Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363262643a3a2f34382d3438203d3e203136393039.roa
File: 326131343a373538343a363262643a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier: 2Prb+Lsfmc2HzSCcJJFZVffYTsjnmAZ74CUy90Q+K8k=
Subject key identifier: 89:79:AD:2B:7E:B1:B6:1D:EC:EA:4A:AA:27:6D:C6:59:40:4F:1D:D3
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 523020BBB819C373DD50072848B3AC8873C181FA
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363262643a3a2f34382d3438203d3e203136393039.roa
Signing time: Sat 17 May 2025 09:54:02 +0000
ROA not before: Sat 17 May 2025 09:49:02 +0000
ROA not after: Sat 16 May 2026 09:54:02 +0000
asID: 16909
IP address blocks: 2a14:7584:62bd::/48 maxlen: 48
Validation: Failed, certificate revoked on Sun 18 May 2025 22:54:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
52:30:20:bb:b8:19:c3:73:dd:50:07:28:48:b3:ac:88:73:c1:81:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: May 17 09:49:02 2025 GMT
Not After : May 16 09:54:02 2026 GMT
Subject: CN=8979AD2B7EB1B61DECEA4AAA276DC659404F1DD3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:a1:31:d8:0d:99:11:cf:e1:2e:50:b4:52:9b:
4b:ec:3f:98:e1:bd:7d:36:d5:f3:9b:d4:9a:e3:8b:
fe:34:b1:6c:21:17:98:65:37:12:62:a2:b2:ba:4f:
63:be:c7:7d:48:00:2b:b1:ff:e2:cd:e5:81:88:19:
f2:8f:50:90:e8:1c:2c:ce:3d:d3:2e:19:02:68:62:
a9:1f:d4:f8:27:19:c7:dd:dd:38:fa:56:be:0e:32:
8f:2c:ef:0b:71:a4:23:2c:b8:03:ae:22:e2:0e:9c:
5d:04:44:ec:07:f7:0a:4b:09:77:5a:84:9e:91:7d:
27:a8:8e:f5:55:75:6d:d6:d9:19:88:47:45:3f:91:
19:48:8a:ad:08:a6:5a:a8:44:47:62:75:ec:3d:35:
65:1b:2f:8e:7e:8e:a9:ed:53:f7:c3:05:81:9a:76:
7e:50:ff:c4:a8:d7:b5:69:6c:dd:9c:ec:60:18:57:
99:68:62:c2:36:b9:0a:38:24:d6:bb:4b:a8:f8:85:
96:0c:52:34:bf:46:3a:9d:2a:5a:85:70:fa:99:50:
be:ff:71:33:73:11:f0:cb:86:ae:3f:e6:24:4a:57:
08:59:35:97:d8:7b:c8:99:9f:a3:6a:e7:00:4b:f7:
e4:67:71:75:a8:1d:26:4e:a7:7d:23:77:fa:2d:63:
86:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:79:AD:2B:7E:B1:B6:1D:EC:EA:4A:AA:27:6D:C6:59:40:4F:1D:D3
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363262643a3a2f34382d3438203d3e203136393039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:62bd::/48
Signature Algorithm: sha256WithRSAEncryption
b2:a6:dd:92:6f:48:76:48:33:04:79:68:53:60:28:dd:a6:a8:
f9:84:87:bb:67:50:08:9e:3b:72:f4:51:71:68:17:ea:37:8e:
20:6b:e2:8f:15:58:df:2b:44:ec:b3:23:e3:58:c4:95:6e:7d:
55:7d:a7:41:f7:b7:63:8f:71:a6:ef:17:d6:38:ab:c2:09:bb:
7c:3f:08:d6:da:9e:4c:d1:72:a7:5a:8a:f4:56:d4:e6:fd:f1:
a1:b9:32:43:fc:81:85:d6:e4:00:0f:40:69:f7:70:a1:62:40:
57:5e:95:44:b8:8e:98:58:21:5f:c4:ec:f0:a9:86:4a:fb:2c:
90:1a:97:1f:a2:d3:8e:18:fd:18:bf:e8:81:b1:ad:a4:e9:e0:
c7:a7:f6:34:cb:64:e9:9e:ff:26:0c:c5:b0:43:24:d0:02:f5:
3c:f1:47:de:2c:5f:8c:bb:76:34:55:90:7f:63:f8:fc:29:c5:
2e:e1:2e:14:29:08:e0:10:d9:d1:99:ae:32:7e:5f:85:3f:43:
c3:14:76:d2:c0:b1:58:17:0c:dc:f7:c4:3e:a9:05:bd:29:24:
f4:b6:f1:6d:fa:ae:bd:d8:5c:97:8b:c8:3c:62:11:15:a5:27:
1e:9e:3a:f3:c8:e6:87:2d:39:27:36:9e:5c:a5:a8:1c:55:be:
24:73:ce:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 07:27:26 2025 by rpki-client