Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363265373a3a2f34382d3438203d3e203136393039.roa
File: 326131343a373538343a363265373a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier: iybZOjgr3m/gE3yM1CgUJ+GMnf+NKpp0eYXUu7QutVc=
Subject key identifier: 32:9B:8D:30:F1:94:A3:02:B4:85:FC:B3:34:F5:0B:DB:0A:30:1A:A0
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 45F6410A9388B299DC4621E30527EC53D8FF12ED
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363265373a3a2f34382d3438203d3e203136393039.roa
Signing time: Sun 18 May 2025 18:06:02 +0000
ROA not before: Sun 18 May 2025 18:01:02 +0000
ROA not after: Sun 17 May 2026 18:06:02 +0000
asID: 16909
IP address blocks: 2a14:7584:62e7::/48 maxlen: 48
Validation: Failed, certificate revoked on Mon 19 May 2025 12:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
45:f6:41:0a:93:88:b2:99:dc:46:21:e3:05:27:ec:53:d8:ff:12:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: May 18 18:01:02 2025 GMT
Not After : May 17 18:06:02 2026 GMT
Subject: CN=329B8D30F194A302B485FCB334F50BDB0A301AA0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:e8:df:54:7f:1c:c3:47:72:9a:78:23:64:0b:
d1:2e:63:9c:aa:c6:9f:51:06:a5:85:99:2c:86:11:
a3:80:73:e4:0b:ee:4a:84:4e:15:78:4a:39:9d:d7:
d8:be:d8:3b:d5:ce:ef:25:5d:42:4c:f0:4c:8e:7a:
9c:d9:8f:7e:18:f9:2b:f8:12:a5:f7:15:f3:3c:6c:
df:c6:ae:f7:ae:9d:a1:ce:eb:11:ca:70:3f:72:dd:
10:63:31:24:52:24:d8:88:ac:c8:63:54:ad:35:b9:
a5:46:7d:6b:56:bd:d3:16:42:e2:e1:2f:6f:1f:4f:
87:f9:1a:5a:39:a1:ff:39:3a:21:6a:e0:1c:9e:be:
46:b1:34:c4:70:f6:20:e3:18:c2:81:50:eb:11:74:
8f:43:40:d4:b2:54:ee:2a:fa:73:3f:b3:7b:f5:93:
df:72:ab:cb:f3:28:1a:b2:cf:66:f0:c2:30:22:98:
97:38:9f:f1:a4:a4:3a:48:db:c6:ad:ab:20:2a:73:
53:ba:9a:95:cc:07:cc:68:f9:66:35:1c:aa:ca:a4:
14:76:7a:52:fd:09:86:8d:08:c9:b8:89:86:6a:b6:
23:8d:8d:a3:28:18:eb:1b:2c:33:45:70:1f:14:69:
ad:89:4a:5f:ae:ca:ed:03:ff:79:cf:75:6c:dc:0b:
06:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:9B:8D:30:F1:94:A3:02:B4:85:FC:B3:34:F5:0B:DB:0A:30:1A:A0
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363265373a3a2f34382d3438203d3e203136393039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:62e7::/48
Signature Algorithm: sha256WithRSAEncryption
31:53:3e:07:3c:a7:e4:fc:bc:11:e6:c5:0c:a5:47:36:b3:41:
3e:6a:34:d2:46:93:43:69:bf:3a:dc:d3:68:69:e2:2f:30:c0:
f4:6f:ef:10:d4:0d:e3:67:ca:86:0f:15:59:a3:11:12:0a:ca:
f5:e9:c1:b2:1b:84:52:e1:2f:8e:0b:af:81:c3:d5:5a:d7:70:
5c:50:ac:30:30:96:29:28:fd:ad:e1:af:a7:53:47:1e:f9:22:
36:3e:d9:92:e0:f3:28:38:ad:ea:be:60:3d:50:1e:8f:ed:7c:
1e:31:93:f7:1a:ff:27:1c:63:7f:84:fb:9d:2b:18:a2:1f:3a:
7b:72:4f:3b:76:91:29:a0:57:33:a3:80:d2:ee:cd:c5:a2:f5:
84:ac:38:7a:6b:e7:97:0e:85:af:07:85:72:23:fd:62:d1:81:
3e:ed:15:dc:5a:43:69:2d:51:69:75:b0:bb:dc:38:ef:e3:83:
8c:a2:db:22:75:21:09:d1:fc:80:50:d5:6d:4f:24:8c:02:88:
b2:9f:b2:ce:5f:c1:ca:f4:6b:e6:ef:e4:85:d5:6d:76:1d:c4:
2d:16:da:76:9b:9d:90:1b:8b:9a:9f:b0:b6:3e:8b:11:e3:de:
bc:d6:02:5f:05:c8:ff:c8:ee:52:5f:34:c4:93:9d:1f:5c:c1:
5d:d9:fe:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 06:25:43 2025 by rpki-client