Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363239373a3a2f34382d3438203d3e203136393039.roa
File: 326131343a373538343a363239373a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier: dtU+H6sE2cCGdz56uHn2XBSnZ6T+gLd+DUPWmzxUVZ4=
Subject key identifier: 50:84:F0:6B:4A:21:65:7A:E0:E7:AB:12:AC:12:F4:67:91:F5:64:39
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 3749416713E1341020C024632887246BED727904
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363239373a3a2f34382d3438203d3e203136393039.roa
Signing time: Thu 15 May 2025 21:06:03 +0000
ROA not before: Thu 15 May 2025 21:01:03 +0000
ROA not after: Thu 14 May 2026 21:06:03 +0000
asID: 16909
IP address blocks: 2a14:7584:6297::/48 maxlen: 48
Validation: Failed, certificate revoked on Sat 17 May 2025 18:30:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
37:49:41:67:13:e1:34:10:20:c0:24:63:28:87:24:6b:ed:72:79:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: May 15 21:01:03 2025 GMT
Not After : May 14 21:06:03 2026 GMT
Subject: CN=5084F06B4A21657AE0E7AB12AC12F46791F56439
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:44:94:db:20:a8:ca:3f:87:1a:85:c9:46:fb:
68:77:df:55:2a:6d:14:80:81:5e:46:73:13:3e:5e:
aa:1c:33:74:68:2c:3f:b3:b6:36:1c:7f:f3:c5:54:
de:3f:b4:e3:e7:84:7e:bb:4e:af:70:4d:8f:a2:27:
f2:2e:3f:7b:7b:54:0f:9e:2e:bd:64:fb:91:1d:ba:
5f:12:0a:b0:37:2f:6a:19:6a:6d:5e:67:b3:e3:74:
64:ee:38:0d:5d:bb:59:b0:64:c3:ba:a7:51:bb:c5:
34:73:be:9f:e0:96:06:38:18:c3:96:b9:97:d1:a9:
ab:a9:73:64:bc:4a:92:4d:75:a9:e6:df:20:08:8d:
6d:c2:30:3a:24:00:8c:18:2a:64:47:ff:78:eb:aa:
30:46:77:22:e4:d9:15:95:12:a6:9f:03:c8:be:23:
a6:f1:cf:07:57:8b:f8:0d:5e:50:62:fe:65:9a:d3:
e1:5e:c7:3e:ec:8c:e4:a9:0c:a6:a0:81:ca:b2:ae:
c8:7f:fd:9d:36:0c:ec:2d:6b:01:7d:c8:7b:fe:00:
cf:5f:4b:31:11:a2:61:05:4a:36:47:31:40:c5:fe:
3e:08:e9:9a:16:b2:e1:5b:41:a1:71:83:25:f3:f5:
83:22:d3:2e:9d:96:b1:a8:16:b7:ff:cb:c7:62:2e:
40:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:84:F0:6B:4A:21:65:7A:E0:E7:AB:12:AC:12:F4:67:91:F5:64:39
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363239373a3a2f34382d3438203d3e203136393039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:6297::/48
Signature Algorithm: sha256WithRSAEncryption
8d:7a:87:9d:32:7b:5e:dd:62:c3:7e:6e:0f:cb:29:c0:4f:6d:
54:75:f7:ab:06:55:8a:04:5d:ed:dc:7e:e8:a7:22:81:0a:33:
fa:3b:f2:8d:c7:96:65:37:09:39:4f:1b:22:98:bf:3f:26:ce:
7d:8a:5b:a1:5e:94:d1:96:64:fa:13:78:c4:50:00:00:f7:11:
2f:72:06:9b:f0:50:11:2c:b7:cf:9d:a6:19:1c:8a:89:f9:5c:
e5:b0:e2:ee:c8:f3:02:99:ce:b9:c9:3a:cb:d5:6b:f5:0a:32:
18:d0:f9:b7:d9:28:1c:1c:1b:94:15:21:8d:69:da:8e:24:9d:
2a:e5:95:aa:bc:b6:56:bf:a1:70:23:c9:0b:aa:30:8a:39:4f:
8c:2a:94:fe:be:fe:f2:d7:3c:dc:b0:6f:78:10:9f:f6:0e:c3:
62:f2:e7:06:93:8b:5d:e8:be:51:cd:9f:58:78:88:2f:75:bf:
01:2d:b6:b5:0a:3b:22:f6:74:e3:04:fe:f6:7a:62:d1:e7:63:
35:1e:f5:0e:b8:64:f1:69:18:25:fe:eb:83:bb:67:fa:c7:ec:
06:44:1b:f0:4b:81:c8:e9:fc:87:0a:a7:73:ad:80:7c:0a:fd:
04:4b:62:7d:f4:1f:d7:ff:86:23:09:d1:d8:fb:c8:d3:70:b4:
95:99:6f:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 06:24:31 2025 by rpki-client