Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363330393a3a2f34382d3438203d3e203136393039.roa
File: 326131343a373538343a363330393a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier: mCURL71x8dNg+VHogRDhM0ijkyGuCmOVv+2g/rio8pE=
Subject key identifier: E5:5E:D1:44:9B:6A:8B:8A:2D:40:DC:C1:DB:2D:C6:4B:13:51:7A:FF
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 4166AA6D540CFFEE5493D9A40618C815AC2EA215
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363330393a3a2f34382d3438203d3e203136393039.roa
Signing time: Mon 19 May 2025 20:42:01 +0000
ROA not before: Mon 19 May 2025 20:37:01 +0000
ROA not after: Mon 18 May 2026 20:42:01 +0000
asID: 16909
IP address blocks: 2a14:7584:6309::/48 maxlen: 48
Validation: Failed, certificate revoked on Thu 22 May 2025 06:42:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
41:66:aa:6d:54:0c:ff:ee:54:93:d9:a4:06:18:c8:15:ac:2e:a2:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: May 19 20:37:01 2025 GMT
Not After : May 18 20:42:01 2026 GMT
Subject: CN=E55ED1449B6A8B8A2D40DCC1DB2DC64B13517AFF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:41:1d:d5:bf:02:09:b6:b9:b8:30:39:b8:0a:
18:88:23:48:02:00:f6:b0:9f:25:7c:09:25:24:02:
b0:17:b9:b4:ba:12:fd:e2:a1:b6:87:ac:d6:b9:9f:
c6:58:0c:97:98:53:f5:a4:cc:8e:0e:c8:64:a8:e5:
7a:ac:e1:11:aa:58:c5:58:bf:d0:ad:f7:ca:26:83:
91:62:0a:15:5e:2b:41:4c:0b:07:06:90:40:9a:61:
b9:36:2e:59:a8:d3:c0:ac:17:f4:fd:5f:4b:4f:ae:
e0:7d:5b:a1:ef:2e:c0:0a:b3:05:90:d5:66:b2:91:
b1:00:ac:df:f5:23:5c:5c:1e:f9:4b:8b:3f:ce:0c:
b4:16:91:19:74:26:68:56:fe:ca:85:3c:47:20:87:
91:be:a8:ff:42:59:95:93:2c:6f:24:5a:ef:03:70:
7a:fc:74:9e:3f:d6:14:26:5c:66:17:4a:9d:34:6f:
73:6b:4b:05:fd:41:1b:ff:b2:41:45:40:6f:ec:0b:
3b:7d:16:bc:9f:ad:df:41:11:b5:ae:1f:ec:ab:59:
88:2a:aa:ae:c0:66:d7:ce:85:8b:ce:5d:dc:6c:4d:
4c:7d:0d:e7:b0:63:37:d1:18:6a:de:ef:be:8f:91:
3f:99:00:6c:01:72:dd:8b:42:86:b0:a5:4a:05:f5:
38:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:5E:D1:44:9B:6A:8B:8A:2D:40:DC:C1:DB:2D:C6:4B:13:51:7A:FF
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363330393a3a2f34382d3438203d3e203136393039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:6309::/48
Signature Algorithm: sha256WithRSAEncryption
20:91:fe:a7:d7:4c:29:0d:fa:85:e6:d7:b7:96:13:fa:97:b8:
b6:a7:d4:80:a2:b6:e9:78:bc:a4:86:31:f3:53:4d:55:09:cf:
02:40:af:1a:47:b4:a8:5f:f4:40:e3:3f:a8:44:aa:aa:eb:43:
11:bc:b7:a6:17:fc:bb:49:28:f4:e1:2d:d5:09:b0:ad:c0:e3:
61:80:e1:5d:be:99:a0:9b:d2:d6:46:57:c8:fc:81:cb:ba:1f:
c8:7e:a3:3a:c9:40:37:90:ee:09:39:bb:f3:32:8e:8a:31:1e:
c9:f1:e3:6a:13:f8:f2:e7:6f:fa:14:85:63:2a:f9:e6:cc:11:
63:85:a7:d8:10:cc:aa:76:88:d6:32:20:43:85:6b:d0:ae:13:
eb:fb:e2:69:c2:e4:ef:f5:5b:e9:ba:42:c9:4f:83:bd:fb:bd:
3f:ce:62:25:a3:14:c3:cb:27:30:4e:77:21:be:91:6c:0e:c6:
a6:13:28:4a:03:b2:64:95:58:8d:b0:f9:b5:3f:8a:b0:19:37:
fc:f3:49:32:f4:4b:05:78:88:28:02:33:19:e1:87:45:a5:2f:
9a:15:38:54:91:32:40:18:a4:c1:c4:76:20:73:8c:d2:24:55:
0f:64:c9:41:eb:6b:a7:b6:fa:ce:e4:9f:af:fb:e8:c3:c5:16:
83:86:61:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 16:38:30 2025 by rpki-client