Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363239383a3a2f34382d3438203d3e203136393039.roa
File: 326131343a373538343a363239383a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier: PqxhJMGvX09FEOOpShavgPhb3qoJCD3ULg944mwV8tE=
Subject key identifier: F4:64:55:37:B4:50:CC:51:42:77:3A:B6:B4:BB:BD:9B:D3:EF:51:AA
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 73C27F4FD8FEB419A27D114EA92D92DB0D307E3D
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363239383a3a2f34382d3438203d3e203136393039.roa
Signing time: Thu 15 May 2025 21:06:03 +0000
ROA not before: Thu 15 May 2025 21:01:03 +0000
ROA not after: Thu 14 May 2026 21:06:03 +0000
asID: 16909
IP address blocks: 2a14:7584:6298::/48 maxlen: 48
Validation: Failed, certificate revoked on Sat 17 May 2025 02:30:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
73:c2:7f:4f:d8:fe:b4:19:a2:7d:11:4e:a9:2d:92:db:0d:30:7e:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: May 15 21:01:03 2025 GMT
Not After : May 14 21:06:03 2026 GMT
Subject: CN=F4645537B450CC5142773AB6B4BBBD9BD3EF51AA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:ba:2f:b5:db:cb:d4:fc:a8:12:82:02:b3:8a:
2c:7d:58:c3:14:d5:11:01:3a:dd:41:53:5b:b1:70:
64:31:2d:20:a6:d6:66:d2:21:e3:44:00:b3:b7:95:
b1:b0:05:b6:13:df:ed:44:74:38:22:0a:9a:fa:24:
a2:54:2f:b8:9a:bb:2e:c1:f6:2b:c4:b1:f9:7b:5e:
64:34:6c:7f:2f:3e:52:4e:d1:15:d2:fb:1e:f6:a9:
06:5a:61:ff:74:c2:e2:eb:9f:19:75:99:6a:f5:78:
ef:99:ad:d0:c8:4b:4f:85:93:29:11:76:7f:bc:0a:
f7:46:32:64:43:4a:b0:c5:5b:ec:e2:3b:af:e1:a5:
9b:85:9f:02:15:f6:2f:a2:6a:23:a9:a6:e3:d5:9f:
3e:83:59:24:7b:19:8c:c9:98:3d:c1:f1:ff:cf:26:
9f:24:fc:4e:75:f8:38:a9:dc:28:71:4a:f9:33:8f:
5e:61:f7:9a:39:e4:8e:71:99:d2:28:34:65:ca:a6:
3e:15:ac:2e:10:cc:85:f4:67:61:85:fe:0e:f6:b1:
e4:dc:6d:8d:16:eb:84:c0:3f:ab:7f:9c:9a:b8:8d:
7e:b4:43:d9:bc:bf:7f:2e:10:2d:ec:02:57:5e:c5:
5b:bf:72:90:12:2a:9e:da:d5:e2:42:96:5e:21:bf:
45:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:64:55:37:B4:50:CC:51:42:77:3A:B6:B4:BB:BD:9B:D3:EF:51:AA
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363239383a3a2f34382d3438203d3e203136393039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:6298::/48
Signature Algorithm: sha256WithRSAEncryption
83:76:f6:16:b4:09:33:da:d6:dd:c1:b3:1c:27:08:a8:86:e2:
a9:6f:51:ed:d7:95:7f:68:3d:b5:e4:fe:54:c1:4a:3c:97:2b:
35:4a:b7:ab:5d:e0:e6:cc:64:8b:1d:ae:e3:57:51:58:bc:5d:
c1:8d:17:a0:3e:e8:d6:b5:fa:60:78:f9:83:23:2d:80:34:f7:
4e:52:6c:fe:fd:12:26:80:0d:d9:ac:21:72:fc:37:f7:0c:12:
19:ad:a9:ad:a8:dc:3d:a2:f8:ba:5e:bf:60:2c:50:dc:2f:2f:
36:48:7c:37:4b:80:c9:89:58:c1:af:04:31:21:93:4f:f9:48:
0e:45:49:8c:57:b8:b9:e7:d2:b9:9d:bc:e1:8c:2c:88:42:7c:
1b:48:72:6a:f9:c0:20:a4:3f:bb:3e:cf:b8:bb:ca:40:76:bd:
02:ad:eb:33:b1:21:35:ee:ea:ed:3d:76:bf:05:b3:db:fe:ed:
58:0e:27:eb:bc:be:e2:5e:ed:32:20:e7:c0:2a:d1:df:67:54:
2e:63:18:5b:6c:16:28:4c:33:9d:e1:40:a6:54:17:71:ab:32:
bf:80:0c:a6:62:cf:87:4c:86:5f:13:e4:b3:a0:80:2e:94:08:
a1:0f:6c:8f:41:90:bb:83:db:2d:c1:2c:c9:ff:be:b5:ed:4a:
bf:41:08:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 14:35:22 2025 by rpki-client