Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363331643a3a2f34382d3438203d3e203136393039.roa
File: 326131343a373538343a363331643a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier: tMxl3x3foHh42jGXJ33t8BGeVXC0zB9v6/MDjwBWjGg=
Subject key identifier: 05:2C:0C:A1:85:A9:2E:B1:1D:B6:EC:DD:13:B5:0C:25:D0:44:9B:6E
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 052251DE722FEFD7B6E179D9F1F513B9979AE6C8
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363331643a3a2f34382d3438203d3e203136393039.roa
Signing time: Tue 20 May 2025 07:24:02 +0000
ROA not before: Tue 20 May 2025 07:19:02 +0000
ROA not after: Tue 19 May 2026 07:24:02 +0000
asID: 16909
IP address blocks: 2a14:7584:631d::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 21 May 2025 22:30:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
05:22:51:de:72:2f:ef:d7:b6:e1:79:d9:f1:f5:13:b9:97:9a:e6:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: May 20 07:19:02 2025 GMT
Not After : May 19 07:24:02 2026 GMT
Subject: CN=052C0CA185A92EB11DB6ECDD13B50C25D0449B6E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:d6:a6:6a:82:ba:58:59:1b:d8:23:70:ea:40:
f4:8a:f3:87:18:60:f5:10:a6:31:b5:39:26:82:52:
be:79:5b:ba:77:ca:ff:3c:f6:4c:04:7a:67:21:f7:
2a:a2:0a:41:78:1e:67:52:5c:68:3b:28:ed:d1:50:
ea:dc:83:f0:7a:c2:e1:0f:04:6d:b1:5e:d7:ca:f8:
f1:de:c9:e4:40:af:62:ab:2a:4a:b5:f1:29:39:be:
32:d8:e7:fa:37:41:58:11:4a:f5:c5:4c:f9:98:77:
54:ca:a0:d8:55:16:86:5b:21:69:4d:79:78:59:ec:
ec:6e:3c:b6:69:3d:7b:84:93:41:e5:e4:4c:c8:d3:
c0:96:52:9f:a6:b2:17:13:97:b2:77:2c:ed:b9:55:
25:81:ea:4e:9a:9c:12:e7:bd:8b:5c:ef:2e:6f:65:
2e:44:58:2d:d6:1d:3b:8f:93:61:84:7c:33:75:f6:
ed:5c:d9:5f:80:44:06:5d:af:4d:46:21:ee:71:fa:
4a:85:b7:91:8a:85:9e:f3:52:9e:00:4d:d3:8b:25:
84:f7:5b:26:ec:02:7b:03:3b:89:0b:bf:52:e4:2c:
4c:d8:7d:46:3e:e2:03:42:25:19:ca:27:4a:4f:e6:
f4:59:01:2f:94:f7:62:ca:83:9b:21:c3:13:86:98:
68:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:2C:0C:A1:85:A9:2E:B1:1D:B6:EC:DD:13:B5:0C:25:D0:44:9B:6E
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363331643a3a2f34382d3438203d3e203136393039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:631d::/48
Signature Algorithm: sha256WithRSAEncryption
68:e4:d2:7b:68:b8:b3:e7:47:1d:f7:05:b6:4e:3f:f0:6d:cd:
07:26:db:b0:90:4a:71:f4:39:d7:43:e6:1d:c2:9c:62:69:9d:
2e:f2:0a:df:c9:00:d5:c0:05:ad:a0:2f:cb:b6:df:4f:c6:83:
ff:cf:1b:b1:89:ea:93:5e:d1:62:e8:ec:e4:b7:87:19:a4:83:
81:ca:0f:bf:26:9d:0e:bb:6a:c7:cf:1c:24:d1:ff:1c:64:da:
d5:a3:28:f7:91:77:1c:62:e1:ba:8e:9c:e6:d1:ea:47:0a:48:
be:1e:ea:dc:78:89:b1:32:22:b8:43:d0:67:67:c7:ff:4f:a6:
8c:e9:8d:ec:af:d2:8f:c6:ed:9b:08:72:fe:f9:95:25:cf:27:
aa:5b:34:d3:0a:4f:cc:f1:fe:80:a9:7e:c9:c1:b8:ff:70:0a:
bc:24:4f:5b:b0:fd:c2:f5:4d:29:b4:78:7d:cd:3c:c8:fe:22:
c2:df:bb:84:a4:92:31:fa:94:fe:30:24:8b:ee:e6:44:8c:16:
8f:a0:1e:d1:11:5c:fc:de:f0:74:5b:20:91:71:94:a2:48:42:
b4:ff:dd:00:cf:64:cb:8c:2f:0f:6e:e0:37:b9:46:65:0d:79:
08:01:c8:a9:81:cc:51:af:a8:c3:9a:ce:9e:9d:54:09:91:06:
85:bc:ad:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 06:24:52 2025 by rpki-client