Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363239313a3a2f34382d3438203d3e203136393039.roa
File: 326131343a373538343a363239313a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier: 6GLumW+/CHQB1M338WNxOWz+jO++JHEv796JMZrenN4=
Subject key identifier: D2:38:08:65:02:D2:33:16:AF:9C:4E:9F:2B:FC:34:7C:E6:2E:47:5F
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 0EE7576DBA4CEEC48DCF466A0DCE354D697E78B2
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363239313a3a2f34382d3438203d3e203136393039.roa
Signing time: Thu 15 May 2025 14:42:01 +0000
ROA not before: Thu 15 May 2025 14:37:01 +0000
ROA not after: Thu 14 May 2026 14:42:01 +0000
asID: 16909
IP address blocks: 2a14:7584:6291::/48 maxlen: 48
Validation: Failed, certificate revoked on Sat 17 May 2025 09:48:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0e:e7:57:6d:ba:4c:ee:c4:8d:cf:46:6a:0d:ce:35:4d:69:7e:78:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: May 15 14:37:01 2025 GMT
Not After : May 14 14:42:01 2026 GMT
Subject: CN=D238086502D23316AF9C4E9F2BFC347CE62E475F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:02:d3:a3:5b:47:84:64:37:c8:87:9a:e9:97:
3c:08:8a:92:70:b3:70:40:77:11:18:3e:7d:a0:5c:
77:b1:40:fc:31:41:c6:14:60:86:6d:f6:02:af:11:
43:f9:d3:ce:ca:88:1a:b1:b6:dd:95:63:07:41:6b:
49:e6:fa:07:6e:a2:07:04:4f:b3:b9:5f:fc:59:2b:
9b:66:24:bb:d7:ab:ab:ce:1a:3a:88:bd:e8:95:41:
92:a7:5f:a5:dd:04:c8:9b:0a:2a:89:d2:51:26:46:
8b:42:1b:da:85:86:15:42:d6:b5:c0:2b:1f:6e:59:
84:f4:a7:68:ef:7c:a4:56:d8:36:de:11:8c:e5:7f:
cd:d9:59:2f:83:98:00:47:e9:36:ef:22:3c:3a:0b:
1b:94:f2:17:0e:42:cb:66:4b:72:05:a4:69:59:a1:
15:25:34:56:35:9b:3c:41:a2:22:18:8c:46:11:33:
bf:4f:32:38:1a:dc:3b:9b:3c:0b:2a:6b:16:72:f9:
9b:93:41:96:6c:01:a7:30:ae:04:22:e8:e0:68:3e:
af:9c:84:89:d7:93:24:e0:65:2c:5e:41:2a:91:80:
d5:a0:d3:3d:84:3a:57:15:52:63:9a:ff:42:fb:52:
ef:55:c7:40:93:b3:08:dc:43:06:c6:d5:75:21:8b:
c7:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:38:08:65:02:D2:33:16:AF:9C:4E:9F:2B:FC:34:7C:E6:2E:47:5F
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363239313a3a2f34382d3438203d3e203136393039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:6291::/48
Signature Algorithm: sha256WithRSAEncryption
b8:c1:bb:bb:da:77:5b:ee:17:1b:ad:8a:13:1d:67:3a:50:b9:
98:34:b7:60:56:03:c0:32:58:04:0c:ec:d1:62:59:62:49:4a:
a0:42:c5:65:85:2d:41:b5:92:9d:fe:9b:ac:0c:1a:a4:cf:95:
26:8f:cc:47:08:28:f1:b3:67:27:24:9f:16:82:ce:69:dd:da:
10:7f:d9:7a:4e:16:6c:f5:33:bb:06:e3:89:e2:f0:a2:bb:a5:
47:f2:d5:59:65:7e:e2:a1:bf:c9:a5:0a:a0:da:b6:3c:2c:7d:
9f:9d:1b:5a:6c:ee:5e:66:b7:5c:38:c2:11:8e:f4:9e:2b:41:
37:60:58:51:33:d0:b7:91:1f:9b:e4:f3:93:36:08:f2:b9:ea:
9d:d9:dc:7a:75:87:95:b6:2f:40:df:e2:15:05:5d:0e:68:9f:
34:cf:cd:70:b4:17:6f:ac:55:4f:01:60:7d:d5:57:15:69:f0:
34:0e:bc:58:e7:0c:c6:b9:60:9d:96:76:0c:ed:e0:99:3c:34:
f4:46:92:90:65:ab:d0:2f:43:ef:ec:21:b5:c4:85:44:1b:9a:
cc:e0:d6:41:56:01:ed:b5:86:a6:a9:54:97:35:75:64:84:80:
14:86:3c:24:3c:a9:db:1e:e6:d7:1f:b7:a4:25:e8:ec:47:90:
df:ac:9d:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 07:37:58 2025 by rpki-client