Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363331363a3a2f34382d3438203d3e203136393039.roa
File: 326131343a373538343a363331363a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier: UxwnLYvrg7UfRTvrWv4w0CBjck75RtJDJYMi+KlvQaQ=
Subject key identifier: 21:B9:53:BE:D8:8B:EA:25:FB:5E:4F:D4:3F:45:92:98:AB:FB:E6:3A
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 632CB57FA3B92F668FF3E219176BB51AEF4D4330
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363331363a3a2f34382d3438203d3e203136393039.roa
Signing time: Tue 20 May 2025 01:42:02 +0000
ROA not before: Tue 20 May 2025 01:37:02 +0000
ROA not after: Tue 19 May 2026 01:42:02 +0000
asID: 16909
IP address blocks: 2a14:7584:6316::/48 maxlen: 48
Validation: Failed, certificate revoked on Thu 22 May 2025 15:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
63:2c:b5:7f:a3:b9:2f:66:8f:f3:e2:19:17:6b:b5:1a:ef:4d:43:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: May 20 01:37:02 2025 GMT
Not After : May 19 01:42:02 2026 GMT
Subject: CN=21B953BED88BEA25FB5E4FD43F459298ABFBE63A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:f4:8b:b8:1a:7e:45:74:b9:a7:47:27:15:c9:
7a:2d:df:39:11:10:cc:cb:86:44:4f:51:51:36:f0:
15:9e:bf:6a:15:b1:03:e9:95:98:b6:d9:89:fd:fd:
77:79:99:83:ec:42:2b:c9:6b:92:90:74:a0:8c:dd:
56:3d:07:52:d6:93:ef:8f:79:e2:ee:8f:55:0c:8b:
97:83:7b:0e:2c:0b:03:61:e6:9d:15:16:ab:3b:09:
d8:ea:ba:eb:79:be:fa:0c:1c:ac:9f:37:a9:f9:1a:
eb:bf:1d:b1:c1:b4:8f:ca:5e:1d:84:5e:12:05:a9:
e3:a5:46:00:bb:96:85:3f:16:e4:e3:28:10:a8:66:
85:13:0a:89:5b:4c:db:1a:e3:1f:2b:30:6f:1b:7c:
d1:95:06:11:3f:6d:45:7c:3b:de:2b:99:6d:e4:7b:
be:36:6a:14:44:f2:bf:20:07:ce:6b:a1:75:98:f8:
34:1a:78:57:ed:ce:2b:73:c3:0e:84:43:15:7e:9f:
24:71:b3:8c:47:ba:5b:8a:f0:af:01:ac:07:e2:d3:
e4:7a:7a:6a:f1:0c:d3:fe:91:be:e0:a3:37:f3:7e:
9b:52:8b:3c:8e:08:aa:e8:d7:fd:63:e8:c9:10:bb:
20:52:cf:f6:33:bc:08:f9:d9:ac:ee:80:d0:b3:b0:
ca:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:B9:53:BE:D8:8B:EA:25:FB:5E:4F:D4:3F:45:92:98:AB:FB:E6:3A
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363331363a3a2f34382d3438203d3e203136393039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:6316::/48
Signature Algorithm: sha256WithRSAEncryption
82:94:49:9a:b5:67:20:0a:cf:7c:29:f5:17:aa:04:d0:dc:bd:
21:49:e3:b0:2d:b9:ea:57:72:71:28:66:00:cb:76:b9:1e:3b:
9a:c1:31:ad:29:eb:a2:13:01:cd:39:48:35:b7:c6:3a:35:44:
ab:7c:03:d0:81:8f:44:78:a9:12:33:c4:70:80:99:65:e6:c3:
72:5a:92:8b:30:23:95:15:56:fc:c4:fd:b2:a6:27:eb:45:c0:
63:94:73:b9:05:d4:0a:6a:6e:2a:fa:94:e4:5a:26:77:8c:b2:
72:8c:b9:05:6b:41:62:91:20:0a:8f:5e:5c:e1:57:9b:4b:14:
a8:3f:c4:72:45:c9:e2:b0:a2:73:2e:fd:61:04:92:07:c1:99:
dc:92:1c:6b:41:9e:1e:8c:39:d8:c3:fb:1d:40:ca:32:28:d6:
7b:4e:d8:12:53:f3:2d:ce:5d:fa:8a:17:42:e2:c3:f9:62:30:
d6:45:ab:fb:d8:28:8d:6d:9f:9a:52:1b:dc:bc:7d:d9:06:a4:
6d:f6:d6:6b:6a:13:2f:cd:eb:d1:4f:82:3e:35:2a:74:d7:64:
4a:c2:1e:44:81:d0:1c:21:6d:1f:5d:76:59:fc:94:a9:57:87:
ef:b1:a6:f7:c8:6f:51:ab:74:1e:42:6d:77:1e:f9:79:70:67:
f6:76:c8:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 02:42:05 2025 by rpki-client