Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363231663a3a2f34382d3438203d3e203136393039.roa
File: 326131343a373538343a363231663a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier: 4ODR1VoamHKrbxU0PeI2phPi803dk1nn5+M+u54qCtY=
Subject key identifier: 0E:FC:9C:65:5E:77:4D:D6:9D:72:86:16:5F:FF:4D:C4:76:67:FD:52
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 4C9E93C91C3032B34974C30A47B67539D377CBF5
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363231663a3a2f34382d3438203d3e203136393039.roa
Signing time: Mon 12 May 2025 16:18:04 +0000
ROA not before: Mon 12 May 2025 16:13:04 +0000
ROA not after: Mon 11 May 2026 16:18:04 +0000
asID: 16909
IP address blocks: 2a14:7584:621f::/48 maxlen: 48
Validation: Failed, certificate revoked on Tue 13 May 2025 18:58:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4c:9e:93:c9:1c:30:32:b3:49:74:c3:0a:47:b6:75:39:d3:77:cb:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: May 12 16:13:04 2025 GMT
Not After : May 11 16:18:04 2026 GMT
Subject: CN=0EFC9C655E774DD69D7286165FFF4DC47667FD52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:ce:31:74:25:26:e6:5a:82:91:3c:8d:6b:c6:
5a:96:b5:ec:15:dd:53:d1:4e:9e:0f:cf:da:1d:b3:
21:e8:e8:64:cf:1e:b0:49:85:9e:0d:2b:dc:c2:21:
c4:a8:24:f4:64:ff:40:0b:16:31:44:d7:ef:2b:eb:
c7:4c:44:de:67:1d:e8:37:a0:7c:cc:ce:54:23:82:
8a:8f:81:1e:a5:13:81:38:f8:9b:c7:13:3f:aa:8f:
c7:67:48:0e:f8:00:04:37:5f:96:ad:d9:60:a8:88:
22:09:8c:7f:17:92:1a:fb:7f:a0:b6:af:93:05:81:
cc:4e:d5:6c:db:36:53:55:25:a0:8b:2a:d0:51:5b:
df:6b:d9:13:3a:01:ee:43:a6:aa:5a:a4:e8:98:68:
d2:28:f2:84:c9:7f:71:1a:42:8d:f3:3c:ee:8d:a0:
af:1e:f5:38:0e:26:35:69:a7:2b:5a:1c:95:26:76:
da:e4:1c:be:73:29:a0:be:61:0e:c7:91:c2:92:2b:
1f:07:06:2e:8a:47:35:ea:10:d0:06:3c:d6:8b:43:
49:02:4b:31:f6:f3:a4:12:cf:10:43:82:2c:a9:ac:
58:8a:3c:b8:b9:f9:89:ad:2c:3e:24:3e:6e:b4:9f:
d3:b7:51:7c:ce:8e:de:05:7c:e8:4c:4b:9b:01:fd:
71:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:FC:9C:65:5E:77:4D:D6:9D:72:86:16:5F:FF:4D:C4:76:67:FD:52
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363231663a3a2f34382d3438203d3e203136393039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:621f::/48
Signature Algorithm: sha256WithRSAEncryption
a5:26:25:a0:01:51:70:52:c5:9c:77:f3:ee:35:da:f5:93:9c:
44:4f:00:64:ea:fb:ba:40:db:61:b7:24:9d:38:e7:95:0d:d4:
ad:a7:84:9b:58:c5:26:88:cd:72:96:1c:dc:35:ac:c2:c8:11:
ab:9d:05:cf:99:e7:0e:3b:32:2d:a7:9d:69:e4:cd:a6:67:21:
fd:ce:0f:a2:42:9a:e2:4b:ad:13:c5:fd:b9:3b:c5:57:78:22:
de:3a:08:c7:a0:46:7f:64:83:84:b5:de:3a:ad:d4:38:e1:b9:
de:c9:ec:bf:73:88:80:0e:d7:68:77:ba:e1:14:2c:ac:a9:b7:
1a:7a:c2:bb:35:d1:79:28:01:bb:f1:6c:72:6e:76:30:94:25:
ae:77:92:9f:f9:52:65:7d:18:9d:25:64:73:40:f4:f7:80:e1:
4b:20:d0:09:1f:39:ec:d5:7d:e3:48:ed:a2:a6:07:46:e8:f7:
30:25:16:e3:f8:23:d7:48:a0:fb:28:4a:fa:72:8c:ee:1f:6e:
9b:8c:60:cc:5e:25:00:53:26:6b:f1:91:49:97:5b:81:b6:31:
46:84:93:c7:09:68:16:ca:10:b3:82:05:56:10:a4:f0:2a:91:
92:fb:85:00:8c:d7:49:01:a7:18:5f:30:7a:28:38:6b:ca:fd:
ff:48:d9:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 01:24:50 2025 by rpki-client