Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363236333a3a2f34382d3438203d3e203136393039.roa
File: 326131343a373538343a363236333a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier: l6N8Y2Dd3ETli+9xNh0q5HuNQPaNChPswTCbQityI+4=
Subject key identifier: E0:62:34:9C:60:D9:2D:F5:5F:47:45:93:2F:74:14:27:CF:E3:73:CF
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 2B3A7A0D42A95B687DC423EB9199F3C274898680
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363236333a3a2f34382d3438203d3e203136393039.roa
Signing time: Mon 12 May 2025 16:18:09 +0000
ROA not before: Mon 12 May 2025 16:13:09 +0000
ROA not after: Mon 11 May 2026 16:18:09 +0000
asID: 16909
IP address blocks: 2a14:7584:6263::/48 maxlen: 48
Validation: Failed, certificate revoked on Thu 15 May 2025 10:42:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2b:3a:7a:0d:42:a9:5b:68:7d:c4:23:eb:91:99:f3:c2:74:89:86:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: May 12 16:13:09 2025 GMT
Not After : May 11 16:18:09 2026 GMT
Subject: CN=E062349C60D92DF55F4745932F741427CFE373CF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:79:5f:97:05:29:3c:3b:6f:60:1c:03:7d:f4:
b6:16:61:f0:1e:4d:bc:30:3d:da:45:ee:5f:9e:dc:
e7:17:4f:cf:77:86:36:06:9d:3c:2d:dc:e7:2e:5f:
e7:f7:4d:f5:1d:21:1c:dd:fa:95:0e:a7:ba:ad:d7:
ae:96:a0:1b:a7:b7:4c:48:30:b6:6d:7b:58:98:ce:
78:0e:e4:cf:7c:11:88:85:4c:d8:c4:ae:ab:41:dd:
63:f4:80:29:6c:c4:45:dd:79:ba:e3:9c:e7:ba:bc:
09:f9:e4:d1:16:f1:a9:06:29:6e:d4:28:17:b8:be:
a7:cc:fd:7b:c2:6d:55:1a:de:ed:ba:38:e7:1e:80:
03:0f:0f:0b:c7:08:c8:95:bf:b5:12:ab:63:07:7d:
a1:09:95:8c:24:74:76:59:47:50:95:f7:92:5b:55:
33:04:bc:7e:6c:6d:81:44:ae:fb:ad:91:bf:10:a7:
af:ca:a3:f6:bc:56:5f:99:04:4c:7a:45:c2:f9:a5:
f7:4d:cc:50:a1:5a:e5:9d:17:e5:0e:2c:01:e1:ed:
1a:c2:26:79:66:d8:8f:37:25:93:6d:12:aa:53:22:
3e:1c:83:76:ea:ec:78:26:fb:d6:b1:ec:83:c0:62:
6e:27:6a:e4:4b:ce:d0:ea:50:f7:1f:db:1b:f1:e8:
d6:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:62:34:9C:60:D9:2D:F5:5F:47:45:93:2F:74:14:27:CF:E3:73:CF
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363236333a3a2f34382d3438203d3e203136393039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:6263::/48
Signature Algorithm: sha256WithRSAEncryption
51:56:58:5a:25:d2:bc:3b:32:e4:3d:9d:f3:af:89:2e:22:b0:
e2:f4:6b:15:af:cd:4a:40:38:65:7c:37:dd:66:00:a9:0e:ef:
29:1e:0e:8d:76:d0:72:fc:b6:a2:3a:42:4f:b1:e6:5e:d8:6b:
36:95:70:9d:fa:20:3f:60:d4:58:9b:74:3a:ae:ec:44:a9:89:
f5:30:0a:10:32:be:73:f1:a5:7e:97:20:58:68:b9:85:d9:ed:
08:b4:c9:5b:68:f4:b5:4f:20:0c:30:38:9d:95:0d:70:d3:bf:
f6:3f:53:e6:8d:de:d5:19:28:15:33:3a:b6:0c:d9:0a:12:9e:
42:a9:51:58:d2:08:bd:11:3c:e1:28:ea:ba:3d:72:e3:fe:ba:
8b:8c:a8:82:fb:cb:56:a4:4e:f4:7a:57:97:4a:19:a5:42:d3:
02:72:ed:a2:e7:0e:be:3c:df:8b:1c:f3:c9:8e:eb:a6:c4:f9:
9a:2c:a6:5c:2b:11:9a:da:fb:2e:11:e8:51:55:3c:a0:81:44:
b3:09:06:fc:bf:f9:53:63:a1:6d:b8:37:f2:d8:b5:cf:ab:a3:
a2:49:5d:fd:13:79:a4:ac:73:33:b2:19:41:95:15:4d:7b:b7:
85:b7:d0:7f:0a:d1:58:56:24:35:50:a0:31:53:48:6d:44:b7:
29:34:a9:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 16:38:29 2025 by rpki-client