Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363330623a3a2f34382d3438203d3e203136393039.roa
File: 326131343a373538343a363330623a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier: Ar4zjipYanmHKNu+eLOkn2eW0w7yKZ3gomccbhz2mlM=
Subject key identifier: B9:7F:95:5E:6D:58:CB:32:02:5F:65:74:69:87:04:AC:73:11:FF:1D
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 14316BD0176494484D5B23745A4391E6147CD2D1
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363330623a3a2f34382d3438203d3e203136393039.roa
Signing time: Mon 19 May 2025 20:42:01 +0000
ROA not before: Mon 19 May 2025 20:37:01 +0000
ROA not after: Mon 18 May 2026 20:42:01 +0000
asID: 16909
IP address blocks: 2a14:7584:630b::/48 maxlen: 48
Validation: Failed, certificate revoked on Thu 22 May 2025 10:36:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
14:31:6b:d0:17:64:94:48:4d:5b:23:74:5a:43:91:e6:14:7c:d2:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: May 19 20:37:01 2025 GMT
Not After : May 18 20:42:01 2026 GMT
Subject: CN=B97F955E6D58CB32025F6574698704AC7311FF1D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:72:1f:6a:37:40:ec:13:fb:87:62:f4:12:8f:
f8:7e:02:cb:5f:30:1f:c1:90:2d:d8:da:e8:34:4b:
05:e3:fd:7d:4a:a1:3b:31:f3:8f:22:a9:02:68:62:
06:ce:9c:16:aa:a8:f8:a0:9b:78:23:7e:4f:ed:7a:
4c:42:67:2f:70:dc:de:5e:42:f9:5e:55:46:87:bf:
ee:70:b4:e8:af:35:56:79:bb:63:98:db:b3:20:f2:
06:27:b5:76:83:a9:c7:a6:ae:05:e1:e7:c1:97:a2:
ae:c6:82:77:e5:65:ff:d7:ab:35:dd:40:e9:59:39:
25:7b:be:0e:d8:b5:4e:ad:54:92:33:b4:c5:e8:31:
8c:36:8e:07:81:b2:e6:43:d5:f1:26:be:d4:6a:06:
6d:ce:2d:48:bf:0a:62:c6:c8:37:ff:68:6b:e5:46:
c5:32:12:93:30:94:cb:16:cf:66:c0:ae:ae:e2:d8:
89:7c:a2:0c:6f:fc:c3:ab:3c:73:80:fa:c9:4c:8c:
76:04:97:7a:06:75:1e:b6:ea:cd:c0:59:aa:8e:21:
18:59:82:1d:30:0b:fa:bb:49:c0:f8:33:1f:13:1d:
e6:94:4f:6e:a5:47:d3:2b:4a:19:c2:df:31:ee:35:
e0:28:a1:c9:aa:7d:cf:00:4b:9f:a8:be:0e:e0:23:
49:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:7F:95:5E:6D:58:CB:32:02:5F:65:74:69:87:04:AC:73:11:FF:1D
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363330623a3a2f34382d3438203d3e203136393039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:630b::/48
Signature Algorithm: sha256WithRSAEncryption
17:f0:e1:aa:57:32:87:18:db:dc:09:b9:29:aa:f6:89:b2:20:
3d:9b:06:4a:ba:57:27:c5:f0:bd:a6:38:a9:d5:23:99:4d:79:
b8:10:f0:d2:21:c9:9c:d6:a4:36:92:3f:39:13:0d:ee:05:bd:
42:d4:b4:a3:59:46:55:b5:42:85:87:52:42:b4:a5:13:fc:9a:
6b:c0:61:54:b6:6b:8b:6b:d8:fb:1a:ca:12:f6:7a:46:d4:81:
89:d0:5c:5d:dd:13:65:f5:22:83:f3:46:a9:8d:42:bb:8c:fb:
e3:b6:01:33:79:02:ee:cc:84:5c:59:25:56:56:e5:eb:03:3d:
e2:76:94:fc:03:27:d0:3f:de:b1:90:c3:f9:77:14:f6:36:44:
11:1a:4f:1e:7e:82:1f:84:5e:9a:ab:10:13:d8:c7:cc:49:8f:
0b:6b:99:46:1a:59:d3:73:86:9e:24:e3:61:30:db:fb:c4:2c:
2b:6b:00:c8:2d:1d:5a:a9:df:de:00:db:cc:31:73:39:ac:b1:
24:6a:ef:7e:77:3f:34:54:39:e8:86:37:d4:0d:e3:66:d4:98:
8f:f0:10:38:eb:e8:c9:d1:39:b6:2d:04:f4:bc:2b:85:4b:a1:
5b:80:e6:ef:93:53:e0:55:4d:8e:10:6d:aa:9f:7c:15:8a:25:
1c:fd:f7:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 06:41:54 2025 by rpki-client