Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363232623a3a2f34382d3438203d3e203136393039.roa
File: 326131343a373538343a363232623a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier: B5OYt88mRXg/wNj5q7dzsFUGbccVOa4z9/Kup1KtFNk=
Subject key identifier: F5:13:47:59:B4:67:9C:FE:BF:5F:FE:7F:E9:22:C6:A2:DA:30:3B:70
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 0AE0F47B8094627AD7CE802813FEFF533CD85934
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363232623a3a2f34382d3438203d3e203136393039.roa
Signing time: Mon 12 May 2025 16:18:04 +0000
ROA not before: Mon 12 May 2025 16:13:04 +0000
ROA not after: Mon 11 May 2026 16:18:04 +0000
asID: 16909
IP address blocks: 2a14:7584:622b::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 14 May 2025 21:36:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0a:e0:f4:7b:80:94:62:7a:d7:ce:80:28:13:fe:ff:53:3c:d8:59:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: May 12 16:13:04 2025 GMT
Not After : May 11 16:18:04 2026 GMT
Subject: CN=F5134759B4679CFEBF5FFE7FE922C6A2DA303B70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:cc:8f:6c:a1:8b:bd:b9:d4:a0:5b:92:de:69:
2b:66:34:f4:4d:e3:42:84:b4:d9:1d:e6:73:58:a4:
bb:55:6f:15:a6:f1:4f:08:e0:74:fa:d4:e7:82:b5:
07:55:b6:7b:e8:a2:ad:d9:08:6c:99:9d:b4:94:a4:
2e:20:75:a8:f6:7b:ca:4e:7e:61:bc:fa:05:f9:f3:
77:41:91:93:aa:e3:b7:e4:e5:04:21:8e:ab:2d:14:
ce:53:db:3e:7a:39:69:10:27:1c:a8:a6:e9:5a:9d:
c9:93:0a:4e:49:c8:f6:c2:79:cb:aa:07:58:8f:11:
ec:d6:29:a3:94:51:e7:2c:76:43:35:0f:63:8e:c6:
46:6e:c0:6d:5a:93:34:eb:6c:b4:12:cf:32:06:e5:
b2:08:28:8d:fd:14:f9:dc:92:12:dc:e9:52:56:1c:
94:c2:49:4b:98:d7:8b:e4:c8:29:79:46:5b:c7:fe:
2f:30:45:c3:f7:a4:3a:da:f0:de:a2:b9:74:f9:fd:
c9:0e:89:1b:e2:43:8e:61:ef:d5:d3:17:27:65:dd:
01:17:ec:48:df:e2:e8:96:6e:0e:bf:d9:83:e5:e0:
5d:71:f1:99:9b:25:d9:f4:48:61:51:05:4e:59:12:
94:1d:14:b0:15:b3:2c:46:35:52:49:13:84:a5:75:
1d:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:13:47:59:B4:67:9C:FE:BF:5F:FE:7F:E9:22:C6:A2:DA:30:3B:70
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363232623a3a2f34382d3438203d3e203136393039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:622b::/48
Signature Algorithm: sha256WithRSAEncryption
5d:32:d1:a8:d3:ad:e5:e4:e7:5b:c4:ad:df:e9:3f:7f:86:c6:
f4:e2:59:08:1d:e7:b1:53:81:65:91:3b:0e:ed:32:f1:bd:3c:
96:36:0f:84:6d:ba:5f:da:97:ac:d4:be:8c:ee:f4:dd:79:cd:
a6:e3:2a:67:d3:76:88:a4:59:b9:69:f5:9e:0c:90:0a:71:3b:
2d:7a:b2:11:e8:b2:38:3d:e9:0a:32:32:09:ca:35:27:e3:c6:
57:a2:a1:9c:b9:e5:ae:a0:7e:1d:5a:d1:34:c3:ba:2c:1b:d3:
98:27:1d:8f:c9:34:11:2d:cf:f3:44:59:6c:fd:25:9b:c3:06:
60:c1:e7:b6:5c:69:e3:db:83:b3:33:01:4f:8b:91:83:98:94:
4d:ac:73:4d:b8:08:ae:d7:2e:0e:25:7c:28:d4:37:2f:b6:21:
44:c4:65:cd:d6:1c:95:3f:cf:03:c1:25:be:e2:eb:7f:32:19:
f0:15:fe:af:0c:d1:8a:fe:db:bb:87:a5:3b:b4:c0:cb:b0:40:
88:b9:c3:75:a1:1c:ee:15:5e:fc:01:fb:62:35:3e:7b:77:f6:
9f:56:f7:f2:92:36:32:d5:d5:aa:66:d2:a9:dd:b5:a8:fc:e4:
c8:28:b7:ba:e0:8c:06:ff:92:c4:06:32:c7:db:dc:1a:b4:16:
b0:58:23:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 06:14:36 2025 by rpki-client