Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363232313a3a2f34382d3438203d3e203136393039.roa
File: 326131343a373538343a363232313a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier: cDFgANNulAxLVIXCLacgR1l6ogkcJdwltqDB9yYT3d8=
Subject key identifier: 90:76:8C:F8:D3:38:97:E8:69:5A:CC:0E:50:2E:BA:EF:D0:1E:34:D3
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 076D8E0616FD20964C1FC8A5F5B2AE7250333003
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363232313a3a2f34382d3438203d3e203136393039.roa
Signing time: Mon 12 May 2025 16:18:06 +0000
ROA not before: Mon 12 May 2025 16:13:06 +0000
ROA not after: Mon 11 May 2026 16:18:06 +0000
asID: 16909
IP address blocks: 2a14:7584:6221::/48 maxlen: 48
Validation: Failed, certificate revoked on Tue 13 May 2025 08:24:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
07:6d:8e:06:16:fd:20:96:4c:1f:c8:a5:f5:b2:ae:72:50:33:30:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: May 12 16:13:06 2025 GMT
Not After : May 11 16:18:06 2026 GMT
Subject: CN=90768CF8D33897E8695ACC0E502EBAEFD01E34D3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:1e:ef:0a:8a:48:d0:ce:ee:6c:db:25:70:3e:
86:45:11:fb:87:88:1b:b6:dc:1a:a8:17:78:a3:76:
da:69:0c:98:ad:54:0e:28:25:55:4f:24:db:5a:08:
2d:f3:a9:f5:39:32:19:62:7f:06:17:77:a9:1e:ab:
f8:05:da:97:6b:12:15:b7:d6:14:6a:d6:cb:36:ce:
e1:b2:ab:da:b3:d1:99:d4:1e:cc:ae:20:d7:bf:a7:
dc:88:9e:72:0f:fa:84:67:4c:c0:df:5e:0b:f3:dd:
09:03:89:28:35:e9:46:be:1e:48:aa:d9:ba:88:34:
6d:48:6d:42:82:d3:b9:be:0e:97:69:66:80:c3:4a:
35:f7:0a:e3:a6:64:44:a5:05:93:09:6c:9b:b0:b2:
7a:6a:f5:d4:d6:a2:c8:e4:e2:a2:51:6c:57:b0:9f:
46:97:39:45:1d:de:62:29:99:58:7f:c5:16:12:0a:
e9:59:5a:11:18:8e:a4:3a:7a:14:e7:ee:5f:f0:2b:
38:6b:9c:11:ea:2f:d9:0e:e2:70:82:1a:2c:dc:7b:
52:c0:47:4d:92:3b:58:48:8c:27:72:fe:67:5b:f3:
8d:34:e3:95:c5:79:34:a7:72:e3:8a:4e:b6:19:29:
df:f3:f2:2a:84:f8:0d:9c:a9:fc:ed:c1:8b:49:6d:
b9:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:76:8C:F8:D3:38:97:E8:69:5A:CC:0E:50:2E:BA:EF:D0:1E:34:D3
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363232313a3a2f34382d3438203d3e203136393039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:6221::/48
Signature Algorithm: sha256WithRSAEncryption
b4:29:f5:8b:ec:69:67:0b:00:26:2b:94:75:e4:3c:fc:bc:5a:
00:ae:ef:16:ad:d3:e1:1f:80:d9:ce:3b:fa:d8:9b:b7:ea:57:
94:a0:60:a0:88:20:7f:d5:48:9f:05:10:1f:ea:0c:ae:52:15:
db:39:b8:fa:7d:96:26:a9:a9:31:d7:85:04:b0:02:b3:cd:5a:
41:3a:1a:0b:8d:10:79:31:13:95:26:a0:d0:ff:46:b5:1d:1d:
b4:47:91:f7:79:d3:ea:08:fc:ad:34:44:33:d3:02:8a:7a:f9:
75:0b:34:a3:87:42:46:7c:e9:43:9d:7e:ea:88:a9:b5:5a:00:
b3:14:da:a8:b7:d0:64:74:85:d1:ca:27:af:a5:53:47:c8:ce:
75:f2:1e:e2:b1:14:3b:48:d5:88:48:54:49:22:df:48:3e:7c:
5a:2f:93:12:da:25:08:be:2f:d4:5e:57:cc:9a:b2:a8:78:e5:
42:63:e9:1a:e8:0c:c8:9c:ae:78:d7:ae:86:5e:80:68:7a:f0:
9c:3b:2c:d4:b0:1b:18:65:65:ad:ed:3a:d2:27:66:91:96:82:
57:86:bd:4e:da:28:e5:19:1a:ba:37:44:bc:fa:62:eb:54:b8:
df:eb:de:67:0d:82:fc:f8:9e:2b:43:ad:e1:2c:cb:2e:5f:d0:
0f:22:a9:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 04:14:45 2025 by rpki-client