Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363261393a3a2f34382d3438203d3e203136393039.roa
File: 326131343a373538343a363261393a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier: 4HIkE3cXS0lpXSp5BwG+rBhWS7+3rSce8YV/Bfr9+gE=
Subject key identifier: 9E:47:8C:F0:E2:64:88:C1:E9:C1:59:0A:18:FE:21:FA:30:8E:9D:BC
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 5778DE98BC1DC43B96F66F02FC62AF6EC1713F54
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363261393a3a2f34382d3438203d3e203136393039.roa
Signing time: Fri 16 May 2025 18:06:02 +0000
ROA not before: Fri 16 May 2025 18:01:02 +0000
ROA not after: Fri 15 May 2026 18:06:02 +0000
asID: 16909
IP address blocks: 2a14:7584:62a9::/48 maxlen: 48
Validation: Failed, certificate revoked on Sun 18 May 2025 08:36:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
57:78:de:98:bc:1d:c4:3b:96:f6:6f:02:fc:62:af:6e:c1:71:3f:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: May 16 18:01:02 2025 GMT
Not After : May 15 18:06:02 2026 GMT
Subject: CN=9E478CF0E26488C1E9C1590A18FE21FA308E9DBC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:26:78:5b:29:ef:a1:9d:b2:c5:2e:32:3a:c9:
15:b5:dc:52:25:ce:21:4d:75:b5:00:25:89:ec:ba:
bf:a8:a9:74:71:a3:50:18:3b:c4:38:4c:82:06:de:
fa:8e:40:64:25:7f:44:41:ca:b0:b5:f7:20:e4:24:
43:07:f7:63:88:2c:de:1d:9f:0e:a8:15:cb:9b:2c:
98:3a:d6:c5:a9:08:e5:c2:ea:61:c3:6b:4c:ac:27:
20:63:1d:1c:3d:0b:13:97:5d:14:8d:19:25:07:59:
63:d5:d0:78:67:83:79:ba:a0:73:f1:33:00:0a:cf:
ce:13:a8:47:99:ff:9e:4d:b2:e0:9a:87:19:02:f7:
35:dc:ab:32:e3:c8:20:bd:c7:b7:0f:25:77:e9:d0:
48:71:a3:e7:d7:d0:98:e6:1e:8f:6e:67:f8:24:1a:
fd:5b:fb:4b:1d:e3:23:5b:50:a7:c4:80:31:1e:aa:
00:2b:6f:3c:30:82:1c:0e:74:a2:74:90:d5:e2:d8:
9e:81:fa:6c:b4:d1:b7:f7:f2:73:84:e1:1b:f7:69:
b1:c7:e1:b2:30:8a:bb:ab:3a:04:9b:fc:6c:f2:7f:
6c:d0:a0:78:5c:68:e1:c1:a7:9f:d0:6b:f7:b0:19:
0d:e0:18:81:d3:72:1e:07:9f:34:98:ee:dd:59:ed:
d4:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:47:8C:F0:E2:64:88:C1:E9:C1:59:0A:18:FE:21:FA:30:8E:9D:BC
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363261393a3a2f34382d3438203d3e203136393039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:62a9::/48
Signature Algorithm: sha256WithRSAEncryption
a3:70:87:0b:0a:6c:c5:0f:1d:50:0b:11:38:cf:c2:02:eb:92:
1d:31:f0:ef:f2:0c:9c:a7:59:1a:f2:39:64:6e:45:f6:82:16:
1f:48:b0:c1:48:20:2d:f5:91:fb:58:69:3a:fb:33:aa:28:76:
f2:5b:4d:f2:49:f6:bf:e3:20:e0:9c:40:aa:bf:72:da:d2:68:
c2:dc:05:04:49:71:2c:28:61:04:6e:d5:f3:12:03:4b:31:20:
ba:50:cd:bd:a5:32:0e:6d:ab:c4:96:3f:36:7e:41:64:52:b2:
c9:9b:67:0a:02:9a:01:12:8a:9b:a7:29:e2:95:02:3a:72:db:
d8:19:23:e0:a5:5a:f1:5b:8a:9f:3f:88:3f:be:51:59:5a:fa:
2f:e2:73:1b:7e:1d:21:b5:b8:f8:87:d9:74:74:bb:7e:be:96:
e8:0f:6c:73:f1:58:35:d7:93:aa:0d:62:73:9f:42:9f:80:b3:
d7:ce:03:f6:e8:3a:49:dc:c4:fd:1f:2b:16:a8:53:ba:f1:8e:
ad:3e:3f:ff:f0:81:9a:42:6f:cd:07:5f:0a:f7:93:ae:37:6a:
2d:d8:2a:6d:7a:06:ad:13:3d:c8:46:42:ec:c4:86:f2:f9:29:
23:92:42:b3:4f:d9:6c:b5:19:2c:c3:0f:0d:a1:cb:0e:11:65:
6c:b9:3e:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 13:03:24 2025 by rpki-client