Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363236633a3a2f34382d3438203d3e203136393039.roa
File: 326131343a373538343a363236633a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier: n7rmJrHjetiDXKGFygjWPgF3urPbzVgcfqjaWs6Tiyg=
Subject key identifier: 53:AA:71:4A:7D:6A:C8:74:47:35:96:BA:2F:D3:FD:63:31:70:6A:BB
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 3C0F9E6657B61128F58918C540B593FEBD6930E3
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363236633a3a2f34382d3438203d3e203136393039.roa
Signing time: Tue 13 May 2025 15:54:03 +0000
ROA not before: Tue 13 May 2025 15:49:03 +0000
ROA not after: Tue 12 May 2026 15:54:03 +0000
asID: 16909
IP address blocks: 2a14:7584:626c::/48 maxlen: 48
Validation: Failed, certificate revoked on Fri 16 May 2025 08:06:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3c:0f:9e:66:57:b6:11:28:f5:89:18:c5:40:b5:93:fe:bd:69:30:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: May 13 15:49:03 2025 GMT
Not After : May 12 15:54:03 2026 GMT
Subject: CN=53AA714A7D6AC874473596BA2FD3FD6331706ABB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:14:45:37:14:8d:ef:80:ba:a0:4d:99:8d:db:
8a:31:a5:bf:8c:ee:d2:0e:24:eb:b3:87:da:ba:e9:
e2:c9:bc:db:e6:07:d0:de:3b:be:32:f6:e4:28:b2:
c5:9a:d7:ad:d2:28:f2:ff:f2:4e:f0:4e:ca:2c:3c:
12:23:56:9f:96:c0:35:15:13:06:06:ff:41:4a:53:
e3:c2:1d:bf:c8:07:9a:fe:bb:b1:d8:8c:8a:ca:d9:
08:a0:9c:bf:30:23:38:37:1d:8c:28:d1:c8:2f:11:
0e:65:75:7f:16:3c:08:bd:20:cd:4b:04:61:89:c7:
b9:04:c8:83:f1:16:32:61:a5:d8:34:39:0f:cd:ab:
27:86:7d:bb:9d:29:c5:37:b4:f8:1c:27:4e:d7:2f:
89:a0:c8:62:c8:e9:df:d0:3d:c2:3c:76:54:58:f4:
84:09:e8:ff:00:4d:f3:a1:b1:37:d8:bb:72:1f:f2:
c9:ab:08:f1:e5:21:7a:1d:be:b1:40:9e:97:e8:7b:
32:1b:10:2e:17:0b:dc:8a:88:a0:fe:c0:a7:32:8a:
28:5d:84:13:32:76:ad:9e:f5:a4:f5:be:97:63:25:
9e:7e:70:85:5b:88:59:c3:20:ca:bc:bc:f1:2b:ee:
2a:96:35:2c:b6:28:2e:2e:c5:5e:af:34:33:42:8b:
e3:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:AA:71:4A:7D:6A:C8:74:47:35:96:BA:2F:D3:FD:63:31:70:6A:BB
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363236633a3a2f34382d3438203d3e203136393039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:626c::/48
Signature Algorithm: sha256WithRSAEncryption
9e:e5:ed:be:72:64:13:44:01:f8:d5:d5:09:36:1b:2d:8b:18:
34:6e:be:03:92:20:83:42:41:6b:bb:8a:89:6d:e2:36:9c:1c:
f7:9b:9c:de:1d:38:c6:35:3e:c6:93:7a:c2:5c:5c:44:c5:81:
bc:a1:8d:6f:e4:1e:39:6d:ff:34:e8:2a:5e:21:22:52:f9:37:
97:1f:99:68:34:ad:f3:f4:59:0a:ca:29:bb:1f:5f:68:b6:d4:
92:41:6a:be:72:c1:77:e7:28:22:b9:54:c8:8a:a3:43:96:0e:
b5:da:d5:d2:79:91:a9:af:c8:55:d7:92:5f:5a:1b:55:9b:33:
c6:1c:68:9b:5e:4c:8f:14:66:20:0e:40:f6:b3:d3:80:d4:a1:
3f:08:79:60:b5:f4:1e:6d:e3:40:14:d9:64:9b:69:09:2b:78:
c5:77:97:45:df:f1:63:9d:78:01:7b:6b:88:58:fe:27:9d:70:
00:7e:13:22:c2:90:3a:98:a0:93:b6:58:a3:a7:8e:2a:bb:1e:
0f:d6:19:89:f7:9e:38:b9:17:e0:49:08:0c:6d:35:ad:1c:5f:
ed:49:1b:2e:23:65:f8:ef:dc:04:73:f9:49:c6:83:77:97:0a:
5e:8e:de:58:6d:2f:ce:1e:cc:12:9e:7b:bf:c9:dc:35:bf:95:
1d:38:e8:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 02:40:50 2025 by rpki-client