Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363263383a3a2f34382d3438203d3e203136393039.roa
File: 326131343a373538343a363263383a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier: dbRQOZaZEClLcMO0KDegYJ0UQqm4eF5FntH5cMqCj88=
Subject key identifier: 33:E3:DB:3A:AF:D6:F1:E8:BE:8C:D6:AF:0D:A1:18:5B:C9:04:04:A4
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 592E8DA79CBA98166020D232C0072AF8A4367F59
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363263383a3a2f34382d3438203d3e203136393039.roa
Signing time: Sat 17 May 2025 18:36:02 +0000
ROA not before: Sat 17 May 2025 18:31:02 +0000
ROA not after: Sat 16 May 2026 18:36:02 +0000
asID: 16909
IP address blocks: 2a14:7584:62c8::/48 maxlen: 48
Validation: Failed, certificate revoked on Sun 18 May 2025 08:36:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
59:2e:8d:a7:9c:ba:98:16:60:20:d2:32:c0:07:2a:f8:a4:36:7f:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: May 17 18:31:02 2025 GMT
Not After : May 16 18:36:02 2026 GMT
Subject: CN=33E3DB3AAFD6F1E8BE8CD6AF0DA1185BC90404A4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:dd:93:75:d6:10:4c:fe:f5:03:ff:a9:8e:c5:
87:b4:36:18:55:14:16:2c:9d:bc:72:22:eb:9e:d8:
18:3e:08:87:40:33:59:83:b1:f1:46:fc:76:cc:8b:
48:af:59:bf:e1:40:df:49:f1:2a:de:9b:6e:9b:3c:
95:f6:cf:c3:e6:b7:62:e5:b3:26:4e:f8:2f:54:a7:
3b:52:45:e6:af:80:17:2a:06:9c:c3:07:94:85:2e:
e6:80:21:ff:07:a4:a1:2f:06:c4:6e:ac:61:c2:49:
f5:89:67:8f:6c:74:3f:56:a8:99:a9:f4:ea:61:08:
11:ea:9f:59:96:47:0b:99:7d:d6:bc:e3:10:06:a8:
4d:11:58:bc:25:7c:64:ea:75:a8:84:75:6b:8e:6a:
b5:3c:99:0d:57:78:fe:e1:75:dd:ae:15:5f:9b:46:
47:b2:31:d6:e7:2f:fd:7b:70:8c:e6:46:a0:40:53:
41:a4:84:4a:7f:a9:28:ec:b1:4a:bc:1e:1c:58:01:
22:15:66:65:db:20:ff:01:d0:e1:ea:a8:d2:7b:28:
b4:6c:9e:72:8b:be:4c:76:d1:cc:62:c0:32:a8:35:
13:34:67:3a:ec:b0:2d:ce:14:c4:9d:db:e8:7c:c3:
13:88:3c:66:f0:38:cb:7b:41:a9:ba:d7:8f:d8:72:
dc:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:E3:DB:3A:AF:D6:F1:E8:BE:8C:D6:AF:0D:A1:18:5B:C9:04:04:A4
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363263383a3a2f34382d3438203d3e203136393039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:62c8::/48
Signature Algorithm: sha256WithRSAEncryption
6e:5a:ad:e8:53:ae:b1:ac:d3:64:cb:22:df:eb:70:12:b4:9d:
0e:5d:17:96:f9:b0:49:97:84:8e:72:5d:ca:90:13:9c:8f:81:
b6:9d:f0:21:96:8e:20:da:d7:01:8f:f0:ad:43:6f:41:87:90:
57:19:dc:ca:7a:b4:91:20:7b:3d:66:49:57:48:c2:9d:8a:d1:
3d:72:22:a1:e5:d5:d2:6a:3d:17:31:54:97:00:d1:13:26:54:
e0:31:1c:c5:35:ad:1f:94:53:cc:06:eb:43:2b:44:25:58:59:
a7:a2:99:68:08:92:ca:fe:94:3f:57:26:83:3b:ee:f3:03:5d:
b4:c3:ef:37:9a:ff:d7:ae:7c:a3:19:99:db:4d:3e:b0:49:c7:
5f:a4:2a:0a:ce:2f:2e:ad:f6:e9:23:8d:7a:31:54:c3:db:64:
bc:bd:fb:14:24:3b:48:85:fc:82:e3:87:6f:7b:b7:ea:c9:ec:
21:39:73:62:4e:b6:33:a9:d1:43:c9:44:21:26:51:ba:4d:da:
16:34:d4:80:d4:a9:82:61:24:43:e9:80:2d:08:c0:b8:c2:86:
1d:3e:b3:d7:66:15:7f:0c:e8:71:2e:5c:49:af:cc:06:22:93:
4c:ba:0c:90:07:23:e7:b5:31:93:25:a5:0b:ef:4a:1d:5b:38:
61:97:4b:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 14:39:06 2025 by rpki-client