Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363262653a3a2f34382d3438203d3e203136393039.roa
File: 326131343a373538343a363262653a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier: oyQBpb68ettPEH8/tAmapaKuL9N+p8fMBKIudyWBvRM=
Subject key identifier: 78:1C:C2:F2:2D:7D:6E:6A:D8:42:3D:94:47:3F:3F:7C:8E:35:D6:F6
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 485083E2B2FEFC2A3F78B84BA2E67834BCCC885A
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363262653a3a2f34382d3438203d3e203136393039.roa
Signing time: Sat 17 May 2025 09:54:02 +0000
ROA not before: Sat 17 May 2025 09:49:02 +0000
ROA not after: Sat 16 May 2026 09:54:02 +0000
asID: 16909
IP address blocks: 2a14:7584:62be::/48 maxlen: 48
Validation: Failed, certificate revoked on Sun 18 May 2025 23:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
48:50:83:e2:b2:fe:fc:2a:3f:78:b8:4b:a2:e6:78:34:bc:cc:88:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: May 17 09:49:02 2025 GMT
Not After : May 16 09:54:02 2026 GMT
Subject: CN=781CC2F22D7D6E6AD8423D94473F3F7C8E35D6F6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:82:6a:b9:48:c8:b8:59:3b:54:4c:1d:91:e1:
ed:1b:33:71:18:9a:44:7e:14:eb:66:67:bc:b5:ea:
92:ce:37:81:c1:f2:af:49:b2:0e:7d:1d:ba:23:70:
dc:07:9b:68:01:46:a7:28:d3:78:22:de:cf:f7:d8:
41:c5:fa:00:d0:bf:f8:13:b3:12:0a:4c:f9:89:d4:
83:c0:95:92:d1:44:02:9e:f1:a5:5f:84:c6:f7:a7:
30:af:6c:09:49:18:64:dd:38:7b:0e:0e:af:f7:73:
10:a8:47:33:8f:94:5c:d2:3c:a2:21:32:02:41:18:
96:df:75:4b:a3:18:e0:10:6e:d5:72:5c:ab:bc:1d:
14:14:e6:e1:9f:8d:ea:43:72:e6:ea:c6:bd:92:67:
b2:67:92:87:9c:69:a5:5f:de:c4:f2:2d:4e:39:e2:
d1:a9:6f:82:24:ed:e1:e1:cb:6a:e3:89:6d:22:fb:
54:07:70:94:0e:fc:59:20:91:83:0e:0e:18:c5:68:
98:bd:9b:34:78:05:0f:4c:5c:67:2e:e2:03:ca:18:
4e:bf:e4:27:bc:71:b9:5b:f7:82:8f:a5:71:07:37:
a8:18:d5:9c:65:20:d1:54:44:5c:1c:7d:d4:27:95:
80:66:43:bf:c9:ab:d9:55:3e:1b:80:de:e8:ce:76:
2e:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:1C:C2:F2:2D:7D:6E:6A:D8:42:3D:94:47:3F:3F:7C:8E:35:D6:F6
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363262653a3a2f34382d3438203d3e203136393039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:62be::/48
Signature Algorithm: sha256WithRSAEncryption
79:2d:b7:d1:28:74:cf:70:1c:90:54:53:ff:d6:0a:1a:9c:64:
b2:e4:61:26:d6:af:e7:7c:f5:48:2b:6f:c5:63:43:cc:af:73:
d7:e2:d7:3f:87:ac:05:9e:67:b0:75:de:fe:85:98:c7:b1:cf:
a5:97:87:21:59:4e:5c:af:e2:f3:cf:3f:67:8b:3b:3f:31:fa:
38:c8:96:ad:54:95:04:4a:e0:46:57:d6:15:5a:fc:f6:d3:b3:
f0:0a:98:ca:98:d9:4e:79:45:eb:e2:58:ba:8a:2c:cb:15:68:
c8:9d:19:2e:93:53:09:3c:22:d6:8e:d4:56:e0:1d:2c:c8:ea:
e6:e5:c2:97:b6:54:14:7a:c5:86:d5:e6:53:2a:c9:d1:2e:7b:
ce:32:4b:f6:ff:ad:f3:55:3a:9b:1e:ba:86:6f:d8:f9:92:89:
c6:1b:3b:95:ca:14:b9:9a:0c:b6:e5:cf:6f:5d:04:da:eb:7d:
c5:f5:91:10:d4:cb:63:9f:f4:71:54:2e:3e:e1:45:f2:5b:9f:
a6:6e:83:fe:f2:54:d3:91:f2:bf:75:05:aa:6e:db:f5:ee:ce:
89:97:91:aa:a0:48:0e:74:ce:55:50:10:bb:9c:69:bd:1c:8d:
1e:22:8e:f4:b9:39:97:9b:70:f1:ee:0f:4f:b4:b1:08:10:92:
27:26:ab:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 11:35:37 2025 by rpki-client