Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363237383a3a2f34382d3438203d3e203136393039.roa
File: 326131343a373538343a363237383a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier: t+a9wwb0TYffnwXKfuqQ1OYVfFnKydALQnoCxf/y0mM=
Subject key identifier: 0A:1B:41:C1:BF:FF:A7:9A:B2:F2:F3:A0:3A:FA:AA:13:C3:01:6F:EC
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 7C12F30A1C47BEE9ECE781D2E7D1CA5445CC2D79
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363237383a3a2f34382d3438203d3e203136393039.roa
Signing time: Wed 14 May 2025 05:36:01 +0000
ROA not before: Wed 14 May 2025 05:31:01 +0000
ROA not after: Wed 13 May 2026 05:36:01 +0000
asID: 16909
IP address blocks: 2a14:7584:6278::/48 maxlen: 48
Validation: Failed, certificate revoked on Sat 17 May 2025 00:18:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7c:12:f3:0a:1c:47:be:e9:ec:e7:81:d2:e7:d1:ca:54:45:cc:2d:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: May 14 05:31:01 2025 GMT
Not After : May 13 05:36:01 2026 GMT
Subject: CN=0A1B41C1BFFFA79AB2F2F3A03AFAAA13C3016FEC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:37:69:04:de:66:b1:92:6e:fa:8d:65:7d:53:
fa:d4:2e:90:d7:7b:39:5d:51:ff:da:78:53:2a:a5:
98:2d:4e:05:9e:82:de:7a:c3:84:81:2d:aa:f1:fb:
f4:01:ef:80:33:4d:2f:ce:ee:1f:cc:94:4d:2a:84:
02:29:87:38:a2:84:f4:75:d7:f2:69:5e:60:41:6f:
70:d7:ab:33:f0:30:3d:e0:d0:e2:f0:a9:d7:3b:39:
a7:ed:79:47:64:42:1a:c5:6a:8f:d7:2b:83:a4:99:
b6:62:05:ba:a5:ca:e1:37:4b:26:01:af:9d:5f:c8:
53:3c:14:5a:54:eb:bf:9b:6d:81:f2:06:85:58:0d:
74:39:0c:14:e0:e8:fa:47:c9:39:0e:22:7f:1a:77:
b4:5b:c6:4a:38:54:fb:f5:18:72:d8:1d:c0:a0:fa:
6b:5b:fc:ae:a4:ea:90:90:73:f4:04:6e:b1:ea:20:
ca:dd:b6:b3:b7:96:4a:16:95:b2:7c:92:74:b0:d1:
42:9c:86:f4:15:52:81:4c:7a:c9:d4:de:0b:d3:aa:
8f:4e:9c:2a:f5:ca:f0:ac:e5:88:8e:a9:c8:60:71:
31:4a:51:97:7b:08:dd:be:7e:0b:e6:79:b8:ce:8a:
dc:44:af:61:76:b9:35:37:09:18:ba:44:bf:87:4e:
c5:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:1B:41:C1:BF:FF:A7:9A:B2:F2:F3:A0:3A:FA:AA:13:C3:01:6F:EC
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363237383a3a2f34382d3438203d3e203136393039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:6278::/48
Signature Algorithm: sha256WithRSAEncryption
87:8e:8f:23:d8:0b:14:fe:01:0b:f8:62:6f:a5:39:4e:5b:9e:
cf:ea:64:1d:e5:5d:2c:b8:3d:66:09:d0:8a:cf:db:8e:4e:fb:
28:54:e3:1b:41:03:b7:b0:42:8b:1b:6d:72:26:59:98:bd:ee:
cd:da:25:9e:35:8c:8e:c7:ad:d7:35:e0:03:c0:95:e8:98:11:
cc:53:a3:e3:b4:76:64:a6:f9:73:dd:d0:28:5c:f0:fd:ae:87:
0b:8d:1d:4c:db:ee:cd:7b:24:74:02:c9:14:57:7d:90:35:3b:
63:cb:3a:5a:15:7e:c9:dd:e2:e3:bb:2d:cc:48:2d:a4:9f:5a:
5e:94:b0:ea:64:65:00:cd:9b:b8:6e:d9:30:64:a8:a5:b7:69:
cc:a5:9c:c3:b3:ac:d6:d2:e3:1e:84:43:c1:93:f6:a9:61:91:
1a:4f:54:ab:c3:b4:21:98:bb:be:d9:9b:5a:1e:3a:11:b3:a4:
e0:51:0a:c6:60:e8:10:8d:0e:74:fe:ea:4e:7b:4b:a1:82:8d:
18:bf:c5:6f:c0:7d:59:01:f3:9c:ee:98:1a:a4:b3:05:e7:6c:
a8:16:02:14:9b:25:8d:56:a5:5e:72:33:7b:00:90:c9:c3:56:
86:e0:aa:4a:61:b8:0c:1a:0e:3f:0b:67:1d:3f:f9:2f:2b:1e:
d9:41:7c:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 06:34:26 2025 by rpki-client