Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363237323a3a2f34382d3438203d3e203136393039.roa
File: 326131343a373538343a363237323a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier: 2svp7il8BYyxgbHZDLND5joYFXfxuPLMBxgGipqGcpA=
Subject key identifier: A3:7B:83:57:B1:4B:1E:81:23:35:AB:06:79:8E:1A:A8:09:41:AB:45
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 1F68D0F47D7F91FE4A48656DAE6B62C0186DF886
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363237323a3a2f34382d3438203d3e203136393039.roa
Signing time: Tue 13 May 2025 15:54:03 +0000
ROA not before: Tue 13 May 2025 15:49:03 +0000
ROA not after: Tue 12 May 2026 15:54:03 +0000
asID: 16909
IP address blocks: 2a14:7584:6272::/48 maxlen: 48
Validation: Failed, certificate revoked on Thu 15 May 2025 03:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1f:68:d0:f4:7d:7f:91:fe:4a:48:65:6d:ae:6b:62:c0:18:6d:f8:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: May 13 15:49:03 2025 GMT
Not After : May 12 15:54:03 2026 GMT
Subject: CN=A37B8357B14B1E812335AB06798E1AA80941AB45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:b9:4b:3d:85:54:d7:be:86:3e:de:3a:ca:c3:
fb:0f:aa:19:73:78:c8:ba:ae:69:c2:d0:ab:29:1c:
44:89:9d:9b:a6:4d:8a:7c:89:db:34:25:07:e6:23:
b9:7f:6a:de:5f:93:81:1e:5f:25:e4:6a:8f:0c:17:
f2:54:ce:cb:ee:88:73:ae:50:d1:d1:f1:71:3d:0c:
a9:5f:5c:3a:72:36:fc:0f:7d:52:0e:8c:c5:75:6c:
9a:52:24:83:85:a3:03:ab:43:a1:2b:37:24:32:67:
22:52:40:19:7f:46:aa:1a:f6:b3:b0:34:2e:82:dc:
51:26:40:bf:ca:ca:75:b2:84:79:3b:6e:dd:14:9e:
4e:2e:c0:a6:85:25:eb:f2:cb:e7:a6:f9:d3:b1:c0:
0a:59:39:d1:d4:85:32:f1:7c:c3:41:ea:ee:f9:a6:
5b:4c:f1:e4:d6:8d:66:00:4f:26:88:42:c0:1e:34:
d3:35:58:95:34:99:1f:9d:7d:ad:49:f4:91:79:05:
75:41:2a:9d:57:74:db:60:23:40:b4:ef:6e:a4:3a:
af:9c:8d:b0:d1:2b:80:4f:93:25:a8:c6:66:fd:52:
af:06:ca:92:25:68:62:3d:4f:5d:87:8f:c5:d0:0a:
69:c3:15:77:8c:d7:58:4a:08:38:32:d9:9e:90:a2:
23:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:7B:83:57:B1:4B:1E:81:23:35:AB:06:79:8E:1A:A8:09:41:AB:45
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363237323a3a2f34382d3438203d3e203136393039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:6272::/48
Signature Algorithm: sha256WithRSAEncryption
ae:4e:2e:e0:7f:97:5a:9e:28:99:a8:d5:a5:e6:aa:9a:87:75:
92:71:30:d5:c5:5f:18:e8:38:e5:44:e4:78:b1:08:c5:5b:4b:
98:ae:1d:60:78:a1:3c:e3:fc:3b:15:a0:0d:3f:39:60:e4:e6:
77:56:2b:6c:e3:02:85:24:6a:29:ab:33:e5:dc:7d:8b:43:2e:
d6:c6:70:02:cc:e0:76:30:0b:da:9d:35:5f:31:48:57:b8:74:
10:75:f3:a4:33:78:dc:4c:be:fd:ba:d3:1a:c0:48:61:86:b5:
b0:71:a1:4b:c0:ca:38:30:c9:e5:7e:d5:17:d9:e6:aa:99:91:
b5:4a:72:7d:e4:56:bc:ad:c2:47:ba:63:d1:5b:7d:81:62:2f:
83:97:12:0c:ae:b8:e2:d5:b7:71:f4:b2:16:0c:dc:ca:e0:81:
88:2d:02:91:cf:b8:cb:42:14:f8:31:85:af:b4:ab:fe:1a:5c:
f0:c8:b6:54:e6:70:75:78:e0:b8:32:56:51:32:2e:49:77:d5:
49:1a:06:9e:80:9e:64:74:53:c4:23:b7:d5:e5:ff:1a:35:8a:
cd:7e:42:2e:4d:e8:2e:6c:4d:d7:f8:41:b1:6a:6c:3d:f3:b8:
0c:9a:cc:a3:6f:36:65:be:2e:7f:c7:bb:35:89:2b:fd:84:f9:
bd:0f:21:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 05:55:50 2025 by rpki-client