Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363238313a3a2f34382d3438203d3e203136393039.roa
File: 326131343a373538343a363238313a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier: 9g7eFX+CCPto+xHoSaQ2JtoO9xQRjDsXMKWrCB302P0=
Subject key identifier: 48:7B:53:F2:8B:2E:7F:66:32:D8:2C:D4:03:5C:91:39:6F:01:7F:82
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 09C605A267165819063A1A67668A3787DC5CC6B7
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363238313a3a2f34382d3438203d3e203136393039.roa
Signing time: Wed 14 May 2025 16:30:02 +0000
ROA not before: Wed 14 May 2025 16:25:02 +0000
ROA not after: Wed 13 May 2026 16:30:02 +0000
asID: 16909
IP address blocks: 2a14:7584:6281::/48 maxlen: 48
Validation: Failed, certificate revoked on Fri 16 May 2025 22:48:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
09:c6:05:a2:67:16:58:19:06:3a:1a:67:66:8a:37:87:dc:5c:c6:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: May 14 16:25:02 2025 GMT
Not After : May 13 16:30:02 2026 GMT
Subject: CN=487B53F28B2E7F6632D82CD4035C91396F017F82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:9f:7f:a9:d8:63:75:c2:f9:8f:85:77:03:84:
be:22:56:42:6c:9d:4e:d2:4f:54:92:26:e1:6d:2e:
5a:76:bb:a7:8d:e2:d6:11:0b:e2:3a:f7:7d:b6:61:
c5:10:d0:2c:0d:48:27:29:91:a7:59:64:af:e7:74:
55:34:9c:8f:1d:3e:36:7e:a3:29:2a:26:23:32:a1:
71:2f:98:eb:86:61:ef:43:d6:26:62:cb:0c:89:e9:
b7:c8:0a:8a:da:c9:bf:e4:91:d4:07:1b:43:13:09:
e4:7e:d1:a4:4b:cd:03:a0:67:c6:87:24:3e:11:37:
7c:9d:8d:26:ef:9f:a7:b7:d8:24:8e:65:06:4e:fb:
7b:8a:82:61:bf:41:a5:a4:f9:bb:09:86:cd:da:c3:
76:42:cb:7b:d4:73:dc:0b:19:43:12:c4:83:48:49:
b4:04:39:24:24:b7:b0:d3:d2:2b:29:15:5e:a6:2a:
cd:eb:e3:81:14:7f:25:73:39:c8:be:0c:06:2e:76:
52:46:67:2a:33:d8:fd:7b:c9:ea:37:5e:ca:57:74:
9a:91:b0:56:90:1b:1d:02:25:e9:9e:75:82:c4:03:
9d:f1:6b:56:7e:41:77:47:e5:f4:9e:0f:7b:2b:2c:
16:cd:73:f5:f4:bc:a8:5d:ae:60:f5:7b:fd:0a:2d:
3f:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:7B:53:F2:8B:2E:7F:66:32:D8:2C:D4:03:5C:91:39:6F:01:7F:82
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363238313a3a2f34382d3438203d3e203136393039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:6281::/48
Signature Algorithm: sha256WithRSAEncryption
7a:f9:6f:bc:fa:18:7e:a2:de:95:b1:be:50:07:19:2a:c0:a2:
45:26:9a:b4:7c:4a:16:9c:0c:dc:66:cf:4c:6b:0b:06:a5:2b:
6a:e7:be:e4:f4:10:8e:ea:c0:92:8d:dd:0f:e2:2a:dc:83:20:
d9:c3:13:e4:cb:cd:89:c4:d8:f1:f3:6a:1a:3d:c6:2f:3d:b7:
25:cb:37:9c:1d:c9:ec:a0:a6:bd:88:46:88:db:c9:5c:79:9d:
b2:18:53:8b:fb:42:87:44:12:4e:c9:96:36:96:8d:14:83:bf:
c9:6d:29:e4:bf:34:46:44:24:cd:05:c9:0d:c0:e3:29:58:e2:
c0:a1:b9:48:a9:32:33:cf:bc:b4:9e:91:90:98:61:df:a3:85:
52:3c:0a:a4:0a:da:20:d3:fb:fb:85:a9:fa:6b:34:45:81:c6:
1f:1b:16:73:67:72:b0:c7:b0:60:cc:2c:34:63:68:39:77:68:
f5:bd:9b:f7:8f:e6:70:d7:77:41:39:fd:ef:57:26:85:62:f7:
b4:6d:66:f0:10:57:f6:fe:3e:97:c6:c8:a5:84:01:cc:a8:cd:
21:10:1a:71:49:69:9d:31:99:c9:c5:d9:4d:62:15:c2:45:1e:
00:99:20:9c:7a:5b:bc:5c:36:40:f2:15:6e:4d:b4:fd:7f:84:
ce:85:b4:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 07:15:34 2025 by rpki-client