Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363237313a3a2f34382d3438203d3e203136393039.roa
File: 326131343a373538343a363237313a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier: rWtVX28l8U+g1bfeTWrqr8cdzZ4NswgzqLFh/WhJnZ0=
Subject key identifier: 3D:63:4C:4A:29:16:8C:F2:40:1D:5C:60:5E:AE:53:41:CE:40:75:E5
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 54F1CFE3070EBC7E089E873363D7E567FB321AAA
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363237313a3a2f34382d3438203d3e203136393039.roa
Signing time: Tue 13 May 2025 15:54:04 +0000
ROA not before: Tue 13 May 2025 15:49:04 +0000
ROA not after: Tue 12 May 2026 15:54:04 +0000
asID: 16909
IP address blocks: 2a14:7584:6271::/48 maxlen: 48
Validation: Failed, certificate revoked on Thu 15 May 2025 20:12:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
54:f1:cf:e3:07:0e:bc:7e:08:9e:87:33:63:d7:e5:67:fb:32:1a:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: May 13 15:49:04 2025 GMT
Not After : May 12 15:54:04 2026 GMT
Subject: CN=3D634C4A29168CF2401D5C605EAE5341CE4075E5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:1c:1c:24:99:05:ee:e8:cc:e5:1b:2a:20:c7:
4d:84:77:63:75:de:d3:e5:58:6e:dd:e6:2a:3b:40:
d6:34:eb:09:18:25:6d:8c:47:e4:57:91:cc:c2:05:
d0:e8:39:b9:f2:81:a7:30:cb:44:d9:8d:73:b4:76:
25:34:55:c1:a8:25:14:44:dc:3f:24:f7:35:f4:da:
d3:74:78:3b:46:a9:90:39:87:b6:03:cd:60:e9:e6:
24:42:be:4b:39:30:b5:d4:db:cc:e2:06:98:86:42:
3b:c3:bd:ed:e0:6c:80:88:c8:a0:5f:43:83:34:ab:
e7:cd:02:a8:79:05:c4:69:f5:03:15:3c:e7:37:84:
b9:1d:29:13:3f:46:98:b4:fc:38:ca:a0:53:56:3d:
d3:97:da:6d:31:b0:cf:03:d8:14:bb:76:4b:20:35:
d4:8d:b3:fd:57:f2:4b:6a:7e:ea:54:a0:01:c9:83:
69:a2:06:f6:39:95:3c:73:91:b1:6d:3c:bf:ff:0b:
8c:c4:3d:c9:14:04:24:7e:78:91:85:37:61:2f:2a:
98:d3:9d:74:ef:37:b4:93:4f:74:1f:2d:f1:14:1d:
c6:5c:28:c6:4a:25:e2:86:90:e3:2d:b0:fe:b6:ef:
4d:a4:be:cc:d5:4c:1b:b3:03:58:84:44:ce:b9:5e:
e9:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:63:4C:4A:29:16:8C:F2:40:1D:5C:60:5E:AE:53:41:CE:40:75:E5
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363237313a3a2f34382d3438203d3e203136393039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:6271::/48
Signature Algorithm: sha256WithRSAEncryption
a3:70:4d:b2:36:34:0a:f0:91:d1:2e:48:bb:b7:73:bc:bf:e5:
ae:9a:09:46:06:06:9f:71:93:be:0c:4a:29:2b:1d:01:6a:17:
28:83:49:46:72:7e:c7:0b:16:93:90:80:7c:3f:8d:c0:1d:c8:
00:3d:cd:3a:42:64:cc:bd:50:35:30:7a:83:a3:9b:72:39:30:
ef:7d:a1:c1:aa:7c:a2:7a:38:2e:38:51:64:b4:aa:28:99:40:
3b:ad:1c:8e:7a:4c:4f:03:ae:42:69:7f:cf:07:99:70:ab:00:
25:d1:36:07:a6:2a:ec:22:91:f3:a9:af:0b:8a:be:ee:9e:c4:
2e:b1:40:e7:bb:c6:ee:50:61:9c:bf:2f:b3:fb:a6:c1:41:91:
6c:bb:8f:83:90:81:a6:e0:a9:92:59:48:07:0a:d1:15:e5:ea:
31:5e:85:75:ad:b3:e9:cb:39:63:f0:56:db:88:cc:2a:d7:04:
29:18:5c:9c:b6:16:d0:8e:5d:d2:1d:0b:3d:97:25:f4:04:e0:
1a:5d:c7:ae:46:95:c6:98:b6:11:3d:b9:8b:e5:00:36:9c:0e:
29:55:d4:da:2a:ee:21:56:6d:fb:87:50:e6:cc:94:01:bc:4b:
c3:e7:95:97:e3:7b:b1:8d:5c:16:c5:58:73:69:89:08:33:a5:
4f:22:ef:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 02:42:41 2025 by rpki-client