Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363265343a3a2f34382d3438203d3e203136393039.roa
File: 326131343a373538343a363265343a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier: yGScNHaUUAWgE7cSqaY4XjhqLHW3dRcsUdtVZvvBVxQ=
Subject key identifier: 59:50:2E:4F:8D:33:50:B8:DA:6D:69:5C:D7:13:B0:72:CA:F1:2F:6D
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 0196D001B29CACFD399D9AE6F28408EC2E91458A
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363265343a3a2f34382d3438203d3e203136393039.roa
Signing time: Sun 18 May 2025 18:06:02 +0000
ROA not before: Sun 18 May 2025 18:01:02 +0000
ROA not after: Sun 17 May 2026 18:06:02 +0000
asID: 16909
IP address blocks: 2a14:7584:62e4::/48 maxlen: 48
Validation: Failed, certificate revoked on Tue 20 May 2025 01:48:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:d0:01:b2:9c:ac:fd:39:9d:9a:e6:f2:84:08:ec:2e:91:45:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: May 18 18:01:02 2025 GMT
Not After : May 17 18:06:02 2026 GMT
Subject: CN=59502E4F8D3350B8DA6D695CD713B072CAF12F6D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:57:b1:27:69:1e:88:b7:79:89:ad:9b:32:44:
66:0d:21:05:5a:bc:b4:4d:6b:30:5b:d6:be:c4:82:
5b:18:6b:10:a7:98:03:73:df:80:0e:2a:00:c4:78:
28:50:9d:7a:a4:44:ff:f1:fa:95:56:e6:ef:d3:c4:
e2:03:d8:3c:84:fc:8b:c6:a5:d8:68:5a:7f:62:9b:
03:2d:c4:76:d6:59:9c:e2:6f:5c:6e:63:11:d3:b8:
c5:d2:11:c1:78:1a:01:16:c1:3d:4d:44:95:d3:fa:
7e:1e:24:51:46:ed:71:ba:32:83:36:9f:d1:b4:e2:
d5:e3:7a:df:6a:1a:07:71:74:c7:e5:23:e0:14:9f:
5d:5b:68:87:ca:76:bb:78:74:69:d6:62:e9:c0:2d:
b2:5f:cd:2d:ea:2a:b7:54:bd:d0:93:02:47:47:8c:
a9:6b:b3:98:ac:62:7f:90:ba:96:bd:85:c7:33:ea:
77:da:fb:ac:e5:b7:d2:e3:8f:c6:9c:3e:12:a2:0a:
3c:cb:b7:05:a5:6f:c5:30:b9:fa:1a:fe:1d:fe:5f:
e5:f9:ff:65:96:6c:0b:8d:a6:da:af:4e:9c:84:b6:
42:d7:dd:33:b3:22:51:bb:47:a8:e5:fa:c8:2c:ac:
3b:5a:c1:e3:e5:06:ea:af:86:fa:b8:b6:a8:9f:1f:
a2:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:50:2E:4F:8D:33:50:B8:DA:6D:69:5C:D7:13:B0:72:CA:F1:2F:6D
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363265343a3a2f34382d3438203d3e203136393039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:62e4::/48
Signature Algorithm: sha256WithRSAEncryption
1c:f5:9f:57:48:7e:cf:44:a1:3e:4d:72:39:79:2a:72:8d:c2:
bf:fc:e3:73:7b:44:96:bc:61:2c:c3:04:dc:45:ad:cc:cd:02:
40:e9:01:85:d2:c1:2b:13:93:77:ee:14:8f:1d:9c:a0:67:04:
09:eb:12:09:c2:bc:79:2a:a6:8d:c7:80:de:48:9b:f1:1f:d2:
28:4f:84:55:da:00:7e:77:f4:af:f1:2d:7a:4c:59:27:f8:8e:
2b:c8:78:61:e1:99:1c:12:51:d8:13:98:2f:e1:4c:9f:73:ce:
34:b2:64:7f:8f:00:24:3e:37:06:c4:08:bb:82:12:84:ad:d3:
3e:bc:43:53:e6:bc:4f:b9:48:b2:16:83:6c:ae:23:e3:de:50:
f1:ad:5a:99:30:fb:93:7c:fa:7e:ae:6a:0f:2a:ec:cb:de:36:
52:34:f9:6b:ee:a5:f8:4f:e1:2c:da:3f:a2:9e:e4:14:c5:f8:
4f:7f:08:1b:7b:3a:07:a9:67:8b:4f:f8:08:89:77:1e:d8:94:
6e:34:0b:25:61:4b:5a:5f:b5:02:15:53:6f:78:d4:46:07:a5:
06:f5:96:85:b2:05:31:3a:ab:4f:45:00:09:e6:25:3f:84:02:
b8:02:4d:7e:9a:5d:f3:a1:1c:a0:be:14:d7:31:75:c6:b0:89:
67:1b:17:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 05:01:23 2025 by rpki-client