b7:b2:f6:9a:f1:d8:55:56:ca:fd:19:96:c5:
fc:91:54:ab:05:fd:23:16:6e:f4:18:16:0a:a8:8d:
27:f8:72:8e:c4:67:e5:4f:5b:0f:fc:31:14:74:64:
4c:41:6d:a0:74:11:9b:e2:93:3a:43:90:b8:69:b0:
27:34:07:7b:d9:3c:9b:39:c3:15:c3:ff:35:e9:1e:
14:c2:05:cf:86:53:4b:2c:ac:8d:3b:cf:73:a3:85:
56:b2:80:f0:fd:eb:69:d3:60:79:81:1f:b0:e1:58:
6a:43:b0:6e:8a:1c:ab:bb:0d:6a:a9:80:5d:8f:2d:
01:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:52:24:AF:E6:35:C6:1D:D9:16:37:91:3F:4D:AD:78:A5:13:D9:D2
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363231643a3a2f34382d3438203d3e203136393039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:621d::/48
Signature Algorithm: sha256WithRSAEncryption
0d:7d:94:dd:5b:8b:ea:5a:a6:85:fd:95:2f:4b:69:ac:29:18:
77:58:48:66:2d:71:f8:d3:8f:7c:52:46:39:c0:77:b7:e1:35:
24:08:5d:66:24:c9:7a:a3:12:fe:14:fe:af:13:03:c8:30:30:
35:b0:55:bd:54:06:ee:26:1d:7b:e1:9e:a8:fd:0f:d6:86:43:
06:3e:8b:4d:b8:b5:dd:78:19:cb:c5:90:d9:cc:87:5e:d1:68:
77:52:78:96:10:6e:40:ea:7e:0a:ee:45:13:40:a6:8a:1b:74:
3d:00:71:82:fc:bb:03:82:4b:dd:08:c2:8d:26:7a:93:63:ff:
53:a0:bb:0f:ae:18:e7:03:82:c8:8b:2f:a7:da:40:23:57:e9:
69:4a:13:11:33:0f:6e:da:99:7f:01:66:f6:fb:53:5d:41:71:
ef:c7:00:95:9b:1c:01:83:b6:a1:bd:d5:d5:fd:f2:30:eb:bd:
03:e9:a4:d5:0c:30:11:6e:da:c7:03:8d:8a:9a:16:8a:ba:6e:
63:cc:ce:b9:b7:10:bb:32:04:7e:c0:eb:45:82:fe:3b:72:40:
fe:46:c9:28:76:0a:3f:1d:11:ad:95:0d:cb:39:d1:bd:4b:bc:
b4:48:6b:ef:23:92:aa:4a:0c:c8:1b:bf:16:f7:c5:16:85:8c:
60:ff:44:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 06:16:34 2025 by rpki-client