Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363265653a3a2f34382d3438203d3e203136393039.roa
File: 326131343a373538343a363265653a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier: FlPdHzdWyYvATuRZWSmN+R9SeDFujSX/7/g+qLoA0jk=
Subject key identifier: D3:46:B2:61:C3:16:CF:8D:B9:31:0F:A7:71:E7:E1:FD:5F:D7:0E:68
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 5FC2CC9357365D2F3021A85546247E6BAD19F51B
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363265653a3a2f34382d3438203d3e203136393039.roa
Signing time: Sun 18 May 2025 23:06:02 +0000
ROA not before: Sun 18 May 2025 23:01:02 +0000
ROA not after: Sun 17 May 2026 23:06:02 +0000
asID: 16909
IP address blocks: 2a14:7584:62ee::/48 maxlen: 48
Validation: Failed, certificate revoked on Tue 20 May 2025 12:48:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5f:c2:cc:93:57:36:5d:2f:30:21:a8:55:46:24:7e:6b:ad:19:f5:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: May 18 23:01:02 2025 GMT
Not After : May 17 23:06:02 2026 GMT
Subject: CN=D346B261C316CF8DB9310FA771E7E1FD5FD70E68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:a2:51:e2:ec:57:09:0c:d0:2c:5a:2f:7a:a9:
2a:5f:c4:15:59:d4:1f:05:c7:b3:85:af:1e:aa:56:
fb:ee:7b:94:3c:c7:ff:85:a3:88:2c:33:f8:a5:4e:
27:73:48:cc:4c:15:27:82:fc:22:df:70:25:33:95:
57:aa:b0:6d:3e:e5:c0:6e:df:2a:d7:32:9f:17:f9:
28:20:a9:a6:13:d5:05:12:88:97:a3:98:a3:16:6d:
55:32:21:5e:7c:7a:02:e9:3c:c9:30:dc:82:c3:e5:
36:23:08:4f:c4:2d:0e:cd:1f:ce:e7:45:32:ff:5a:
fb:43:ca:d4:2c:54:aa:95:07:1a:99:93:45:32:67:
6d:a2:8d:27:87:2b:5c:19:cc:f4:a2:a7:f2:d9:1f:
7a:f5:b5:78:05:f0:bf:59:e0:ae:ba:84:b7:0c:2e:
cf:21:0c:2e:e0:36:c3:84:b3:82:13:40:ec:40:4b:
fd:25:2e:b1:67:b7:85:a9:53:01:b5:ca:95:cb:7d:
bb:74:74:d3:b0:07:57:3a:30:ef:03:3c:b3:b3:7f:
6a:06:2a:c9:d3:a2:a4:90:7c:69:73:72:19:86:3b:
71:31:9a:a5:c6:07:70:12:db:5b:56:6f:8c:7c:e5:
b5:2a:11:ca:cf:4c:ac:c9:ae:04:70:9d:3e:6b:9e:
d2:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:46:B2:61:C3:16:CF:8D:B9:31:0F:A7:71:E7:E1:FD:5F:D7:0E:68
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363265653a3a2f34382d3438203d3e203136393039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:62ee::/48
Signature Algorithm: sha256WithRSAEncryption
54:74:13:67:1f:a8:ba:19:cc:27:db:40:7c:77:0c:54:62:a2:
0b:e4:61:42:1d:c2:40:2c:fa:3c:28:e8:df:ea:c3:5a:b4:67:
60:a1:49:f4:33:2d:a7:77:43:60:7e:60:38:53:68:74:49:50:
88:82:a2:3c:7b:fd:3c:f2:da:ef:66:23:04:47:a3:8e:0d:0a:
5e:e4:37:9f:18:c3:14:3b:96:e5:b0:39:b0:18:3e:ed:72:f1:
59:c0:af:44:ae:ac:8c:be:dd:70:ee:9a:d2:cb:ad:81:b6:23:
60:ea:9f:1b:51:d6:57:d3:4e:82:a8:59:97:de:f8:a0:09:85:
d1:c4:e1:c6:4e:7b:18:51:1a:e7:6f:e7:3a:0f:58:3a:ec:86:
4f:d3:e0:a1:4c:7e:eb:41:42:83:80:2a:1c:b3:42:4d:21:b2:
2c:d0:37:9a:7b:db:96:aa:41:57:08:02:0d:1b:b8:62:d9:a1:
3b:6c:01:2b:31:a7:55:94:87:a9:43:c0:3f:58:bd:73:b0:e3:
d3:f3:db:20:ae:22:35:9b:7c:02:22:6c:a7:fe:d8:a6:fe:50:
78:cb:e9:27:21:a4:6a:b7:cb:bc:14:6b:9c:0e:26:a4:6a:7a:
ef:4b:3e:fc:c0:a4:24:0c:a5:a1:c9:96:2b:1a:64:28:72:f4:
e2:d8:f8:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 02:59:51 2025 by rpki-client