Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363330383a3a2f34382d3438203d3e203136393039.roa
File: 326131343a373538343a363330383a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier: RzF8BaBtfMahY24oVMScDe29e/Cs4Gi/COfK/8QSL9Y=
Subject key identifier: 98:7D:B2:9E:76:69:92:BD:2B:48:4E:A5:8A:1E:4C:DB:F3:EB:D7:8D
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 4F94FBEA09A1D9065D9584428D3CDCBA8D1B98FD
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363330383a3a2f34382d3438203d3e203136393039.roa
Signing time: Mon 19 May 2025 20:42:02 +0000
ROA not before: Mon 19 May 2025 20:37:02 +0000
ROA not after: Mon 18 May 2026 20:42:02 +0000
asID: 16909
IP address blocks: 2a14:7584:6308::/48 maxlen: 48
Validation: Failed, certificate revoked on Tue 20 May 2025 11:24:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4f:94:fb:ea:09:a1:d9:06:5d:95:84:42:8d:3c:dc:ba:8d:1b:98:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: May 19 20:37:02 2025 GMT
Not After : May 18 20:42:02 2026 GMT
Subject: CN=987DB29E766992BD2B484EA58A1E4CDBF3EBD78D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:47:1b:54:76:41:e5:25:37:2a:08:1b:c4:2b:
1f:5a:67:a7:da:1b:a0:6e:7a:bd:3b:ec:ef:b0:46:
d3:e6:58:60:e4:c3:6e:9b:b0:e4:23:50:81:6c:10:
e2:cd:26:15:01:74:32:24:02:36:68:73:c3:a3:da:
af:15:fd:37:2e:01:3e:8e:1b:6d:12:f6:c8:3e:1d:
94:52:c2:88:1d:2b:e4:1a:97:2b:ec:27:2a:fc:bc:
59:6a:3a:2d:82:b7:8e:7d:75:a2:45:35:e5:f4:3f:
fe:44:94:d9:f5:f8:c8:91:85:b7:10:e3:96:48:28:
50:07:54:f0:04:ea:aa:d0:43:ae:d8:b9:3c:bd:e6:
e5:57:3a:17:67:94:27:0f:30:fa:be:bc:76:ae:73:
84:ab:39:ae:1a:7e:43:43:e0:a0:c3:fe:11:60:f6:
ae:dc:c4:ba:fd:e9:56:46:a8:a9:7a:e2:df:17:89:
8b:9f:eb:a8:bf:98:bc:a3:85:30:04:e7:a3:f9:b6:
d3:f3:a3:9b:a5:04:a9:df:38:65:4b:3d:97:7a:02:
7c:b9:0e:39:8d:8d:cb:19:54:d0:f7:48:2d:0b:7b:
e3:6f:48:36:f6:9b:f7:71:d8:22:1f:ad:4f:91:ba:
84:af:c7:7d:23:f4:e1:c2:d2:e2:4d:c9:bd:5f:3d:
fb:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:7D:B2:9E:76:69:92:BD:2B:48:4E:A5:8A:1E:4C:DB:F3:EB:D7:8D
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363330383a3a2f34382d3438203d3e203136393039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:6308::/48
Signature Algorithm: sha256WithRSAEncryption
54:6f:af:16:93:56:7a:e8:3c:e5:11:c7:ec:51:6f:47:13:ff:
5a:3d:31:9d:69:79:cf:08:e9:4a:c8:64:63:e4:7e:80:6d:50:
33:a8:cc:d7:19:3a:32:e6:82:7e:bb:57:b2:6a:4f:1b:c9:42:
66:3f:87:13:49:45:83:1d:21:47:8c:dd:ee:5f:3b:97:1b:49:
f6:6c:e2:57:11:07:99:6f:11:91:df:ea:06:71:3e:60:47:c4:
ce:16:94:90:b7:19:8b:bf:ba:97:57:b1:e6:6d:ff:ef:4a:fc:
c0:62:36:ee:5e:5d:c6:9c:b1:9a:99:da:e3:05:e9:58:d7:ed:
3f:1a:7b:d6:19:c9:c4:39:f1:79:7e:16:0f:a5:5a:13:59:3d:
e8:47:56:e7:f5:dd:d8:84:f4:96:07:67:ba:8e:e2:8a:c8:cd:
7a:6e:17:21:e6:a9:e7:57:7c:69:52:1f:18:75:d2:dc:a8:3b:
77:94:ce:a4:60:be:68:c5:3e:b7:48:4e:11:49:22:8b:dc:29:
9b:ab:48:e1:1b:50:68:9a:3c:f3:0a:9c:fe:7d:86:6a:c3:4a:
ab:07:33:ca:05:cd:62:e1:6e:4b:8b:91:a0:66:cf:51:95:a2:
f5:73:f1:cc:db:81:2b:e4:af:d0:e4:12:d6:d1:20:26:8f:1a:
68:fa:ba:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 13:12:03 2025 by rpki-client