Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363239613a3a2f34382d3438203d3e203136393039.roa
File: 326131343a373538343a363239613a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier: cQQmNOIBOB0KqUrl/pd+ElkG91sXfMtFZNeR8k64H68=
Subject key identifier: B0:1B:C6:46:C1:FB:96:B1:0F:15:4F:33:EF:06:8F:D0:65:FE:F7:22
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 30356B3375A32BD7D33173FA11DDF946846B5CC7
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363239613a3a2f34382d3438203d3e203136393039.roa
Signing time: Thu 15 May 2025 21:06:02 +0000
ROA not before: Thu 15 May 2025 21:01:02 +0000
ROA not after: Thu 14 May 2026 21:06:02 +0000
asID: 16909
IP address blocks: 2a14:7584:629a::/48 maxlen: 48
Validation: Failed, certificate revoked on Sun 18 May 2025 00:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
30:35:6b:33:75:a3:2b:d7:d3:31:73:fa:11:dd:f9:46:84:6b:5c:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: May 15 21:01:02 2025 GMT
Not After : May 14 21:06:02 2026 GMT
Subject: CN=B01BC646C1FB96B10F154F33EF068FD065FEF722
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:fe:13:88:af:bd:d0:88:a5:24:9b:43:55:77:
f6:d8:33:3d:bf:18:5f:b0:4f:23:86:ae:f7:41:3b:
4b:6c:cf:ed:b7:f2:df:f4:37:f2:7b:fd:b5:d6:9a:
91:2d:35:f4:0a:01:c6:58:50:9d:97:16:c8:02:53:
51:35:e3:11:96:67:13:0d:f6:8d:80:86:52:59:af:
ea:e7:40:66:7f:26:ed:59:9c:3d:cb:8a:e2:35:8e:
b0:44:18:2d:af:1c:eb:b0:d7:49:98:b6:3f:ad:94:
48:8e:3c:18:69:29:52:40:4a:42:62:94:aa:28:a8:
5d:50:28:22:31:93:02:74:9b:97:25:0c:54:67:94:
d3:b9:1a:3f:14:40:0b:af:fb:02:06:e9:e0:62:94:
cc:1a:6b:32:92:2b:0d:3e:58:2c:8a:13:85:61:2b:
08:38:0a:e0:db:ea:b1:65:30:94:ac:44:07:ca:78:
22:e8:38:a5:2e:8b:15:77:b7:c3:c9:78:66:32:7b:
7c:09:3f:60:c4:7e:13:51:17:64:6f:7d:ee:15:93:
50:e3:42:58:53:0e:9c:bb:db:fb:07:3e:a9:33:f8:
eb:fb:ef:4a:79:57:a8:88:89:b7:c7:cb:bc:9e:0f:
32:85:b2:02:f5:be:2d:db:69:80:d9:48:30:1b:d2:
a7:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:1B:C6:46:C1:FB:96:B1:0F:15:4F:33:EF:06:8F:D0:65:FE:F7:22
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363239613a3a2f34382d3438203d3e203136393039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:629a::/48
Signature Algorithm: sha256WithRSAEncryption
4d:08:21:1f:05:84:b6:c7:26:77:68:72:b9:ed:ff:11:04:4d:
fb:f0:60:24:43:9f:bb:be:aa:63:71:49:b2:e7:53:d8:73:ae:
41:fa:e1:41:84:cd:0b:65:fb:a8:79:71:58:db:1b:ec:8d:66:
98:7e:70:09:52:9d:c4:37:7e:1a:3c:c2:da:48:4c:a4:c5:70:
e7:98:a4:0b:91:9c:ab:6f:08:9f:9b:e2:78:3e:a8:11:1c:2f:
22:1b:10:89:aa:7c:ca:b9:01:2b:9b:dc:9f:e2:9c:52:f0:82:
3a:c3:80:cd:ec:8c:98:32:f7:af:8e:e7:39:57:06:c0:61:a5:
8a:a3:95:c7:bb:ac:de:98:3c:d8:be:fe:75:cb:7e:c5:c5:17:
28:b5:d6:a8:8d:97:18:54:46:71:b3:58:74:c7:37:b1:1c:b7:
db:0f:77:e7:e4:56:dd:15:e8:04:67:c2:1f:1b:dd:e0:f8:4b:
26:65:6f:91:bc:17:d2:d4:bd:94:a0:50:fc:3d:00:53:f5:8a:
07:ac:20:4c:ea:2a:59:13:95:3a:39:0c:eb:7e:66:c2:d2:09:
41:e7:09:a2:4c:e5:58:77:e0:5a:12:a5:8e:f4:cd:6f:46:20:
27:ac:d5:e5:d8:b7:2d:a3:2c:1c:16:e8:6e:b3:3d:aa:2d:da:
d6:94:77:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 12:46:20 2025 by rpki-client