Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363263613a3a2f34382d3438203d3e203136393039.roa
File: 326131343a373538343a363263613a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier: bhWlKFL/2bvSyWaCraN2IuszW2KuMYm+Peo87xykzks=
Subject key identifier: A2:FA:7B:7D:DB:0D:5F:3D:35:75:9B:D4:3A:99:B1:DA:C2:ED:55:F8
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 3821503CCF00D0E078770CFABDA38A6DAC7C475F
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363263613a3a2f34382d3438203d3e203136393039.roa
Signing time: Sat 17 May 2025 18:36:02 +0000
ROA not before: Sat 17 May 2025 18:31:02 +0000
ROA not after: Sat 16 May 2026 18:36:02 +0000
asID: 16909
IP address blocks: 2a14:7584:62ca::/48 maxlen: 48
Validation: Failed, certificate revoked on Sun 18 May 2025 15:24:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
38:21:50:3c:cf:00:d0:e0:78:77:0c:fa:bd:a3:8a:6d:ac:7c:47:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: May 17 18:31:02 2025 GMT
Not After : May 16 18:36:02 2026 GMT
Subject: CN=A2FA7B7DDB0D5F3D35759BD43A99B1DAC2ED55F8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:22:64:40:f1:00:7d:b0:d7:bb:08:ae:7c:70:
89:92:d8:01:19:dc:26:9b:6b:f5:bc:e1:30:31:15:
3c:ad:15:79:76:7b:1a:29:d3:91:7e:64:3a:e4:31:
f9:4b:b0:0b:85:1c:ca:69:c0:9a:b2:ff:a5:21:a9:
a6:1a:d4:b6:2e:d8:21:bc:5e:10:34:3a:83:90:57:
23:28:39:78:27:7c:1b:b4:e2:85:a3:84:a0:b6:a0:
5a:49:6d:13:4c:5d:0f:d1:57:8c:33:af:b8:14:f1:
23:2b:3f:f4:29:8d:cd:23:89:41:a0:57:6a:95:14:
1f:59:6d:62:e2:7c:1d:5b:ef:a0:9b:bd:7d:db:38:
6d:48:3c:65:23:84:bc:10:c3:61:7c:26:98:58:85:
e9:c4:08:00:ab:3e:ff:0f:bd:e8:d5:3c:47:18:be:
31:e1:ec:f2:7d:e1:1e:55:a1:88:c3:88:c8:80:64:
6b:88:75:e6:01:1e:c3:3e:03:59:11:d7:e9:6f:4d:
ba:f4:20:86:94:c3:0d:03:36:4d:36:30:f4:45:4a:
41:29:3d:59:7d:ed:99:58:18:17:65:c4:63:d7:46:
72:7b:88:a9:07:74:31:6e:30:03:69:39:62:22:85:
1f:36:4f:5a:58:bd:0b:3a:83:80:f4:3f:e8:e3:1b:
67:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:FA:7B:7D:DB:0D:5F:3D:35:75:9B:D4:3A:99:B1:DA:C2:ED:55:F8
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363263613a3a2f34382d3438203d3e203136393039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:62ca::/48
Signature Algorithm: sha256WithRSAEncryption
1a:be:f3:ff:5d:0b:33:95:5e:ad:a9:95:db:78:2c:66:2f:48:
3f:c7:2d:73:f3:b1:d7:80:b9:e0:33:f4:e5:cc:16:19:8c:86:
b5:4c:37:a0:01:7f:24:72:62:b4:03:5a:fd:f9:43:a3:92:74:
7c:3b:c3:2b:2a:b7:15:da:6c:46:d8:2c:04:77:71:88:0f:54:
52:7e:a4:7f:01:9b:b5:a0:3a:5f:db:eb:d1:d4:84:ab:54:1a:
80:24:b1:b7:02:6d:0f:3f:28:c7:ff:76:e0:17:9f:4c:87:2b:
00:ce:3d:03:d9:9d:13:7b:b3:6a:da:30:66:1b:03:d3:67:24:
4a:45:c5:9c:88:03:c6:27:71:a8:8c:02:68:a7:1a:8e:1f:85:
95:5f:a8:10:1c:1d:30:d6:1b:72:e0:5c:3d:ec:c4:fd:1e:00:
24:63:60:4b:07:95:54:7e:4b:75:9e:86:56:85:3d:6b:ff:19:
03:33:eb:3e:b3:e6:01:5d:78:cb:f8:e7:1c:32:6a:ef:bd:b0:
2e:8a:96:68:89:08:62:9a:e9:ba:87:ae:7c:f3:5e:34:01:79:
d2:66:af:de:b5:6c:5d:1c:de:af:41:1a:25:85:bf:3d:e2:11:
f5:a4:e2:68:b4:da:fe:43:83:c2:e3:a8:39:2c:17:ee:f1:8b:
69:4e:77:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 13:02:58 2025 by rpki-client