Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363332333a3a2f34382d3438203d3e203136393039.roa
File: 326131343a373538343a363332333a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier: yT31e4Ag0ZM4rUzuaUBy2By21oqhfqVBH8GTr1kAMUM=
Subject key identifier: 76:45:0D:F0:03:1C:25:25:F2:EF:3B:AA:63:A5:9D:EA:3F:86:4B:66
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 71174067117334FEB0C5766135C958F73FB46CE8
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363332333a3a2f34382d3438203d3e203136393039.roa
Signing time: Tue 20 May 2025 12:54:02 +0000
ROA not before: Tue 20 May 2025 12:49:02 +0000
ROA not after: Tue 19 May 2026 12:54:02 +0000
asID: 16909
IP address blocks: 2a14:7584:6323::/48 maxlen: 48
Validation: Failed, certificate revoked on Fri 23 May 2025 05:12:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
71:17:40:67:11:73:34:fe:b0:c5:76:61:35:c9:58:f7:3f:b4:6c:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: May 20 12:49:02 2025 GMT
Not After : May 19 12:54:02 2026 GMT
Subject: CN=76450DF0031C2525F2EF3BAA63A59DEA3F864B66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:56:d8:cf:4d:96:aa:0b:b3:75:c6:a1:82:36:
e6:97:76:82:1b:01:0a:27:94:dc:17:f6:72:15:cb:
18:7d:eb:5c:18:7b:70:d1:d4:29:dd:23:ec:1a:96:
c1:41:26:5d:e4:94:81:46:d2:53:36:8f:63:ac:e2:
50:f1:f3:00:4d:51:93:5f:88:0a:51:48:79:5b:a1:
6c:e0:86:54:50:71:20:f1:c0:9b:98:cd:26:45:d2:
42:8b:f4:8f:aa:92:c9:10:4d:89:f7:66:b1:c7:25:
c3:b5:e3:9d:89:ba:a0:09:8f:58:51:7e:a4:18:fd:
89:fe:18:5f:51:dd:42:9f:d9:92:c8:7f:44:da:be:
65:04:39:63:49:44:d0:65:03:97:ae:8a:c8:78:19:
72:a3:2d:de:d1:b7:a0:52:16:28:a8:e6:49:b7:54:
0c:f6:30:19:ce:3e:ea:b8:d2:c2:01:e5:0f:8f:d6:
a1:f5:d2:b0:cf:b6:a0:bb:b4:14:8b:60:91:f1:90:
dd:4b:08:e7:7d:9a:b2:97:7f:9a:6c:fd:6f:c8:8f:
b5:5d:76:ac:78:37:8f:92:75:85:e6:5d:90:4f:06:
4c:1a:2d:fb:44:89:6e:a9:ff:cb:3d:51:7b:36:66:
3f:e1:a8:16:b8:28:d1:e2:de:f3:b3:5b:78:55:c3:
ec:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:45:0D:F0:03:1C:25:25:F2:EF:3B:AA:63:A5:9D:EA:3F:86:4B:66
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363332333a3a2f34382d3438203d3e203136393039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:6323::/48
Signature Algorithm: sha256WithRSAEncryption
2a:f3:e6:e8:e8:31:3e:ce:81:16:5b:27:b2:b4:e4:69:ff:89:
07:30:6d:eb:64:e5:9a:02:97:1b:b2:02:4b:5e:65:27:6d:ba:
e4:5a:4d:2c:8b:b8:72:1b:49:3b:66:5d:8c:33:85:88:fc:08:
d5:95:4b:36:8e:c1:67:45:3d:54:3e:80:1c:09:81:d2:8f:cc:
24:4c:e5:ef:c0:96:2b:e5:24:5b:91:68:25:01:37:6b:0f:25:
10:31:ef:48:7c:86:7c:c0:f2:fa:90:f9:4a:71:17:12:32:48:
9e:34:e3:fe:c4:9d:42:3f:11:8e:96:a3:d8:05:cb:c8:0f:63:
ce:c3:70:af:2c:16:b6:3a:f3:c5:1b:11:14:22:f9:a0:81:18:
40:8b:cd:84:65:d0:3d:1f:c2:0a:af:38:49:11:50:0f:9a:7f:
97:83:cb:fb:1f:a3:f7:28:82:16:b6:9d:49:de:04:d8:00:16:
87:1e:6f:bb:32:89:c6:71:9c:65:63:4a:62:96:1d:e2:22:97:
43:00:bf:94:92:b1:d3:ac:6d:6a:22:77:45:8e:7e:45:52:40:
0a:e6:0d:bf:34:f5:e0:ac:94:ce:cf:1d:c2:f8:74:9f:10:86:
bf:df:eb:44:ca:8f:f0:68:59:fa:8c:c9:dc:df:cf:48:20:c0:
0c:8e:c5:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 06:33:57 2025 by rpki-client