Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363236363a3a2f34382d3438203d3e203136393039.roa
File: 326131343a373538343a363236363a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier: Tm1G8jyjW8KvTnNIfbxy+Iwv5jRnVHE7Wu8aRIWAIWs=
Subject key identifier: B5:26:36:07:C0:F1:10:70:80:22:30:3D:27:79:C0:79:76:CE:1F:54
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 02E3D9D979E9B572A3C24BF6D022CD1F8E733943
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363236363a3a2f34382d3438203d3e203136393039.roa
Signing time: Mon 12 May 2025 16:18:06 +0000
ROA not before: Mon 12 May 2025 16:13:06 +0000
ROA not after: Mon 11 May 2026 16:18:06 +0000
asID: 16909
IP address blocks: 2a14:7584:6266::/48 maxlen: 48
Validation: Failed, certificate revoked on Thu 15 May 2025 00:42:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
02:e3:d9:d9:79:e9:b5:72:a3:c2:4b:f6:d0:22:cd:1f:8e:73:39:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: May 12 16:13:06 2025 GMT
Not After : May 11 16:18:06 2026 GMT
Subject: CN=B5263607C0F110708022303D2779C07976CE1F54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:0d:c1:05:c8:3b:55:5b:83:c7:d6:5e:95:e4:
f6:03:c2:cf:c7:5f:16:65:96:d3:29:8d:41:0f:55:
f1:96:38:64:25:7f:ef:8d:bd:8a:21:03:3b:cb:64:
93:e8:95:12:06:6c:a2:0b:25:c4:88:2a:a2:69:ab:
fe:72:90:cb:cb:0c:d4:8a:90:77:cb:ef:ac:24:c5:
52:45:c1:01:8d:3d:85:fa:4e:37:ca:35:4a:1d:ee:
8b:d6:cb:f6:cf:94:55:fd:14:6a:85:3f:be:7e:6b:
b8:54:c6:0f:02:46:d7:8e:4c:35:45:18:cc:fb:93:
0d:ef:ca:4e:10:04:32:8a:6b:39:fb:3c:8f:1a:fd:
18:f0:71:1e:48:f8:92:96:0a:25:e7:90:c2:00:f0:
22:c7:31:0c:33:18:11:88:4a:ec:c6:f2:e2:1b:81:
6a:96:ae:8a:24:78:dc:14:90:fe:a0:9e:4e:60:b2:
87:de:0d:3c:f3:34:ef:22:3a:9c:4c:a0:2a:55:0d:
bd:95:47:57:44:ec:30:92:75:95:cc:75:f3:1c:1e:
cc:b6:1b:ac:21:c7:3e:d4:d1:a9:48:c8:de:1c:fa:
22:a4:3f:c7:13:28:a0:01:3b:00:a0:6d:16:11:b2:
40:44:57:ba:99:c5:98:ad:6b:55:ed:f4:e0:f7:ba:
4c:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:26:36:07:C0:F1:10:70:80:22:30:3D:27:79:C0:79:76:CE:1F:54
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363236363a3a2f34382d3438203d3e203136393039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:6266::/48
Signature Algorithm: sha256WithRSAEncryption
1b:5d:25:71:32:60:0e:89:07:51:ff:90:af:b4:32:5a:c7:ca:
a3:ab:de:a7:18:2c:1f:45:8c:53:de:60:0d:96:a9:2f:b1:39:
e0:85:a7:ba:c7:6f:b4:e6:c4:85:3c:f6:d9:df:86:b1:83:0c:
7e:e4:23:0e:72:f5:19:31:97:09:c5:65:70:19:79:16:0b:18:
50:97:1e:e8:57:d0:70:6d:c1:b4:9c:2c:94:bc:f6:e4:d5:2c:
aa:ff:3f:e0:e1:2e:5c:51:1b:e4:71:54:e8:3d:28:f0:06:27:
97:69:ec:bf:b3:8f:8c:21:94:59:e7:35:43:85:0b:90:80:21:
e0:2a:6f:78:d5:7a:46:45:35:5c:10:fa:bc:fd:49:e7:45:77:
f0:0f:a1:80:30:da:81:2d:4a:f6:ef:bf:07:4f:0f:42:c5:ce:
ba:b7:31:43:27:6e:5b:17:c7:c5:c1:e7:41:8a:6d:ad:36:14:
7c:dc:66:6d:fe:c9:15:23:86:5b:bc:a6:1b:61:c7:bc:97:de:
b4:a6:a3:43:65:77:e1:8d:c1:e4:9e:83:36:f5:8e:fb:4e:ee:
3b:e2:a1:3e:fb:59:72:5f:51:5d:e9:a4:7f:b9:f5:7a:5f:37:
ae:f4:00:b9:b5:3b:22:aa:8a:1f:ba:b7:d1:f3:93:7d:e6:f9:
b9:93:69:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 14:50:20 2025 by rpki-client