Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363238633a3a2f34382d3438203d3e203136393039.roa
File: 326131343a373538343a363238633a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier: +ATxlexCtzURJUoDFbqCVfutoqLB/hEhlYK3rG/Ozjs=
Subject key identifier: 73:CB:04:15:A3:F1:AA:75:0F:6F:84:E8:DA:BB:B6:21:90:67:29:8A
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 14907C7377A8929FFBF85181CB7032CA326AA539
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363238633a3a2f34382d3438203d3e203136393039.roa
Signing time: Thu 15 May 2025 00:48:01 +0000
ROA not before: Thu 15 May 2025 00:43:01 +0000
ROA not after: Thu 14 May 2026 00:48:01 +0000
asID: 16909
IP address blocks: 2a14:7584:628c::/48 maxlen: 48
Validation: Failed, certificate revoked on Fri 16 May 2025 10:48:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
14:90:7c:73:77:a8:92:9f:fb:f8:51:81:cb:70:32:ca:32:6a:a5:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: May 15 00:43:01 2025 GMT
Not After : May 14 00:48:01 2026 GMT
Subject: CN=73CB0415A3F1AA750F6F84E8DABBB6219067298A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:35:f4:39:ad:59:55:e8:9f:be:aa:e3:1e:75:
8f:fb:71:b2:74:4c:bf:42:0b:8c:0d:bb:6a:74:60:
3b:b3:4d:d3:f5:26:6d:09:3c:ec:05:df:94:29:21:
5b:47:cd:16:66:f0:18:4b:0d:d5:3e:0c:6f:c4:f1:
70:b4:da:55:e8:68:0d:0a:03:44:f4:42:47:aa:14:
9c:5f:d6:60:05:08:e3:31:db:97:76:3f:38:8e:1b:
24:b1:8d:e4:b6:e1:5a:95:8c:64:56:d5:e6:48:9d:
65:5d:36:28:11:33:55:d0:3c:36:36:50:d1:ab:f5:
93:22:03:f3:7f:86:1d:d1:3a:0c:1f:f3:be:6f:c7:
df:1b:2f:c4:0c:f3:03:47:a0:f8:44:4d:d4:1d:30:
f3:9f:fd:bb:e7:b4:66:ce:45:79:9a:e3:1e:0b:e3:
87:e9:2c:77:b6:4f:d3:7b:5b:a9:59:2d:85:ae:a9:
eb:d8:82:af:2a:0a:12:06:61:02:17:8f:42:54:9e:
d4:ea:6a:b1:13:8e:88:a7:e6:6b:94:5a:cc:8b:05:
49:aa:96:4a:0f:bc:2a:4f:21:e0:6b:ad:30:29:2a:
4c:e7:b2:bd:ae:2c:71:c7:d7:81:d8:93:07:8e:40:
e5:08:c1:73:e2:ca:c6:f8:39:d3:33:cf:09:b0:13:
17:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:CB:04:15:A3:F1:AA:75:0F:6F:84:E8:DA:BB:B6:21:90:67:29:8A
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363238633a3a2f34382d3438203d3e203136393039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:628c::/48
Signature Algorithm: sha256WithRSAEncryption
94:90:08:e1:41:fa:fa:3a:10:51:c5:f6:b0:5f:88:81:8e:99:
43:75:ad:4b:ac:16:21:2b:1e:90:c5:16:ae:0e:a3:a6:16:03:
17:02:36:4e:c9:89:96:1b:d4:5f:8a:c6:c3:a1:bf:e2:87:16:
67:a3:eb:49:f2:39:6b:81:54:ed:23:cd:4d:5b:2a:99:66:4d:
dd:1a:88:9d:63:79:0b:0f:f9:7f:4f:71:6d:7d:c9:e3:2d:c2:
d0:cc:2f:d8:fd:db:d8:81:8a:b0:48:0f:0c:de:38:69:4d:7a:
fc:c0:95:97:04:83:cb:6b:53:d7:65:03:3d:d8:c4:76:a2:df:
bb:d1:76:1d:e1:62:b1:da:b9:87:99:24:2f:82:5a:a5:3e:83:
be:09:20:af:ab:e5:aa:55:4f:14:51:be:22:96:f8:57:57:29:
8a:c2:e7:9c:c0:e4:c5:58:12:a8:1f:da:ff:05:43:b2:c9:1f:
7b:64:ce:9e:92:7e:38:19:b0:6d:4f:b9:63:7d:c1:b3:2a:7e:
83:f4:22:d6:fa:27:2b:6e:ab:b3:47:d9:98:a1:84:27:85:d0:
22:ae:53:ce:5c:41:2d:ea:8c:4f:e9:76:ac:cb:6d:c3:67:5f:
12:b8:c4:ca:d1:8b:e6:0f:45:ab:c5:44:c1:64:4b:88:39:8f:
93:72:c3:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 06:03:33 2025 by rpki-client