Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363262353a3a2f34382d3438203d3e203136393039.roa
File: 326131343a373538343a363262353a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier: dzw3MciQXYSMl905RwdbkUMU0ctGSPQJceEsBheSfwg=
Subject key identifier: A1:2A:F2:E4:55:75:A8:23:4C:95:DE:FF:E5:33:45:B9:39:7F:97:C2
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 59094C87D8C7267549FB23923C82319D36D0F8BB
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363262353a3a2f34382d3438203d3e203136393039.roa
Signing time: Sat 17 May 2025 00:36:02 +0000
ROA not before: Sat 17 May 2025 00:31:02 +0000
ROA not after: Sat 16 May 2026 00:36:02 +0000
asID: 16909
IP address blocks: 2a14:7584:62b5::/48 maxlen: 48
Validation: Failed, certificate revoked on Sun 18 May 2025 02:12:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
59:09:4c:87:d8:c7:26:75:49:fb:23:92:3c:82:31:9d:36:d0:f8:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: May 17 00:31:02 2025 GMT
Not After : May 16 00:36:02 2026 GMT
Subject: CN=A12AF2E45575A8234C95DEFFE53345B9397F97C2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:af:39:b7:d2:11:39:c1:a1:83:88:d5:28:7e:
fa:86:11:3c:2e:76:93:ef:d2:99:05:b0:38:9a:0c:
2d:a3:af:e0:5f:5d:5a:89:18:f2:cb:27:a3:d6:ac:
d2:e9:4c:65:13:bc:85:25:b7:a7:80:a1:e9:04:15:
f5:29:96:12:c9:2e:6f:b5:29:3f:f9:e1:53:ce:d9:
c1:cd:03:d7:f3:7a:42:b5:ca:0e:d1:3b:07:d8:3c:
a2:21:bc:fb:24:7e:54:12:8a:5c:7c:95:0c:90:d5:
59:27:60:7c:4b:10:59:73:ec:75:d1:60:1f:4f:45:
3d:b9:40:4e:a7:30:70:e6:4a:40:d9:b1:78:74:26:
ec:53:d1:e3:29:ca:88:0f:98:1e:ed:2d:18:cd:aa:
39:75:22:34:98:73:ab:34:38:51:30:83:66:4e:c1:
61:10:e3:7e:3c:0d:ed:ab:cd:c8:24:73:ce:e0:17:
b8:17:f2:0d:e6:60:ab:13:0e:57:10:53:94:1e:1d:
13:06:cd:15:e3:2d:02:70:40:dc:29:48:3c:4f:34:
5c:b2:b5:b9:ad:d8:7b:dc:79:de:72:38:8c:3e:d6:
15:e9:76:62:e0:66:a6:e6:6f:07:54:13:fb:7b:03:
f5:b4:fc:8e:8b:8f:c2:44:e7:38:79:06:40:7a:b4:
dd:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:2A:F2:E4:55:75:A8:23:4C:95:DE:FF:E5:33:45:B9:39:7F:97:C2
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363262353a3a2f34382d3438203d3e203136393039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:62b5::/48
Signature Algorithm: sha256WithRSAEncryption
84:28:ca:93:da:1a:e9:a6:4f:5a:4d:0f:f3:7e:05:d7:ed:55:
b9:44:c3:64:47:e9:80:10:d3:bf:42:1a:5c:f7:a5:81:26:33:
1f:ca:e6:03:00:87:65:3f:18:26:80:d9:ff:00:f9:18:36:56:
cc:fd:6b:db:41:8c:53:8d:30:07:da:36:71:4b:a2:64:56:24:
8b:fd:9d:63:75:0e:6a:ce:e3:2d:d3:26:a3:65:91:bc:fb:6a:
47:4d:45:ef:79:04:cb:7a:51:74:e5:83:99:e5:8f:33:a7:a7:
1b:96:c8:9c:fb:69:fe:82:91:ea:21:1c:53:3d:6f:98:50:c5:
d7:00:2c:57:ee:f6:73:08:57:3c:94:7a:29:07:05:35:84:dc:
21:10:f8:df:80:38:09:c9:af:77:dc:1b:ea:15:94:dc:fc:f7:
5a:30:bc:c9:79:44:f3:97:85:90:2a:8e:bd:83:90:7d:2a:e1:
41:b3:e8:cd:d7:7d:1d:cb:9c:0d:6c:5a:8f:5f:37:8e:22:1d:
31:f1:2d:5a:ec:91:cc:43:64:09:8a:9a:81:c2:04:96:37:88:
4c:02:93:88:4e:e8:b6:20:c5:8a:0e:03:19:cd:ac:24:88:db:
7a:78:8d:35:05:51:60:5a:f0:00:82:eb:af:ea:4a:63:9c:25:
45:09:34:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 14:52:23 2025 by rpki-client