Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363236383a3a2f34382d3438203d3e203136393039.roa
File: 326131343a373538343a363236383a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier: 5BC93ZwlmKxoRG9PimZQE7teKwsRR0kyzCIwItAeLEI=
Subject key identifier: 94:26:70:46:64:1C:18:EE:A0:5D:F2:67:67:2B:AE:A0:15:24:2A:EC
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 43EF5C378866E4D40B0B65CD01F5D55AC51A6DDD
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363236383a3a2f34382d3438203d3e203136393039.roa
Signing time: Mon 12 May 2025 16:18:07 +0000
ROA not before: Mon 12 May 2025 16:13:07 +0000
ROA not after: Mon 11 May 2026 16:18:07 +0000
asID: 16909
IP address blocks: 2a14:7584:6268::/48 maxlen: 48
Validation: Failed, certificate revoked on Thu 15 May 2025 21:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
43:ef:5c:37:88:66:e4:d4:0b:0b:65:cd:01:f5:d5:5a:c5:1a:6d:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: May 12 16:13:07 2025 GMT
Not After : May 11 16:18:07 2026 GMT
Subject: CN=94267046641C18EEA05DF267672BAEA015242AEC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:b4:1b:a2:b8:8f:75:56:13:fa:f4:9d:22:48:
0d:75:1b:74:9d:0f:97:5d:4e:de:71:f6:31:6e:f3:
fc:ea:5d:17:f3:b3:bb:7e:e7:16:b6:9b:b8:86:12:
31:44:1f:f2:40:4a:fe:96:45:65:00:2c:80:c8:95:
2c:4f:db:c3:69:6f:f4:93:5f:ee:e3:bc:c3:ec:d3:
ce:84:aa:36:1a:af:40:2f:52:b4:32:4a:8c:01:30:
36:13:86:f7:e7:7d:21:e9:d0:a0:15:62:d8:7e:b5:
cc:cb:d1:a0:f7:ed:02:fb:65:db:56:2e:a0:13:bb:
00:5c:63:14:48:bf:31:af:3e:c6:2e:fb:3c:8d:10:
9a:3e:bb:b1:06:36:5f:a3:3a:6a:a1:ea:87:ed:ae:
9a:65:16:cc:8f:fa:d5:15:44:17:fa:19:6c:87:08:
cc:16:34:9c:db:a0:39:93:e3:ee:5d:00:5d:42:90:
86:74:80:3b:48:c4:6c:26:1b:5b:3f:8f:de:c2:9d:
65:ec:52:84:4e:84:eb:83:05:16:bf:50:b6:b1:b5:
80:f1:99:b6:b2:2e:2a:97:dc:4d:f1:2a:20:ea:1d:
18:61:0b:be:88:b7:f2:71:9c:19:96:a0:2c:20:26:
61:ae:b8:72:92:b7:35:80:9c:69:28:8a:13:db:3b:
cb:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:26:70:46:64:1C:18:EE:A0:5D:F2:67:67:2B:AE:A0:15:24:2A:EC
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363236383a3a2f34382d3438203d3e203136393039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:6268::/48
Signature Algorithm: sha256WithRSAEncryption
81:4e:aa:d1:29:10:61:e6:fb:88:4b:fe:28:dd:63:76:a8:9c:
2d:9b:7a:fe:f5:10:af:6b:32:cd:26:5c:cd:35:62:53:dd:80:
99:99:f1:da:c5:c7:f9:cb:d5:4b:0c:63:91:50:c4:d2:d6:59:
f7:03:a8:96:d1:45:97:ea:3d:c5:67:01:b6:6f:f7:72:34:6c:
d2:2c:6a:02:c7:54:5e:35:6a:66:b5:ca:e1:c4:88:2f:f2:bd:
25:c6:a8:7c:78:3e:d6:71:e5:8c:07:29:3e:bc:3b:18:ba:f3:
77:34:fb:ab:1a:6f:d4:b4:52:32:3b:86:76:13:2a:e0:c8:4c:
b6:08:ea:a0:77:dd:3b:d8:8a:0a:3f:da:d1:ef:7c:04:71:89:
eb:5d:47:07:f2:b8:a9:89:2d:cb:da:2b:7f:11:c0:17:80:66:
f0:3d:b4:94:19:fd:b7:e2:0f:f6:26:c9:8f:64:0d:df:c5:46:
58:d7:0f:0d:3e:bc:0f:9f:da:db:08:f3:7b:da:e3:92:df:85:
2c:5a:64:7a:df:ab:bd:1b:d5:02:30:92:8f:0c:93:a7:9c:cc:
73:20:a5:f0:a3:a2:46:7e:4c:de:fb:0f:52:56:a6:23:a2:a3:
5b:db:15:20:bd:54:dd:bf:fc:e8:da:c8:15:0d:b3:f2:bd:b8:
4c:63:3b:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 16:39:50 2025 by rpki-client