Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363239393a3a2f34382d3438203d3e203136393039.roa
File: 326131343a373538343a363239393a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier: 9jVCHuO7J8pnJn7uEexQnKMuLkIwFVmRgJcPn8jv3jw=
Subject key identifier: 44:88:B8:01:27:71:38:06:3B:A2:F9:63:68:51:21:FF:A7:42:2D:99
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 3146EA5B099432F3DDBA4D8BFF92596EAC9101C5
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363239393a3a2f34382d3438203d3e203136393039.roa
Signing time: Thu 15 May 2025 21:06:03 +0000
ROA not before: Thu 15 May 2025 21:01:03 +0000
ROA not after: Thu 14 May 2026 21:06:03 +0000
asID: 16909
IP address blocks: 2a14:7584:6299::/48 maxlen: 48
Validation: Failed, certificate revoked on Sat 17 May 2025 21:54:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
31:46:ea:5b:09:94:32:f3:dd:ba:4d:8b:ff:92:59:6e:ac:91:01:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: May 15 21:01:03 2025 GMT
Not After : May 14 21:06:03 2026 GMT
Subject: CN=4488B801277138063BA2F963685121FFA7422D99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:69:31:d0:89:47:0d:0e:7f:db:98:23:53:d0:
70:fc:d4:57:07:93:9c:97:99:75:8b:b8:24:4a:49:
31:7a:94:b8:01:be:f8:fa:5d:cf:01:4d:c7:bc:29:
dd:98:12:91:fb:23:c8:71:3c:81:f6:01:d3:96:22:
5b:85:42:36:17:4b:f6:16:b2:b4:b4:8c:8e:87:39:
da:4a:aa:fb:63:c2:7a:91:1d:4d:3a:54:58:31:63:
42:33:7c:06:69:67:dd:b6:0f:a6:76:fa:f3:f0:91:
51:50:2e:f7:b3:12:bc:20:93:b2:0c:e9:a1:9a:d9:
c9:5b:d0:39:a9:77:15:8f:ca:d2:db:8b:9b:aa:af:
43:c7:b2:19:b3:ba:dd:81:c7:ec:01:3c:8b:dd:8c:
4f:b8:09:7a:cb:2e:8a:53:f8:b3:b0:c1:54:c0:86:
d7:45:d2:bc:43:02:e0:7f:50:c4:78:af:b8:7c:c6:
05:f8:0d:c5:7e:89:f0:5d:6b:78:ab:ba:4b:8e:9d:
51:ad:86:d7:24:d1:e9:0b:f7:53:92:e0:41:20:99:
61:fb:77:7d:1a:83:97:c9:1f:ce:2b:24:6d:70:24:
c4:7c:6d:e6:56:2b:20:50:fe:2b:71:2b:b5:b4:0c:
1e:96:3c:01:f5:42:8d:96:45:46:31:d4:27:88:87:
b2:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:88:B8:01:27:71:38:06:3B:A2:F9:63:68:51:21:FF:A7:42:2D:99
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363239393a3a2f34382d3438203d3e203136393039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:6299::/48
Signature Algorithm: sha256WithRSAEncryption
b6:28:cf:02:12:e9:90:50:df:d1:41:2f:7e:eb:f6:6e:a8:03:
09:e6:d3:54:07:b9:ea:e1:98:eb:b4:fe:48:ef:92:8a:b7:bf:
1d:b4:b7:68:d0:ad:86:43:66:b0:53:7b:d5:f8:22:eb:e0:dd:
22:f1:a8:3c:fa:98:a7:54:25:09:f2:6e:66:0c:9a:3d:2e:86:
3a:e3:9d:e7:bc:5f:48:20:b6:22:81:9f:5e:64:f2:dd:e7:5b:
df:99:e2:28:58:e7:19:fa:da:04:0f:a5:13:4f:57:c7:90:2e:
92:4f:79:77:5f:86:fe:b0:ee:a6:6f:67:1f:0a:39:9a:56:53:
15:8d:1d:59:29:ef:e2:81:26:d1:05:32:9c:d2:8b:c8:98:c7:
89:96:35:6a:26:b6:f6:07:f7:a0:88:70:d6:9c:ec:0b:3e:92:
e2:13:e5:8d:4f:7c:99:b3:97:e2:0f:1a:1d:5f:d3:ee:0f:f6:
fe:4c:38:25:4c:78:8e:a3:09:9a:42:84:d3:eb:22:c4:c9:03:
8c:ea:ae:7e:27:aa:7a:41:53:72:ea:ff:b5:b7:9c:6e:eb:f8:
f5:93:58:21:d1:3b:12:91:f5:69:67:6d:69:89:59:b7:a9:a3:
b7:83:9d:d0:9d:40:3b:fb:3a:e1:25:11:b8:73:e5:45:38:49:
80:12:59:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 06:53:16 2025 by rpki-client