Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363232383a3a2f34382d3438203d3e203136393039.roa
File: 326131343a373538343a363232383a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier: YvlomsXJyFsF+ThOox4xGUWOZoihZasxEtAND4L89Wc=
Subject key identifier: A9:93:58:3C:C4:34:83:CA:71:02:6A:4C:16:D2:4F:2E:09:4A:07:17
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 500E31EF662A8AF3A2E13ECA2ABE45935A03D6F9
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363232383a3a2f34382d3438203d3e203136393039.roa
Signing time: Mon 12 May 2025 16:18:09 +0000
ROA not before: Mon 12 May 2025 16:13:09 +0000
ROA not after: Mon 11 May 2026 16:18:09 +0000
asID: 16909
IP address blocks: 2a14:7584:6228::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 14 May 2025 05:30:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
50:0e:31:ef:66:2a:8a:f3:a2:e1:3e:ca:2a:be:45:93:5a:03:d6:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: May 12 16:13:09 2025 GMT
Not After : May 11 16:18:09 2026 GMT
Subject: CN=A993583CC43483CA71026A4C16D24F2E094A0717
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:2f:c0:0d:ac:66:7f:12:c5:5f:4e:0b:80:9e:
8b:5b:02:3f:03:2e:b2:8a:b4:6b:0e:ca:ab:12:ef:
22:2b:8e:c5:1b:8d:fb:01:1d:0d:52:d3:24:b8:8b:
04:0f:20:15:b8:3a:18:0f:a1:44:49:fb:e0:58:a6:
6a:43:eb:6f:3b:0b:ff:d4:cf:6a:f9:3a:7d:dc:90:
44:5c:95:13:5e:3e:27:be:6b:fd:53:b9:52:97:4c:
99:2f:f9:46:e7:88:8e:05:ce:f0:f6:67:b7:71:72:
0a:43:c8:eb:1a:8d:5b:70:fd:cb:28:49:ff:2f:c9:
6e:21:ec:e4:10:ed:fb:d1:d4:21:19:5c:d7:77:f8:
00:9e:7e:4c:66:f6:0b:d0:2e:6f:9f:84:d9:3f:db:
22:cd:73:7b:65:14:13:ab:3b:4f:52:8e:91:04:00:
c7:b2:60:49:e5:9a:82:94:09:a8:60:7c:c0:0a:62:
20:99:e4:f0:43:1d:29:27:61:1b:66:e3:6d:97:cf:
f7:b2:05:95:22:0a:3c:c7:c7:e5:a6:1e:c3:54:9d:
38:56:70:07:1b:79:0b:7c:00:b3:90:20:dc:46:5e:
49:bd:7d:4c:15:1f:91:b7:bd:92:34:88:cf:80:56:
4d:f1:5b:64:af:e0:77:14:5d:0a:cd:1a:4c:4c:9f:
a9:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:93:58:3C:C4:34:83:CA:71:02:6A:4C:16:D2:4F:2E:09:4A:07:17
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363232383a3a2f34382d3438203d3e203136393039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:6228::/48
Signature Algorithm: sha256WithRSAEncryption
81:f2:40:7f:ef:1a:74:3e:02:5a:1f:d0:2e:69:86:a8:3e:8f:
aa:3a:b2:19:b5:10:2a:bc:53:ec:97:8f:8b:99:1d:be:45:fa:
89:83:a3:c4:21:cd:cd:6b:ff:43:30:53:87:d9:60:a9:65:12:
76:14:13:67:2f:91:d6:f5:64:8b:21:22:f0:25:ef:15:0f:58:
ab:41:fa:85:3f:f5:cd:1b:61:1b:af:3f:a0:4a:b6:67:71:75:
45:4f:43:13:3f:64:b8:76:73:b3:35:e4:a0:5b:90:77:3d:9d:
5f:78:0e:5a:8e:6b:c0:73:f2:3c:5f:14:1a:94:98:85:27:dd:
07:ad:25:47:5b:f4:e0:46:c1:29:72:b9:46:d6:c2:0d:93:b8:
ae:d7:0d:df:89:da:a0:3c:c7:5d:34:b6:83:f4:c4:b4:72:ba:
a2:81:be:62:c2:66:c9:87:1c:1e:cf:7f:5c:f7:56:2e:aa:3a:
97:a5:a1:87:d7:23:9c:82:f8:d2:77:a9:ed:78:ba:4a:f7:f5:
21:c2:c0:15:ad:95:c5:be:d3:9f:be:f2:e0:a9:37:22:04:7e:
55:74:6c:de:3f:a0:04:d5:b0:f4:fe:19:1b:15:9b:14:0f:50:
ee:a9:56:78:42:df:6b:ee:7e:2a:62:de:82:29:ab:ca:19:13:
7d:f2:85:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 06:48:28 2025 by rpki-client