Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363236393a3a2f34382d3438203d3e203136393039.roa
File: 326131343a373538343a363236393a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier: VISQR5MNPrBww5CXQP+8EX/HltiqobBRHFLpPXbxyIo=
Subject key identifier: 5B:82:E5:38:C9:F2:D7:D4:8F:57:6C:45:27:C4:D2:85:04:5B:19:68
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 13F64341C887CC5577B41A3441AACBA8FDE9D5DB
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363236393a3a2f34382d3438203d3e203136393039.roa
Signing time: Tue 13 May 2025 15:54:02 +0000
ROA not before: Tue 13 May 2025 15:49:02 +0000
ROA not after: Tue 12 May 2026 15:54:02 +0000
asID: 16909
IP address blocks: 2a14:7584:6269::/48 maxlen: 48
Validation: Failed, certificate revoked on Thu 15 May 2025 21:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
13:f6:43:41:c8:87:cc:55:77:b4:1a:34:41:aa:cb:a8:fd:e9:d5:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: May 13 15:49:02 2025 GMT
Not After : May 12 15:54:02 2026 GMT
Subject: CN=5B82E538C9F2D7D48F576C4527C4D285045B1968
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:32:fb:97:cb:b9:90:76:52:eb:78:e7:3e:e9:
79:7a:e3:4c:4e:43:b5:1c:b3:b7:78:3c:6a:00:68:
8d:95:bd:f7:1a:69:92:c8:84:fb:b4:0e:c5:1f:ec:
59:81:2d:68:87:c5:a6:5f:84:8c:eb:41:73:bc:7e:
c1:f1:04:a8:e2:7f:22:01:c4:df:1e:a1:9f:1a:8b:
16:98:c0:b7:70:29:a3:98:57:d5:ef:f3:1e:4d:41:
a9:3b:64:c7:d8:50:a6:4e:b4:a1:d1:2e:9d:b1:4a:
c1:f9:17:2d:d9:1d:f5:45:83:2a:b2:aa:8b:ef:bc:
d6:08:9d:23:fd:91:e3:9c:db:d8:f1:a6:44:9e:60:
fa:15:1e:2d:34:5c:5d:21:3f:e0:12:39:e1:e0:3e:
37:19:ee:81:68:fd:11:40:f5:a9:d4:7c:29:a2:40:
ec:28:6f:13:68:0e:3f:d0:0b:93:3a:e1:d4:9c:fb:
ef:72:e1:87:d6:57:47:31:89:c7:25:69:8d:f3:b0:
6d:36:32:f6:6f:bb:de:e9:90:5b:41:06:4b:cd:8b:
36:08:c8:3c:6a:55:eb:c1:4a:a8:c8:0f:7a:9a:61:
de:69:8e:9a:4f:b2:3d:d0:68:57:61:f3:7f:8b:21:
04:28:6f:54:9d:e4:b1:d6:11:5e:22:ee:44:ae:16:
a9:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:82:E5:38:C9:F2:D7:D4:8F:57:6C:45:27:C4:D2:85:04:5B:19:68
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363236393a3a2f34382d3438203d3e203136393039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:6269::/48
Signature Algorithm: sha256WithRSAEncryption
02:23:75:47:76:f4:44:e4:6e:38:79:cb:53:65:e5:a8:0a:39:
ec:26:46:15:5a:2b:91:7b:7a:d3:fa:cc:0f:4b:40:59:14:4a:
31:d2:c9:9b:6d:b7:8d:09:2c:08:2b:52:69:0a:de:87:fc:77:
6f:dc:65:4a:d6:5d:6a:d7:50:35:3e:e7:66:6b:ac:90:92:be:
41:3b:4b:5b:e9:87:31:59:2a:3b:72:bd:88:9f:24:7a:cf:2a:
32:9e:b4:29:59:01:20:fa:24:29:e6:cb:0d:d8:da:2b:9f:8b:
86:ae:71:81:f5:8f:41:66:d6:59:1f:6c:af:37:47:f2:56:da:
6e:31:30:d0:dd:55:ca:66:38:34:2d:96:27:72:50:a0:cc:d1:
cf:f1:81:f3:6c:b7:a5:1b:98:e4:5f:4e:a0:1f:e4:f1:21:c2:
55:35:67:d2:45:ae:6e:19:28:82:1c:c4:4c:7d:c5:18:7e:83:
d0:95:d4:b5:b6:25:12:b7:14:cc:44:3d:c0:08:83:35:d8:06:
22:4b:c1:42:bf:ba:2f:41:b8:b8:7c:3e:3a:aa:86:dc:e0:67:
fe:73:1c:82:3a:23:f4:3d:cb:b8:6a:5b:91:46:89:f0:34:e0:
bc:38:70:7a:1d:70:8b:d9:28:d2:8e:38:3b:e2:e4:05:a9:19:
b5:90:8b:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 11:20:31 2025 by rpki-client