Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363235363a3a2f34382d3438203d3e203136393039.roa
File: 326131343a373538343a363235363a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier: Ru11AelqFbNzZdhOB+flUqK9kSnl6kXZutYICFlRK1Q=
Subject key identifier: 42:7D:A3:4D:1B:C1:68:70:A8:BB:D9:E2:06:9C:A1:99:BD:6D:C9:2F
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 5083113E4E4850FF7E85C617BDB5FF5FA2D75D3C
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363235363a3a2f34382d3438203d3e203136393039.roa
Signing time: Mon 12 May 2025 16:18:08 +0000
ROA not before: Mon 12 May 2025 16:13:08 +0000
ROA not after: Mon 11 May 2026 16:18:08 +0000
asID: 16909
IP address blocks: 2a14:7584:6256::/48 maxlen: 48
Validation: Failed, certificate revoked on Sat 31 May 2025 17:16:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
50:83:11:3e:4e:48:50:ff:7e:85:c6:17:bd:b5:ff:5f:a2:d7:5d:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: May 12 16:13:08 2025 GMT
Not After : May 11 16:18:08 2026 GMT
Subject: CN=427DA34D1BC16870A8BBD9E2069CA199BD6DC92F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:84:25:91:cf:2d:19:81:4f:43:79:c7:c8:d8:
3d:a1:83:78:d5:93:84:ed:ac:60:f7:01:8e:2c:93:
14:a6:aa:17:35:ec:b7:d0:1d:42:22:49:a7:1d:8f:
6c:c5:8b:35:a2:e7:05:e5:11:68:70:28:4b:96:36:
12:ca:c7:b7:05:dc:94:b0:93:99:d3:96:d2:93:fc:
97:36:4b:3b:b5:a8:8f:b4:cd:df:e2:b9:bc:9f:c8:
fb:22:8d:92:d5:0a:d3:ae:8b:d1:06:e2:cd:e1:e5:
09:d4:89:66:b7:77:8f:c8:c6:b0:94:c3:ef:ad:b4:
52:e0:7e:b1:3d:cf:0e:b0:5d:5a:32:1e:fa:e1:28:
d7:32:1e:67:11:89:e9:f0:66:96:00:35:4e:14:93:
17:3b:3e:eb:7f:aa:0c:91:be:b4:0c:78:67:82:10:
e1:ff:5a:7b:85:ba:08:49:2a:0f:ef:8d:ea:a8:fc:
2c:92:4a:13:be:84:f9:a3:a7:34:af:35:ef:87:01:
66:f3:a8:97:18:28:95:ba:84:29:a8:a3:3e:a1:77:
fa:63:e6:1d:6f:b1:73:3e:f2:34:19:03:74:eb:ee:
69:75:41:c3:6a:e7:d5:bc:b1:0f:4d:85:ad:0c:62:
70:14:62:10:37:78:9c:40:a5:a0:be:e1:98:01:a0:
07:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:7D:A3:4D:1B:C1:68:70:A8:BB:D9:E2:06:9C:A1:99:BD:6D:C9:2F
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363235363a3a2f34382d3438203d3e203136393039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:6256::/48
Signature Algorithm: sha256WithRSAEncryption
8e:7b:f6:c8:45:e3:49:63:7b:1a:c9:56:d8:52:ee:56:bc:c7:
a0:fc:b1:46:b8:07:69:3b:99:0b:58:23:25:7a:6b:f2:50:75:
84:2d:be:99:c6:97:1c:49:31:72:58:e4:74:77:13:0d:dd:3b:
6b:89:42:5b:73:d8:b3:6e:0f:c8:c2:48:51:2b:53:02:0e:ed:
cc:b0:3c:cb:72:56:f5:fc:80:d8:4f:e5:9e:4e:f6:5d:47:1c:
91:34:af:cc:71:14:37:3a:10:57:5a:16:b5:c0:85:0a:b2:34:
d2:19:3a:77:5c:29:40:fb:65:70:e5:b2:f0:16:94:3d:11:3c:
2b:b2:ca:ae:e1:ac:6d:3c:ef:07:b2:cf:95:97:15:a9:e9:e5:
39:38:ad:08:5b:f9:cb:8b:ed:7b:c0:a4:88:b3:9f:2e:9b:a5:
6f:06:cf:2a:10:7c:36:10:ae:7b:23:eb:6b:48:53:a5:02:e8:
9d:3a:0b:0f:27:5f:c7:70:52:e9:66:d1:40:cd:9e:a2:2a:d8:
6a:ed:ae:5b:3c:1a:58:71:c5:e3:c3:e8:ca:9b:37:27:a9:e5:
a4:8e:84:cc:c7:0e:00:ec:ba:e1:6d:fe:f4:d7:bf:06:a5:c2:
53:1d:d0:9d:16:54:7c:1b:84:9c:de:25:89:98:19:c4:26:a2:
b4:01:95:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 18:38:46 2025 by rpki-client