Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363331623a3a2f34382d3438203d3e203136393039.roa
File: 326131343a373538343a363331623a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier: W8aihGDe0DBiih0QvZzkBokNyurTuyYk91Um9a3il2c=
Subject key identifier: 81:B5:8C:BC:27:4B:89:9B:AD:FE:9B:C3:70:D5:F7:FA:9E:02:52:E3
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 3DD790DDC61F18869635E4BDEF2E4CF436013CFB
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363331623a3a2f34382d3438203d3e203136393039.roa
Signing time: Tue 20 May 2025 07:24:01 +0000
ROA not before: Tue 20 May 2025 07:19:01 +0000
ROA not after: Tue 19 May 2026 07:24:01 +0000
asID: 16909
IP address blocks: 2a14:7584:631b::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 21 May 2025 15:54:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3d:d7:90:dd:c6:1f:18:86:96:35:e4:bd:ef:2e:4c:f4:36:01:3c:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: May 20 07:19:01 2025 GMT
Not After : May 19 07:24:01 2026 GMT
Subject: CN=81B58CBC274B899BADFE9BC370D5F7FA9E0252E3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:97:3f:de:46:37:7a:4b:f1:b3:34:1a:5c:bd:
b0:89:2a:6d:26:46:da:64:29:97:c9:78:85:b5:33:
ee:b9:ee:52:fd:89:8b:0b:2f:29:27:c4:10:9b:d2:
db:09:2d:1e:55:8d:79:fc:ed:3e:8d:cd:45:b5:90:
be:9a:c2:79:42:03:74:59:a3:51:72:94:15:94:8d:
f0:e6:5a:e5:f6:ee:9d:19:35:7b:2e:eb:3a:a5:ac:
62:bd:bd:2b:94:05:dc:a0:97:d9:82:03:0f:34:c7:
47:ea:3a:ad:e7:a4:d7:fe:3d:79:9f:3c:4c:b5:df:
d7:45:bf:9e:56:29:75:c7:51:a2:64:bf:2f:8c:04:
46:d6:9e:8e:30:da:07:c5:cd:98:2a:ec:a5:f7:73:
68:1a:81:b8:d9:0d:b6:dc:b9:05:0a:ab:2a:64:d4:
1a:f4:c0:fe:39:68:51:67:52:ac:91:ff:7f:f4:b8:
17:2e:74:f5:a4:fc:be:db:2a:f7:ea:55:3f:32:4a:
7b:8a:83:df:fc:02:f8:af:3b:fa:83:bf:d1:52:95:
55:59:0d:bf:ef:00:1b:1b:3f:e0:7a:35:9b:59:7e:
da:df:8d:73:2c:7c:59:71:ee:4c:3a:8c:6a:8f:a2:
43:87:88:66:60:23:0c:a4:fc:2b:93:7e:4b:fb:00:
be:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:B5:8C:BC:27:4B:89:9B:AD:FE:9B:C3:70:D5:F7:FA:9E:02:52:E3
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363331623a3a2f34382d3438203d3e203136393039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:631b::/48
Signature Algorithm: sha256WithRSAEncryption
96:f7:b2:63:65:4f:be:e2:ce:77:aa:0a:de:a7:57:d1:5c:21:
ae:bd:3a:ad:3b:3e:cc:88:09:16:08:3c:27:d5:46:00:df:3f:
9f:c0:98:d8:19:23:2e:06:2d:31:41:db:03:c9:d0:cf:3f:be:
a2:41:93:21:1b:ff:fb:53:9e:44:9d:f5:b9:4e:b0:08:76:12:
62:99:64:73:13:cc:91:3c:fd:77:6e:7f:74:a6:27:91:a5:84:
35:9d:d3:13:ce:3b:c9:6b:c5:35:b7:d1:36:c2:8a:c1:81:b2:
57:38:91:62:e8:02:ac:54:12:d6:4b:9d:82:49:5d:27:d8:a4:
ef:33:30:49:ec:98:0b:e1:db:ee:54:6e:c3:6d:f5:ac:e1:eb:
5d:34:b8:d7:c2:80:9e:62:f5:52:1e:30:e8:19:5d:3e:87:58:
b6:a5:44:ae:26:cc:14:a8:c1:87:35:c3:7f:ba:84:dc:49:84:
2d:c5:e1:3d:85:c1:8f:04:bb:25:01:50:77:1f:07:66:ca:12:
20:d6:44:70:4b:36:60:64:58:3d:a7:8b:2e:b0:14:24:a6:57:
02:80:62:09:b6:95:6f:85:ac:85:55:c9:a4:bb:07:65:bb:38:
21:42:6b:31:54:c5:65:87:85:72:22:ee:d3:2e:ed:48:17:1c:
6b:fa:c3:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 02:55:24 2025 by rpki-client