Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363231653a3a2f34382d3438203d3e203136393039.roa
File: 326131343a373538343a363231653a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier: jp43waOFtjqcg+xGX27b3MldlzZpLIs7LQRf6NSs5ts=
Subject key identifier: 79:8A:03:26:D0:57:37:BD:43:33:3D:96:10:E0:D1:2A:EB:F8:25:99
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 45E7ABEB011353D167A34C5BA37CD1E77032D9A7
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363231653a3a2f34382d3438203d3e203136393039.roa
Signing time: Mon 12 May 2025 16:18:02 +0000
ROA not before: Mon 12 May 2025 16:13:02 +0000
ROA not after: Mon 11 May 2026 16:18:02 +0000
asID: 16909
IP address blocks: 2a14:7584:621e::/48 maxlen: 48
Validation: Failed, certificate revoked on Tue 13 May 2025 21:30:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
45:e7:ab:eb:01:13:53:d1:67:a3:4c:5b:a3:7c:d1:e7:70:32:d9:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: May 12 16:13:02 2025 GMT
Not After : May 11 16:18:02 2026 GMT
Subject: CN=798A0326D05737BD43333D9610E0D12AEBF82599
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:82:f6:4b:d3:5a:5c:36:a8:6e:f0:b3:f7:e8:
c4:83:61:14:4b:16:cb:c7:60:77:5e:13:63:cb:4b:
37:14:25:7e:9d:3d:fe:a7:10:99:ab:56:27:d6:c1:
72:23:29:79:99:62:6a:5d:36:57:7e:f8:a5:b3:2f:
e4:7c:b0:77:04:69:5e:44:b5:1b:26:ad:f5:a1:1b:
83:57:cd:c7:10:77:80:42:d3:10:39:2b:63:bb:c8:
c2:e9:dc:9a:1e:88:c7:b3:3f:5e:73:b3:9c:fd:e7:
d6:66:b5:5a:08:bd:d3:4c:a3:39:d6:bb:a4:8d:f9:
bd:87:e1:a0:47:d0:37:2e:f4:6f:75:bd:4e:a4:75:
6b:dc:3d:9f:68:f2:00:78:c3:21:9d:f1:92:6d:30:
74:29:9f:1f:ec:b3:f2:fe:19:32:29:03:5e:14:51:
ba:5d:8a:80:79:c5:aa:05:38:fb:0c:1d:f5:0a:09:
56:e3:f8:aa:74:5a:47:ea:70:85:28:eb:1c:42:55:
40:a7:f2:62:67:69:75:c8:87:69:23:9c:8d:7a:aa:
59:a7:02:ee:46:42:35:90:87:6d:c5:d5:17:19:62:
62:c6:9a:a3:3e:e3:c0:8f:51:8b:69:62:2d:24:05:
b9:48:75:99:13:65:7b:ec:f3:ec:e4:77:95:73:fa:
ae:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:8A:03:26:D0:57:37:BD:43:33:3D:96:10:E0:D1:2A:EB:F8:25:99
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363231653a3a2f34382d3438203d3e203136393039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:621e::/48
Signature Algorithm: sha256WithRSAEncryption
22:ae:2e:eb:59:2c:7d:0a:fb:3c:04:20:ee:6e:31:1c:b3:14:
db:86:4a:99:5a:2f:38:2a:7c:34:9f:51:af:0a:41:18:ea:88:
c0:cf:a7:96:d8:10:54:37:8c:af:a8:c7:aa:ea:3a:9c:a0:f2:
26:83:b5:fb:d9:1e:94:02:47:75:64:4a:ff:b0:1a:61:28:98:
a0:45:85:27:af:64:16:7c:fd:10:d4:01:5f:72:9b:7f:ee:b1:
7e:36:ab:97:fa:3a:5c:76:e5:13:b4:b9:08:1c:8d:c1:87:2c:
5d:7d:c0:72:c9:65:8d:47:06:3f:5e:f1:46:c6:a0:9c:1f:16:
de:c8:34:1b:90:02:11:60:be:1b:ab:d0:87:13:00:5d:f5:c5:
44:7a:aa:f8:90:42:24:9e:ee:fe:82:43:2c:d8:dc:48:fe:ee:
94:77:bd:dd:80:4e:0d:8c:73:ed:b4:3f:eb:62:56:aa:ab:9f:
d6:c7:b0:ed:97:ce:04:6c:82:92:cb:7e:43:97:3e:0d:81:11:
21:5a:50:a8:96:2c:9a:da:84:30:b9:ea:f1:94:a6:e3:93:9c:
65:40:54:c5:fb:32:92:46:4e:06:7f:c5:23:1d:1b:0f:9f:44:
58:6e:ab:c2:93:88:0c:0a:c6:e2:08:da:e2:90:c5:2a:e8:23:
23:f9:a7:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 06:25:30 2025 by rpki-client