Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363331333a3a2f34382d3438203d3e203136393039.roa
File: 326131343a373538343a363331333a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier: /BFnIDR4GTOj4WO27o66cY2VBecnVoeHdk9OCA2UJO4=
Subject key identifier: 88:24:97:6A:5B:FE:3F:87:1C:2C:F6:CD:85:00:A9:25:41:A0:5B:8C
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 7356DF8103FFC330391092041D909158DB7BD9DC
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363331333a3a2f34382d3438203d3e203136393039.roa
Signing time: Mon 19 May 2025 23:00:01 +0000
ROA not before: Mon 19 May 2025 22:55:01 +0000
ROA not after: Mon 18 May 2026 23:00:01 +0000
asID: 16909
IP address blocks: 2a14:7584:6313::/48 maxlen: 48
Validation: Failed, certificate revoked on Fri 23 May 2025 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
73:56:df:81:03:ff:c3:30:39:10:92:04:1d:90:91:58:db:7b:d9:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: May 19 22:55:01 2025 GMT
Not After : May 18 23:00:01 2026 GMT
Subject: CN=8824976A5BFE3F871C2CF6CD8500A92541A05B8C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:83:a5:9f:3a:9c:ea:9e:e8:e6:97:15:6d:8a:
1e:3e:0e:12:e5:db:66:a2:6f:b2:d2:e3:67:04:11:
f2:61:b0:23:6d:d6:ff:be:71:74:05:47:1a:d1:d8:
25:35:a9:9b:ca:d9:f1:62:18:d6:0e:47:d6:43:96:
8e:44:90:b2:6d:55:2d:1c:b6:09:d0:39:84:63:94:
63:0c:fc:63:fb:e6:d2:f0:f0:11:38:48:4c:56:00:
b8:bb:e0:d8:fa:46:82:5e:e1:7c:3a:dc:52:62:19:
2b:7a:43:76:30:bd:12:a1:8c:4d:21:9c:0b:28:bf:
9d:46:28:d2:9d:0b:9f:4b:d0:1b:8e:e3:db:65:35:
8e:e4:eb:ba:20:7d:57:26:83:75:6f:f7:48:b7:9e:
0d:ce:72:bc:14:1b:06:e5:20:dd:b7:bf:af:43:7a:
06:4b:d4:f4:a5:b0:0b:9f:c2:f5:ef:76:f2:ce:26:
41:c4:d2:b0:13:86:4c:20:f6:a5:bd:34:c2:3a:76:
92:0e:06:25:05:92:6a:2b:74:70:a2:ca:50:62:5e:
55:f2:80:e7:11:db:24:63:15:05:75:54:75:8a:7d:
59:e2:54:3d:61:99:f5:04:20:06:64:d2:29:27:21:
b5:c2:33:67:f1:6e:40:01:75:6e:28:31:76:1d:b2:
f5:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:24:97:6A:5B:FE:3F:87:1C:2C:F6:CD:85:00:A9:25:41:A0:5B:8C
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363331333a3a2f34382d3438203d3e203136393039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:6313::/48
Signature Algorithm: sha256WithRSAEncryption
2f:83:a7:83:73:8d:72:b6:03:ed:09:06:67:e6:eb:77:33:67:
e4:4a:13:f1:1b:a3:26:3c:f7:c6:1e:9f:66:b3:ab:49:9f:a9:
74:66:69:4f:5c:ad:2a:31:57:fd:da:c5:fe:c9:7c:b5:9e:72:
58:54:e8:6c:15:28:ff:3d:be:d6:78:0d:9c:e5:13:30:88:80:
f5:02:d4:f9:3a:8c:09:42:ba:b7:69:f5:e9:6e:27:33:7f:71:
ca:26:75:a5:f5:52:6b:2e:78:36:2f:a1:dc:18:59:36:d0:44:
42:e6:d6:b4:da:c3:7b:34:aa:b5:2d:05:8b:c6:56:32:88:e3:
b9:f8:9c:99:67:c1:8d:a1:d8:7e:b9:65:d3:c8:7e:11:a0:ef:
66:b7:cf:f3:52:28:64:a1:fb:1f:07:5e:04:12:ad:65:cd:eb:
11:d7:4e:5c:28:b2:26:57:b4:66:de:60:d5:ff:7d:19:20:12:
bd:d9:71:20:61:e3:c1:fd:d0:f7:2c:c1:18:17:5b:7e:e7:21:
d9:a1:6c:8e:66:01:76:43:ae:07:3b:98:81:cc:a2:13:73:91:
7f:64:15:60:f7:0c:eb:d4:ee:5c:c0:bb:78:13:c2:75:c2:4b:
24:be:6d:8a:f4:b6:51:5b:5f:d2:91:23:ce:a2:86:a8:09:26:
e4:65:ec:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 04:32:16 2025 by rpki-client