Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363239633a3a2f34382d3438203d3e203136393039.roa
File: 326131343a373538343a363239633a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier: B12rAWTIDLLIEoJQ3DF+Dpu04pw6pmABa7NMKPTVH0I=
Subject key identifier: 0B:9D:01:BE:0E:08:F0:DE:A1:04:77:0A:10:13:EA:15:21:F6:D5:51
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 247D1937B4CA067DC5623DDB7F6B63DB1B3341A3
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363239633a3a2f34382d3438203d3e203136393039.roa
Signing time: Thu 15 May 2025 21:06:02 +0000
ROA not before: Thu 15 May 2025 21:01:02 +0000
ROA not after: Thu 14 May 2026 21:06:02 +0000
asID: 16909
IP address blocks: 2a14:7584:629c::/48 maxlen: 48
Validation: Failed, certificate revoked on Sun 18 May 2025 00:06:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
24:7d:19:37:b4:ca:06:7d:c5:62:3d:db:7f:6b:63:db:1b:33:41:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: May 15 21:01:02 2025 GMT
Not After : May 14 21:06:02 2026 GMT
Subject: CN=0B9D01BE0E08F0DEA104770A1013EA1521F6D551
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:af:b3:df:b4:8c:21:b7:f7:98:8d:eb:c0:8c:
28:25:ef:39:22:bf:a2:6e:d0:79:04:af:f1:11:04:
b5:ba:6d:c6:ce:f2:f1:94:7b:bb:76:27:18:9f:11:
6c:54:27:a1:ba:05:13:25:3c:56:f2:04:36:4c:58:
c1:5a:c7:93:2e:76:03:3d:fd:54:a8:e6:1f:7c:1b:
57:6f:04:d4:c2:15:62:fb:65:17:40:39:17:5b:da:
e8:d6:76:fe:b2:9e:e7:c5:76:b7:f9:61:70:95:c7:
c8:dc:17:3c:57:06:32:71:3c:eb:5e:90:3e:c1:0f:
ad:1f:55:cf:a9:82:b4:8c:7b:4b:0b:e8:a6:25:12:
61:9d:17:fb:6b:1e:f3:c4:60:90:1b:a8:69:bb:ec:
52:d5:dc:77:e9:5d:42:c4:3d:0c:57:f3:f3:d9:51:
f7:17:7d:2e:40:40:2b:55:60:99:07:35:c2:c2:8e:
1d:41:ba:35:08:65:ec:e9:48:4f:c0:6c:64:50:45:
17:74:a7:17:16:b8:ae:03:2b:ec:f0:af:02:65:f1:
69:5f:88:b6:eb:0a:ab:24:49:d8:3e:c0:d0:96:a5:
00:ae:33:6f:75:06:07:ef:97:7e:72:d6:5a:1f:e2:
64:a6:24:fa:da:26:ce:98:19:d3:64:a3:29:4c:37:
55:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:9D:01:BE:0E:08:F0:DE:A1:04:77:0A:10:13:EA:15:21:F6:D5:51
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363239633a3a2f34382d3438203d3e203136393039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:629c::/48
Signature Algorithm: sha256WithRSAEncryption
0d:b5:15:5e:e3:7a:b8:01:b3:31:4d:9b:8c:ce:a3:18:b2:6a:
86:b0:88:41:8a:84:e2:4d:df:7f:4b:46:b1:35:2e:a7:5a:c1:
a6:32:f3:b1:90:28:51:c5:38:b3:63:1b:60:49:7d:47:d1:0e:
52:54:7b:28:9f:ae:48:16:1d:26:44:7a:d2:d2:11:a5:51:75:
12:ae:3d:ad:22:67:7e:27:0e:e7:e1:3c:9d:71:a2:36:3e:4e:
0e:91:6a:ea:1f:16:ab:b8:a9:ba:5f:60:4f:10:03:ec:fc:e2:
9f:05:a8:6a:06:00:c5:73:dc:b6:77:60:c9:48:93:ad:bc:9c:
50:36:59:34:8f:ab:3c:ae:b5:dc:ab:fe:80:0e:ed:26:4e:b5:
13:52:b6:0b:db:41:4f:3f:38:51:e8:44:14:4c:66:0b:20:3a:
07:f9:b3:34:1c:6c:da:1d:63:1f:08:53:d2:fc:32:7a:9e:71:
0f:f8:3a:0c:a4:3f:08:1a:1d:7b:a4:e7:d5:81:3b:b1:56:1e:
4f:3d:e3:68:36:40:04:85:d7:7e:44:82:f9:7f:07:1c:f6:0b:
64:4c:81:22:f2:73:1c:34:4e:ea:bb:19:45:d9:9d:65:e0:ed:
82:a2:5e:78:fd:15:1c:1c:3a:f9:e3:ca:97:87:40:ac:e0:2c:
46:6e:11:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 06:08:55 2025 by rpki-client