Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363331613a3a2f34382d3438203d3e203136393039.roa
File: 326131343a373538343a363331613a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier: VxmHZxDrmlDcwyO6WBhSGqs5JuKBgEcmDLdHet9SMok=
Subject key identifier: 74:7F:AA:0A:3F:28:60:80:6C:65:E0:47:D5:B7:0D:75:35:CD:0A:5B
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 587F8F21BEC2E2C00125B19449243D7A07C11B2B
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363331613a3a2f34382d3438203d3e203136393039.roa
Signing time: Tue 20 May 2025 07:24:02 +0000
ROA not before: Tue 20 May 2025 07:19:02 +0000
ROA not after: Tue 19 May 2026 07:24:02 +0000
asID: 16909
IP address blocks: 2a14:7584:631a::/48 maxlen: 48
Validation: Failed, certificate revoked on Thu 22 May 2025 15:06:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
58:7f:8f:21:be:c2:e2:c0:01:25:b1:94:49:24:3d:7a:07:c1:1b:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: May 20 07:19:02 2025 GMT
Not After : May 19 07:24:02 2026 GMT
Subject: CN=747FAA0A3F2860806C65E047D5B70D7535CD0A5B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:46:7a:3d:0c:09:0d:01:e0:7e:5e:14:e4:0c:
ce:bd:2e:a9:64:3d:d7:96:7f:0a:ec:8c:9c:60:66:
16:7b:27:91:5e:de:39:28:2b:b2:f9:1a:54:a1:51:
6f:57:5f:98:c7:f3:31:ec:ae:a5:4a:ef:f5:5b:18:
10:f3:db:7d:44:fb:02:d6:65:8a:cc:ed:df:e1:d4:
22:52:ea:81:68:26:18:9f:5b:8b:93:08:27:c5:24:
93:82:3a:df:86:8a:24:94:33:14:dd:fd:fb:37:d3:
01:96:98:c8:33:70:6d:47:b4:a5:d7:a8:f4:c9:b5:
14:9f:2a:76:81:43:d4:db:02:87:c8:b6:c9:27:2f:
9a:08:24:f5:2a:6b:32:b4:f8:11:9e:c9:e6:a1:be:
6a:6d:e7:c6:ae:07:5e:ac:9a:db:7c:0d:9f:34:41:
26:4d:73:1f:7a:58:f8:0e:db:ee:2b:36:9c:14:8f:
e8:95:fe:c1:87:6d:45:df:ba:32:ee:29:a7:9e:a4:
a6:6e:0d:bb:53:6e:c2:7d:d8:07:2e:00:66:69:72:
7a:4f:74:af:40:6e:a2:4e:2b:87:f1:52:3e:47:6f:
93:02:76:fd:19:8a:e8:d6:87:4f:bc:aa:b3:b5:0d:
8d:36:2e:ad:2e:7e:ad:ea:73:16:2d:4a:a1:f6:d2:
17:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:7F:AA:0A:3F:28:60:80:6C:65:E0:47:D5:B7:0D:75:35:CD:0A:5B
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363331613a3a2f34382d3438203d3e203136393039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:631a::/48
Signature Algorithm: sha256WithRSAEncryption
a7:09:79:32:75:4d:c8:d9:01:a2:18:4b:65:2f:4c:36:d9:81:
a0:21:f7:77:fb:a9:6e:ec:43:05:3a:90:75:0e:a3:d5:f2:63:
d5:2f:66:df:45:0c:a7:76:a4:06:4f:f1:d5:2b:d9:b0:56:9b:
e8:d4:24:85:b9:dd:3c:7d:64:74:f5:0e:14:3b:fb:58:c2:f6:
c0:fd:7d:9c:be:ba:b9:27:fd:f4:5f:1d:5e:8a:2a:e1:e9:61:
ac:2c:bb:46:96:ee:f5:e8:47:dd:ee:5a:8b:0c:68:03:36:9b:
ce:a0:af:0e:af:9f:e6:ec:29:5f:b5:a3:31:3a:6b:97:b0:d3:
72:72:d1:45:f6:65:bc:fe:0b:17:ad:cb:19:47:af:78:7c:2d:
0b:1c:cf:56:3a:9d:a2:ea:a9:26:6d:a4:81:4c:30:5c:0c:81:
67:81:8b:b7:a2:8c:36:c8:6f:1a:d9:45:28:6a:ad:71:6d:49:
4f:57:6c:f2:9c:48:8c:52:dd:ef:03:26:d8:3b:51:ef:4a:24:
46:b4:5e:7a:47:8f:52:c3:53:a8:ea:1f:19:05:6c:af:54:e3:
71:99:e6:c3:3d:02:ee:eb:97:e8:2a:bb:7a:22:42:08:af:4b:
81:5e:0b:e0:4a:40:81:2e:53:e6:d6:b9:82:94:54:9e:f4:1f:
bb:a6:0a:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 06:26:19 2025 by rpki-client