Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363232333a3a2f34382d3438203d3e203136393039.roa
File: 326131343a373538343a363232333a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier: VG8faFfRqoNdqa0T7WIFS+fwxeO02/4hZr/ZGN40f5I=
Subject key identifier: D8:6A:BD:64:07:51:02:E9:AE:7E:3C:59:C9:15:E8:B4:5F:E1:EB:D4
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 516742C1457E9C0D77DDF97CF1127E3089FB76DB
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363232333a3a2f34382d3438203d3e203136393039.roa
Signing time: Mon 12 May 2025 16:18:07 +0000
ROA not before: Mon 12 May 2025 16:13:07 +0000
ROA not after: Mon 11 May 2026 16:18:07 +0000
asID: 16909
IP address blocks: 2a14:7584:6223::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 14 May 2025 00:18:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
51:67:42:c1:45:7e:9c:0d:77:dd:f9:7c:f1:12:7e:30:89:fb:76:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: May 12 16:13:07 2025 GMT
Not After : May 11 16:18:07 2026 GMT
Subject: CN=D86ABD64075102E9AE7E3C59C915E8B45FE1EBD4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:ba:bb:bc:fa:c8:25:2c:2a:93:9c:ca:40:fc:
14:15:ea:51:41:69:a8:17:2b:f5:c6:fa:9b:50:be:
4c:0f:5f:e9:39:8c:89:9f:68:b3:7c:ff:51:3d:54:
fb:96:96:ac:bb:36:39:19:b7:9b:d2:bc:d5:55:95:
7b:e1:26:1a:3b:20:73:66:c6:4f:88:3f:7b:6d:fd:
43:b2:a2:38:58:09:30:f5:8d:26:38:c4:5d:11:60:
0f:cd:24:46:b8:92:35:05:bf:f3:01:44:87:44:6c:
b1:0b:29:44:2a:88:1f:af:aa:6d:35:98:ea:17:45:
a8:9c:87:70:14:b0:b1:a9:31:78:b3:e9:0b:a2:ee:
90:82:93:af:96:5f:02:e6:e5:9a:ff:b6:3c:cb:ad:
e2:bf:43:b0:87:0d:cf:ea:b0:c7:a6:e5:ec:e8:b1:
48:53:60:d1:dc:8f:9a:f9:e5:d3:35:43:30:2d:53:
b1:41:95:06:1e:82:ba:6c:51:c3:5e:61:a8:21:7a:
f6:b1:86:ab:8a:eb:7e:da:3f:4d:17:ee:e1:b6:cb:
2b:8a:36:b1:19:93:79:c4:fa:67:99:55:eb:42:9e:
ef:4b:2e:20:b9:72:a1:b3:76:f2:3a:8b:8a:e2:45:
6a:ba:15:c6:2a:b9:8f:50:60:1e:f8:95:b9:60:36:
27:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:6A:BD:64:07:51:02:E9:AE:7E:3C:59:C9:15:E8:B4:5F:E1:EB:D4
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363232333a3a2f34382d3438203d3e203136393039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:6223::/48
Signature Algorithm: sha256WithRSAEncryption
23:d6:66:21:4d:95:8c:76:f1:7f:ce:54:2e:61:bc:e3:f1:c5:
c0:f9:95:da:de:72:24:59:96:f0:f6:b9:af:9d:33:22:73:cb:
ec:6e:99:3f:15:65:83:d5:f0:90:88:aa:51:f9:a3:80:70:86:
a9:f2:fe:11:37:1c:ee:b0:a9:eb:cd:3f:ac:13:7f:05:ef:11:
90:4d:e1:92:1a:41:ef:0e:5b:83:21:f7:af:65:7f:8f:17:73:
5f:0d:9d:27:d9:73:c9:59:47:f8:8d:c7:e9:2b:b0:aa:0d:ea:
cd:1a:62:9f:45:f6:23:49:fd:9a:bf:0e:73:02:df:e3:c5:1d:
0a:90:f9:32:01:68:18:ea:c5:df:52:9a:5f:e8:cc:c1:f7:b9:
ca:fd:39:62:a6:f7:f1:78:6b:d8:ec:4b:fb:12:48:98:c4:41:
c4:bd:6c:ba:b8:fd:0e:1f:75:73:94:ce:a6:9e:b6:17:4e:c0:
ad:ef:0f:92:f4:08:f9:41:54:52:ea:9e:90:6e:da:85:8d:a9:
2f:75:1a:05:05:8a:bd:a4:91:60:ad:d8:78:c9:8a:8d:4a:df:
7b:e7:1b:c9:1c:dd:94:86:bf:67:55:40:11:1a:31:b8:06:0b:
c5:61:1d:f1:2b:05:2d:07:15:64:82:a1:b5:b6:30:c1:a4:6a:
db:94:db:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 04:56:51 2025 by rpki-client