Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363330363a3a2f34382d3438203d3e203136393039.roa
File: 326131343a373538343a363330363a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier: fY/NznZv8SCBAObFZ9qZR2t7LgS6pgMK2iWwkG7t2iI=
Subject key identifier: A2:F6:C5:C5:BE:7D:49:7E:E2:6C:C3:6D:89:40:FB:C7:F8:B5:2A:4B
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 38F3610C13233DB720D017C2C43292052AC8EE0A
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363330363a3a2f34382d3438203d3e203136393039.roa
Signing time: Mon 19 May 2025 19:00:02 +0000
ROA not before: Mon 19 May 2025 18:55:02 +0000
ROA not after: Mon 18 May 2026 19:00:02 +0000
asID: 16909
IP address blocks: 2a14:7584:6306::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 21 May 2025 20:54:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
38:f3:61:0c:13:23:3d:b7:20:d0:17:c2:c4:32:92:05:2a:c8:ee:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: May 19 18:55:02 2025 GMT
Not After : May 18 19:00:02 2026 GMT
Subject: CN=A2F6C5C5BE7D497EE26CC36D8940FBC7F8B52A4B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:81:1d:d7:68:34:11:d4:27:5e:d3:2a:2c:74:
dd:54:71:20:c5:14:2a:fc:8b:c6:6a:c5:c3:a1:55:
b7:5d:8f:92:15:67:cc:37:d8:12:1b:32:de:67:3c:
e9:8f:b6:94:ea:db:b7:70:e8:b2:af:b8:25:d6:d3:
48:0d:89:61:12:f7:82:94:72:90:fd:64:fe:24:f0:
75:1e:0a:20:b7:1f:4d:6f:06:d9:61:24:75:3c:2f:
ad:5a:be:7f:23:fc:16:e8:5e:11:72:da:dd:9b:f0:
51:7e:71:92:85:f0:9f:b0:9c:12:6b:6f:c8:38:47:
45:6b:dd:aa:50:af:bc:0b:3d:78:9a:f8:2b:7b:d0:
cc:da:4b:d2:e6:d8:02:e5:b0:27:a1:6c:39:aa:b6:
52:6e:c9:ba:60:cd:bd:4b:ff:31:07:19:25:bc:86:
31:27:b9:57:67:58:1a:e8:60:8f:7d:06:51:b7:d1:
d5:c5:fa:11:54:c5:9d:77:9c:1f:2b:fd:4f:ee:0a:
0d:12:8e:14:c1:14:02:2a:92:79:d6:3d:b0:c2:f2:
01:80:af:c3:5b:87:0d:b2:07:2c:a3:c3:a4:ee:41:
16:6e:bf:7b:13:3f:22:3d:b0:c3:88:0c:8b:09:b6:
a2:c2:ac:b8:c7:30:41:79:ef:90:f2:c0:40:e6:c8:
3d:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:F6:C5:C5:BE:7D:49:7E:E2:6C:C3:6D:89:40:FB:C7:F8:B5:2A:4B
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363330363a3a2f34382d3438203d3e203136393039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:6306::/48
Signature Algorithm: sha256WithRSAEncryption
90:e2:d4:42:94:29:b1:54:fa:b1:93:2e:dd:71:b3:fa:21:61:
79:31:46:d8:e7:77:c6:b6:9f:23:8f:9d:9a:c0:ee:5f:ff:be:
f9:98:5d:e9:4d:f4:62:02:58:68:f7:59:38:67:3a:a6:11:f4:
dd:4d:ce:e4:bb:3e:eb:ca:37:ee:09:ba:3c:8a:9e:a6:7d:7a:
68:9c:07:17:9e:ef:51:e1:e5:ae:11:ed:ca:ba:5f:cd:db:d8:
3b:bb:0d:fb:ef:9b:d8:f9:a4:74:e3:e9:5a:90:1d:31:b8:6d:
f5:72:bf:83:7c:10:12:08:8b:5c:f8:f8:9f:43:9e:3b:59:3a:
c5:85:cc:70:ce:49:84:16:6e:65:e1:28:c0:16:f8:e3:83:21:
25:91:a8:54:38:87:16:4a:88:6a:c8:5a:a1:a3:bd:81:69:64:
0b:06:00:de:3f:93:34:da:5b:d6:6b:1d:b2:32:f7:1a:0e:99:
25:f2:26:98:3b:dd:1c:c2:8d:ec:91:95:59:81:9a:97:45:b4:
48:61:fa:b3:73:c6:fc:67:38:15:a4:8c:f8:d1:6e:71:86:4a:
36:0e:11:f7:cf:dd:5e:42:97:e5:49:fb:a6:0c:51:ea:c5:e9:
c3:99:be:55:e4:ef:76:75:7f:5f:50:dc:b4:c0:71:b6:21:26:
6e:fc:4f:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 11:05:25 2025 by rpki-client