Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363264323a3a2f34382d3438203d3e203136393039.roa
File: 326131343a373538343a363264323a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier: 5pJanIgBcROV1o4YdRCu+tRpIy1otnb7+p0RFbOgLzc=
Subject key identifier: 91:A6:4D:A2:BA:DF:21:07:A7:31:8E:A5:D8:1D:AA:2D:46:96:97:B7
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 7B13362F23B93949780F95114A3B87D1C257CCC1
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363264323a3a2f34382d3438203d3e203136393039.roa
Signing time: Sun 18 May 2025 00:06:02 +0000
ROA not before: Sun 18 May 2025 00:01:02 +0000
ROA not after: Sun 17 May 2026 00:06:02 +0000
asID: 16909
IP address blocks: 2a14:7584:62d2::/48 maxlen: 48
Validation: Failed, certificate revoked on Mon 19 May 2025 02:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7b:13:36:2f:23:b9:39:49:78:0f:95:11:4a:3b:87:d1:c2:57:cc:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: May 18 00:01:02 2025 GMT
Not After : May 17 00:06:02 2026 GMT
Subject: CN=91A64DA2BADF2107A7318EA5D81DAA2D469697B7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:71:89:ff:e1:f1:af:c9:a7:a5:31:15:72:d2:
7e:2a:4d:63:74:d1:d5:dd:66:b4:40:96:c2:ee:fb:
19:32:f4:84:d7:a2:ed:7a:63:25:8c:c6:18:3a:bd:
58:26:a9:83:9d:af:4c:5b:6e:78:d6:b1:f1:4a:64:
d3:c7:59:68:e3:65:cd:49:58:51:81:43:51:87:b2:
51:a0:bf:3f:9f:5e:5d:4b:cc:f2:45:94:a2:94:63:
2e:f8:31:c3:14:28:90:bc:1e:35:72:c7:42:db:06:
fb:4a:28:a9:1b:4b:44:63:69:6a:7a:46:66:2c:49:
aa:76:e1:42:e9:da:ef:ff:5d:22:f7:2d:0a:34:a6:
19:9c:8a:1b:27:c6:23:88:a6:ee:7e:bd:b1:f4:16:
94:9d:a9:a4:82:a3:1f:75:66:90:16:41:82:28:ec:
1a:54:4d:09:15:ac:ef:86:db:4e:58:d3:b2:f2:59:
10:e8:82:da:59:ea:79:2f:d2:4a:b2:ea:a8:b9:26:
dc:03:db:e4:78:b3:5d:0c:95:e2:e7:64:30:9a:d4:
6f:0d:9f:34:a5:27:a1:03:e9:71:43:c7:ae:89:55:
36:f4:aa:4a:c2:2c:cf:2c:8b:b0:08:98:d2:b0:9b:
b0:da:e4:a5:48:99:41:2a:6e:b0:2e:f5:b1:be:34:
d5:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:A6:4D:A2:BA:DF:21:07:A7:31:8E:A5:D8:1D:AA:2D:46:96:97:B7
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363264323a3a2f34382d3438203d3e203136393039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:62d2::/48
Signature Algorithm: sha256WithRSAEncryption
a1:3e:df:2f:ac:7e:ad:0a:4e:3b:dd:5c:ee:6b:4b:17:be:5c:
9e:73:fd:fd:2c:bc:a9:30:74:28:bc:33:a1:a6:15:ee:53:81:
b1:1d:44:f5:6f:af:44:91:74:3c:f6:74:82:bb:1b:d0:46:9a:
e9:dc:22:37:c4:be:92:d0:fa:84:50:cc:fd:74:7c:38:9e:a6:
ac:fe:06:93:d7:9d:cb:fe:2a:32:1b:d4:40:57:ec:83:70:89:
45:2f:c7:49:29:63:b9:4d:3b:d8:76:68:15:dd:07:e1:dd:46:
15:b4:a7:a5:4b:6d:86:2b:60:6a:78:25:3f:51:ce:ae:45:7a:
77:5e:be:a4:d0:c6:08:90:7b:a0:bc:7b:0d:64:79:84:30:15:
9d:80:07:a4:91:1f:20:ff:d4:5a:67:f2:df:2d:f2:8e:86:4a:
0f:e2:f8:bc:1b:0e:4d:ff:2a:0d:79:6a:1d:18:16:3d:66:07:
21:cf:c5:27:55:5d:13:3a:3c:cc:1a:c6:07:37:15:e0:b4:bc:
a3:7d:ca:d4:b6:b9:ff:8e:f3:9c:db:6c:14:c0:8d:95:39:06:
95:40:24:46:71:5b:25:30:14:d2:ef:7c:df:27:29:50:0a:67:
ab:a3:b2:42:0b:61:f9:b4:fc:6c:3b:b3:7c:4d:ff:05:2d:2c:
03:f1:42:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 06:33:47 2025 by rpki-client