Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363237353a3a2f34382d3438203d3e203136393039.roa
File: 326131343a373538343a363237353a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier: dzmeVsf/LkBmzL2APas4z5vKdoVUbaGrwRKGPG9yGPg=
Subject key identifier: 36:F7:F5:73:A9:01:5E:13:0B:97:03:FD:10:56:6C:02:F6:81:7A:C7
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 716EFA96AE42B6A10A5CFE451055E792071A3058
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363237353a3a2f34382d3438203d3e203136393039.roa
Signing time: Tue 13 May 2025 21:36:03 +0000
ROA not before: Tue 13 May 2025 21:31:03 +0000
ROA not after: Tue 12 May 2026 21:36:03 +0000
asID: 16909
IP address blocks: 2a14:7584:6275::/48 maxlen: 48
Validation: Failed, certificate revoked on Fri 16 May 2025 18:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
71:6e:fa:96:ae:42:b6:a1:0a:5c:fe:45:10:55:e7:92:07:1a:30:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: May 13 21:31:03 2025 GMT
Not After : May 12 21:36:03 2026 GMT
Subject: CN=36F7F573A9015E130B9703FD10566C02F6817AC7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:72:70:7c:43:e9:f8:71:b1:6d:35:15:55:d2:
0e:31:17:d8:61:fe:a9:d3:10:20:7d:9f:99:68:98:
2e:c8:24:1e:ef:be:70:33:1a:25:65:3d:dd:0c:41:
76:90:5e:8e:b0:16:2f:87:1d:24:4a:fe:bb:dd:95:
cd:b0:de:69:15:7b:f4:ef:54:e4:ff:35:e9:02:52:
43:80:0f:e7:92:b3:00:87:db:99:25:74:9b:db:42:
48:a8:e6:04:7d:40:75:43:28:a0:4f:95:1f:3d:08:
6e:13:2d:f8:0f:b6:7c:46:71:6f:3c:d6:77:37:92:
c2:88:f4:0d:0e:cd:0b:32:2d:94:63:42:ea:9a:a1:
f6:fd:a0:18:34:21:8f:30:16:2e:fb:b3:c5:c9:9b:
c6:ad:1b:92:6d:3d:62:21:6b:77:fe:a8:2f:2b:84:
d0:6c:8a:fb:78:21:55:49:aa:2b:56:f9:28:43:75:
0c:88:fe:56:72:b3:f4:c2:75:bb:b0:3e:5d:0a:c7:
db:53:6f:df:2b:b4:57:3c:fe:ee:48:cb:cf:3d:5b:
75:d4:d3:75:b3:22:b6:2d:20:28:58:e2:a3:92:05:
1c:0f:15:b9:89:98:af:be:2a:df:30:06:b0:36:c3:
e6:c1:f6:df:73:29:8b:c2:1a:e0:39:ed:72:18:4a:
4d:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:F7:F5:73:A9:01:5E:13:0B:97:03:FD:10:56:6C:02:F6:81:7A:C7
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363237353a3a2f34382d3438203d3e203136393039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:6275::/48
Signature Algorithm: sha256WithRSAEncryption
b7:d4:d6:c0:a6:11:a8:88:cb:1a:78:a4:9c:9f:67:06:16:3d:
53:75:54:1b:19:76:49:18:56:b0:ad:ea:27:91:70:02:d6:8f:
a1:8c:94:5d:f0:be:eb:07:f4:f6:3d:19:84:b6:34:5a:76:88:
94:7d:57:95:8f:8d:2a:7e:41:93:88:b3:17:d8:3b:6d:8b:93:
cb:4d:a1:cc:7e:59:f4:f4:16:21:e2:e9:fb:16:2b:f0:94:49:
e0:64:f5:ac:a8:49:82:61:e9:3c:42:da:05:42:fa:6d:ba:c2:
6e:b9:f6:b7:36:14:41:7c:50:a4:cd:24:4e:ea:4f:85:f2:2e:
ad:ad:40:6b:e1:d2:d1:83:1b:a8:0f:83:25:6b:09:38:1a:c3:
e8:30:50:30:5f:c7:50:74:a4:9b:31:f9:c4:26:55:4c:ad:e0:
ba:65:27:64:81:13:0c:44:1e:6e:c3:bd:27:39:b5:2e:bb:ad:
2f:51:b6:50:ea:a6:e6:88:72:5b:72:07:73:d5:b3:45:cc:50:
f0:9f:e7:e9:6c:a2:95:59:5d:cb:a4:82:79:26:76:24:16:4c:
f2:b5:0a:47:01:39:88:d3:72:4c:22:1a:e1:e3:cb:1b:f7:69:
63:31:13:81:fb:56:81:d5:a8:93:ee:f3:d0:b6:30:38:b4:a6:
aa:45:90:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 06:26:03 2025 by rpki-client