Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363237663a3a2f34382d3438203d3e203136393039.roa
File: 326131343a373538343a363237663a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier: jUx6bcKpwc3hnGH3gTBHLTitpVNAosja/MEAJdotrYU=
Subject key identifier: 80:D4:AD:57:15:AB:02:01:13:65:53:D2:11:4A:E5:4C:0F:76:9C:F7
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 7608818C62645744CBC54D6FD2DAB2A02EC432EB
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363237663a3a2f34382d3438203d3e203136393039.roa
Signing time: Wed 14 May 2025 16:30:02 +0000
ROA not before: Wed 14 May 2025 16:25:02 +0000
ROA not after: Wed 13 May 2026 16:30:02 +0000
asID: 16909
IP address blocks: 2a14:7584:627f::/48 maxlen: 48
Validation: Failed, certificate revoked on Thu 15 May 2025 20:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
76:08:81:8c:62:64:57:44:cb:c5:4d:6f:d2:da:b2:a0:2e:c4:32:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: May 14 16:25:02 2025 GMT
Not After : May 13 16:30:02 2026 GMT
Subject: CN=80D4AD5715AB0201136553D2114AE54C0F769CF7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:c0:ed:86:9f:e1:d0:fb:46:8f:c9:54:43:b7:
15:73:21:7f:6f:49:58:06:3a:55:7d:3d:5c:81:26:
e1:73:5c:19:fa:98:f0:b2:48:1d:a7:38:68:30:50:
cf:72:78:02:5d:6b:40:d1:f7:4a:f4:ed:6b:3e:5c:
69:2c:ca:31:6a:f2:af:fe:a1:65:2b:fe:a5:00:1c:
88:34:81:b5:29:5f:dc:64:57:82:3a:9b:a9:0d:51:
61:80:d6:44:7c:13:84:21:8d:9b:a9:e6:11:38:c7:
c3:b0:6b:4c:e9:22:4b:70:a8:9f:ef:da:a3:90:9f:
98:bd:42:1d:b4:77:1d:43:65:f4:e9:82:94:cc:8d:
cf:54:3a:e4:aa:e7:5e:99:4e:ce:cd:6a:02:bf:f0:
54:ec:38:b3:67:49:06:05:98:ef:2e:fe:1f:6e:c1:
bd:90:24:02:5d:e4:ac:56:15:00:84:68:a9:37:b1:
92:96:41:f2:14:29:cf:8d:2b:a6:f8:36:23:2e:6b:
17:3e:18:bd:61:1e:f5:cd:e1:89:29:8b:9f:7e:ce:
b9:d5:45:9e:f6:68:6c:64:b0:95:80:2b:f1:12:cc:
25:cf:3a:e5:01:31:9c:b7:cd:59:ee:f2:87:04:b0:
58:b0:c4:4a:ef:e5:5a:9e:03:02:f5:be:6d:1b:fd:
a3:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:D4:AD:57:15:AB:02:01:13:65:53:D2:11:4A:E5:4C:0F:76:9C:F7
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363237663a3a2f34382d3438203d3e203136393039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:627f::/48
Signature Algorithm: sha256WithRSAEncryption
b1:b3:97:3e:b1:b1:8d:74:26:6a:27:54:35:0a:2b:22:70:a4:
8d:bf:ba:7c:94:fd:5f:56:be:bc:e7:f8:59:3a:d4:3f:d2:8c:
14:59:72:f2:44:7c:ad:9c:e5:dd:a7:5a:ea:71:1b:1b:a9:49:
81:a6:90:29:ab:d1:c6:3c:23:15:16:90:63:b6:d0:04:40:97:
58:de:09:10:f8:2f:1e:da:50:97:68:31:d7:fa:ce:56:5a:64:
00:43:06:b3:52:c3:8a:66:55:10:93:3e:87:25:53:f9:22:9e:
4a:a8:e1:81:a7:cc:ae:c6:75:a9:e3:41:8c:ac:18:b8:e8:3a:
af:69:63:ba:82:53:ec:84:bd:c6:15:d1:15:e9:08:13:51:a8:
8c:58:35:0e:75:45:b6:fe:25:3e:38:be:31:77:ac:98:ca:6b:
57:c7:4a:50:a3:4c:c9:96:95:06:b9:6e:53:72:f5:55:95:ad:
5c:c7:b0:cd:5f:34:52:68:f7:2d:9c:bc:24:74:b6:ea:c9:d1:
09:ec:2c:61:41:63:a2:a5:80:9a:df:35:73:b4:56:3e:42:7d:
33:40:51:bc:6b:de:ec:76:81:da:ae:34:46:25:db:b7:b3:7c:
16:73:75:53:20:5c:0d:c1:ff:9b:45:2f:7f:12:33:e3:ac:95:
b4:e4:a1:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 04:40:02 2025 by rpki-client