Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363330353a3a2f34382d3438203d3e203136393039.roa
File: 326131343a373538343a363330353a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier: t1LLuIxNHjNdqZnG6NIlRi16LzdZWVt4SkAKGVJddSA=
Subject key identifier: 0D:99:82:5D:A7:DA:70:E1:4E:A7:FE:DB:FE:01:1A:42:DD:E9:0D:1E
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 701464531D4464D166A481065E14481E703B0154
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363330353a3a2f34382d3438203d3e203136393039.roa
Signing time: Mon 19 May 2025 19:00:01 +0000
ROA not before: Mon 19 May 2025 18:55:01 +0000
ROA not after: Mon 18 May 2026 19:00:01 +0000
asID: 16909
IP address blocks: 2a14:7584:6305::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 21 May 2025 15:54:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
70:14:64:53:1d:44:64:d1:66:a4:81:06:5e:14:48:1e:70:3b:01:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: May 19 18:55:01 2025 GMT
Not After : May 18 19:00:01 2026 GMT
Subject: CN=0D99825DA7DA70E14EA7FEDBFE011A42DDE90D1E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:cd:46:a0:06:5f:73:93:fa:b1:88:d2:c8:75:
36:a9:3f:e4:15:99:d4:4a:93:36:b0:14:d4:45:69:
eb:30:df:07:22:9e:35:55:d9:42:49:80:b2:2e:2b:
2b:04:60:51:79:1b:b8:be:59:95:c1:4e:e2:94:05:
01:6f:7d:0c:6f:ac:57:5a:47:03:68:1a:1e:33:63:
11:c2:cc:79:d2:65:5d:2e:e1:2c:a1:9d:64:67:64:
7e:6e:cc:6a:80:46:cf:46:3d:01:90:8b:e9:36:dd:
11:06:5b:1e:50:23:fd:79:91:9a:56:a7:5d:35:4b:
10:a2:f8:93:a7:0e:5d:05:72:86:a1:74:47:a4:2e:
a2:90:32:26:cf:ba:7f:84:88:91:e1:59:65:04:3c:
4a:0d:fe:91:0c:e9:ec:25:5b:53:27:1f:e1:ec:bc:
1f:04:2c:e7:78:6b:2c:b5:5e:dd:09:6c:f6:01:ab:
f4:38:13:54:f9:5e:f1:92:55:26:62:66:db:9f:30:
b0:ad:6a:f9:0a:8c:ab:09:c4:ef:46:8f:e4:da:b3:
7a:ca:79:28:4b:2c:54:fd:96:fa:24:11:f1:4e:95:
1e:aa:06:22:27:f7:54:45:33:45:81:42:96:c9:54:
27:e9:ed:b7:bc:47:87:38:8b:42:ee:aa:2f:db:a5:
8a:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:99:82:5D:A7:DA:70:E1:4E:A7:FE:DB:FE:01:1A:42:DD:E9:0D:1E
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363330353a3a2f34382d3438203d3e203136393039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:6305::/48
Signature Algorithm: sha256WithRSAEncryption
a5:f7:6a:90:99:5c:5b:fe:e2:0f:34:29:04:b2:ba:be:bb:25:
c6:7f:52:27:b9:b7:c1:99:f5:07:3c:22:f0:16:f6:eb:41:e9:
9f:58:a0:c1:be:d4:b2:69:51:5e:af:07:cf:ec:8e:93:8c:91:
b8:4a:71:87:b1:3d:f3:97:50:e4:80:c9:b2:f3:de:30:fc:b7:
55:63:2e:67:3e:4f:bb:87:0a:52:f6:3e:60:09:e2:24:12:e9:
08:b1:0f:84:b0:60:db:dd:e2:5d:6d:bb:bc:59:10:78:07:b7:
f1:5e:a7:a2:04:09:80:89:2b:a1:f0:ca:72:62:ce:1f:8a:bd:
f4:9a:b3:ad:82:8d:e3:17:1d:b0:b5:07:0f:ab:d6:c4:f6:e1:
27:8a:ad:10:c7:db:5f:b6:dc:d4:27:6f:da:65:2a:a8:6f:69:
2e:fc:b9:d5:69:6b:c9:4f:fa:42:fc:a8:55:76:e3:6c:ff:a4:
eb:5a:12:bb:b2:f5:4f:2a:72:b7:9a:f3:7a:e3:4e:f1:e3:78:
63:fa:2f:e5:6b:f7:65:b8:58:dd:06:fb:f8:91:f9:35:cb:ea:
23:6f:8e:71:f4:a9:a0:38:cc:f8:3c:b2:60:df:7b:1d:53:3f:
4a:2b:87:82:22:67:89:ae:d2:a5:66:f9:44:0f:e6:81:9e:91:
53:30:a2:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 06:30:15 2025 by rpki-client