Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363332343a3a2f34382d3438203d3e203136393039.roa
File: 326131343a373538343a363332343a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier: BmeEnl52HfjImm2r1B6mjE135J8FZSxg5TzP83jlDOQ=
Subject key identifier: 19:7A:F6:DE:8E:3C:18:8D:DD:AD:06:98:8F:61:2F:CB:35:BF:F3:2C
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 7392EECA2C55A51AF3E676A18A201AC27AE37E4B
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363332343a3a2f34382d3438203d3e203136393039.roa
Signing time: Tue 20 May 2025 12:54:01 +0000
ROA not before: Tue 20 May 2025 12:49:01 +0000
ROA not after: Tue 19 May 2026 12:54:01 +0000
asID: 16909
IP address blocks: 2a14:7584:6324::/48 maxlen: 48
Validation: Failed, certificate revoked on Fri 23 May 2025 05:18:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
73:92:ee:ca:2c:55:a5:1a:f3:e6:76:a1:8a:20:1a:c2:7a:e3:7e:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: May 20 12:49:01 2025 GMT
Not After : May 19 12:54:01 2026 GMT
Subject: CN=197AF6DE8E3C188DDDAD06988F612FCB35BFF32C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:a3:0c:13:e9:d5:f3:e3:71:4d:46:95:50:77:
ce:06:43:b9:18:a6:c9:3a:05:ad:99:e0:07:35:ac:
80:cc:f7:67:1f:2c:c6:7d:f0:7f:bf:b1:76:b2:a8:
f6:84:d1:6f:ab:f1:40:2d:d1:48:60:fc:0f:b0:5f:
a6:6f:1e:89:d4:a2:2f:3f:3e:c0:f9:92:60:30:69:
2b:1d:27:34:57:00:31:23:b1:09:b7:7d:61:62:2f:
57:7a:a6:a3:ca:e6:fe:a5:a3:a9:13:c3:61:cc:94:
9c:06:89:bc:a9:62:33:93:45:52:8c:68:e2:85:2e:
51:18:1a:f5:69:eb:af:e1:5f:25:a6:aa:0b:71:d9:
16:ab:bc:8b:f8:f8:06:47:1f:d1:ab:d9:fd:14:1f:
1c:e4:04:22:f4:05:fd:9a:5b:10:c4:3c:c8:97:aa:
74:5c:10:f5:ec:f6:b5:ab:84:d3:e1:38:16:59:25:
46:ed:9f:aa:bd:3b:79:5c:21:4a:fe:ce:a3:07:ea:
a8:2b:55:17:28:c1:84:e4:20:52:8a:dd:82:50:b5:
02:83:5e:81:b6:54:1f:d0:1b:43:56:1f:04:20:11:
1e:ef:96:37:2d:0d:a6:45:29:ce:d7:41:ed:aa:7b:
56:81:be:4e:c6:ff:e0:e3:a2:45:2e:0c:59:37:47:
d1:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:7A:F6:DE:8E:3C:18:8D:DD:AD:06:98:8F:61:2F:CB:35:BF:F3:2C
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363332343a3a2f34382d3438203d3e203136393039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:6324::/48
Signature Algorithm: sha256WithRSAEncryption
ad:57:c0:1b:34:f2:83:6a:70:25:12:4c:1f:6f:c5:f8:ab:6d:
8b:57:b5:29:84:0c:0a:d6:c3:71:c4:87:52:3f:7c:98:f0:9a:
45:c8:f7:fd:ad:35:fd:4c:79:b5:cf:8f:fe:d5:b0:9b:78:05:
03:85:75:9c:04:2f:c2:6c:d5:a0:f7:62:ab:45:e9:cf:4b:2f:
a7:1e:dd:f8:ac:f0:02:27:67:9f:5e:0a:e0:3b:7c:c1:f4:2b:
06:9c:c9:da:dd:3a:9e:01:6d:55:77:4a:d0:d6:97:1a:39:f3:
7e:95:48:f7:c3:0c:5b:5c:27:5a:5c:11:6d:c2:ae:94:d7:f0:
3e:c0:b9:fe:f0:b5:07:ba:af:53:b6:9b:3b:b7:3c:70:2d:98:
a6:5b:ee:9d:62:a0:71:29:68:4c:e8:b2:00:6f:1a:09:1e:36:
6e:6a:cf:a2:61:2b:54:90:4c:14:c8:d1:c5:98:e2:e0:29:05:
3c:4f:fa:5c:c2:30:f8:8a:63:78:23:22:61:86:68:88:4a:e0:
51:f1:2e:b2:59:c6:a2:db:5e:a5:82:01:2e:c6:a5:50:73:fe:
e8:79:8e:6e:d2:26:6b:f6:1c:86:d0:9f:13:25:97:80:6b:cf:
0b:d3:ce:42:9f:72:54:8e:cd:4f:d1:56:ee:ab:38:19:61:4d:
3b:d2:78:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 07:37:21 2025 by rpki-client