Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363235623a3a2f34382d3438203d3e203136393039.roa
File: 326131343a373538343a363235623a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier: WVhSpO+M7DfvBVOzBNQNervxC2FeGKeX2axH/TFoAmg=
Subject key identifier: FD:0A:83:D1:DA:97:6E:70:F5:65:5B:6B:EC:F8:62:27:00:3D:49:8B
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 44ED093CE97CACCF6DB72C5492B64CF158F44C58
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363235623a3a2f34382d3438203d3e203136393039.roa
Signing time: Mon 12 May 2025 16:18:05 +0000
ROA not before: Mon 12 May 2025 16:13:05 +0000
ROA not after: Mon 11 May 2026 16:18:05 +0000
asID: 16909
IP address blocks: 2a14:7584:625b::/48 maxlen: 48
Validation: Failed, certificate revoked on Thu 15 May 2025 00:42:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
44:ed:09:3c:e9:7c:ac:cf:6d:b7:2c:54:92:b6:4c:f1:58:f4:4c:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: May 12 16:13:05 2025 GMT
Not After : May 11 16:18:05 2026 GMT
Subject: CN=FD0A83D1DA976E70F5655B6BECF86227003D498B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:b5:b6:a0:c9:42:38:75:18:17:01:3a:f9:ad:
f8:58:46:ad:ad:c3:94:10:74:8b:52:ae:a6:ee:d9:
f3:ab:63:dc:82:a1:1e:77:13:d3:a8:69:08:32:02:
1e:f4:ab:97:3a:9d:20:b2:58:a9:22:6d:f2:9f:40:
93:5b:14:d1:58:3f:ab:97:3a:8e:15:fb:dc:f5:02:
d7:8e:df:6d:47:3f:34:0e:44:d9:44:31:05:7a:53:
ad:e6:4b:60:39:9e:f6:cb:60:15:73:d8:41:da:a1:
10:63:d5:b4:93:e1:cf:fd:7c:66:47:33:75:9f:9e:
43:6c:bb:d0:26:ee:e3:dc:8c:53:57:3e:1c:98:4f:
62:cc:ca:b6:aa:10:09:95:04:e4:73:82:85:46:ce:
2d:d7:cf:74:4a:f2:28:42:6b:84:d4:c6:de:9b:b9:
dd:98:f6:46:21:43:aa:9a:cf:a3:8f:b4:94:03:9d:
96:29:18:5b:06:2c:b3:06:a3:7e:a2:c9:2c:9e:01:
a7:7e:f8:71:24:53:89:e5:d5:32:24:82:75:92:5a:
13:69:a4:f2:57:58:74:14:c5:6e:88:b8:2a:a3:d5:
d8:07:4b:60:00:33:78:18:7f:bf:83:6e:c1:21:f5:
5d:f4:00:93:30:fc:3d:44:f4:3a:7b:ee:9c:d4:b3:
80:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:0A:83:D1:DA:97:6E:70:F5:65:5B:6B:EC:F8:62:27:00:3D:49:8B
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363235623a3a2f34382d3438203d3e203136393039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:625b::/48
Signature Algorithm: sha256WithRSAEncryption
b8:76:76:24:e0:e0:d4:17:48:3a:3f:49:f9:e3:5d:05:d2:c3:
94:25:e2:15:f0:7d:88:3c:e6:74:1b:0a:7d:24:d1:ba:1d:dc:
b3:6d:dc:97:99:7c:ba:97:c2:9e:69:4d:d1:54:3e:bd:3e:58:
1c:e8:e2:54:a8:77:fe:72:43:05:55:ef:5a:3d:34:94:fd:e7:
91:94:84:52:91:0e:d3:22:ac:53:dc:4d:e5:75:db:6a:6f:bf:
a5:b6:91:93:bd:82:6c:28:90:a0:5c:f8:9a:6d:a8:28:be:5a:
bb:3f:3a:d4:93:74:2a:30:ef:7c:a0:07:b7:4e:33:f3:4b:71:
0f:a9:d4:28:41:9c:ad:2e:a9:e0:3c:19:3c:bf:4f:06:fb:36:
a9:2a:04:ca:36:f4:b6:69:34:10:d4:8c:43:5d:85:36:b0:0d:
9a:39:7e:2b:4e:bf:31:70:72:4a:d7:62:af:35:b2:57:d4:f7:
1a:7d:17:b6:81:2f:37:8d:04:42:f9:73:48:ec:23:af:54:f2:
7b:32:ce:72:f3:75:ab:29:1e:36:79:43:17:96:a6:78:25:bd:
00:85:3a:54:83:b5:ec:0e:65:00:f0:1c:9c:0d:17:96:56:96:
76:3d:21:c2:7f:44:58:62:ff:99:5e:41:01:c8:9e:da:27:47:
63:b2:56:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 06:19:47 2025 by rpki-client