Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363332383a3a2f34382d3438203d3e203136393039.roa
File: 326131343a373538343a363332383a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier: sw8yK0mtvfpBH9NQdY5QNXqeTmXA5/s2NPZMiaBIBmQ=
Subject key identifier: 71:E1:83:AB:46:90:7A:1C:3E:23:F6:8D:BD:E7:ED:9E:73:D2:23:0A
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 19C9CA3962CC0807F0F6C24245458564499AB29C
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363332383a3a2f34382d3438203d3e203136393039.roa
Signing time: Tue 20 May 2025 18:12:01 +0000
ROA not before: Tue 20 May 2025 18:07:01 +0000
ROA not after: Tue 19 May 2026 18:12:01 +0000
asID: 16909
IP address blocks: 2a14:7584:6328::/48 maxlen: 48
Validation: Failed, certificate revoked on Fri 23 May 2025 07:54:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
19:c9:ca:39:62:cc:08:07:f0:f6:c2:42:45:45:85:64:49:9a:b2:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: May 20 18:07:01 2025 GMT
Not After : May 19 18:12:01 2026 GMT
Subject: CN=71E183AB46907A1C3E23F68DBDE7ED9E73D2230A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:9b:ea:c8:c4:b2:3e:fe:21:6d:07:1f:de:4a:
fd:3f:f5:c6:7b:4f:73:d9:8d:7a:b2:89:d2:b7:32:
1e:c4:d8:0d:ae:e0:a4:76:34:b9:84:ea:13:b7:fd:
1a:fe:37:dc:f3:70:10:26:d8:10:e7:18:a4:46:5f:
d9:a1:da:88:c1:37:d5:84:f7:3e:13:5a:2b:8b:c4:
5d:bb:27:11:1d:21:27:c8:0f:4c:07:b5:5e:0d:20:
42:08:1d:fc:16:42:89:ff:b5:ab:85:d8:c9:08:d2:
b0:30:44:16:62:5d:e8:95:08:a2:89:9d:9f:8e:44:
ab:a0:2a:91:7a:04:36:ec:5a:db:a9:03:e1:fb:99:
76:e6:5d:af:11:46:0d:cd:9c:bd:e2:b9:c6:85:d5:
9b:bf:7d:97:39:57:6f:19:35:b8:85:12:68:f9:92:
82:1a:f7:4a:27:63:cd:2b:97:a5:5b:25:f6:69:60:
f3:d4:0b:c6:82:9e:8a:2b:46:8f:b1:1a:f0:c3:61:
0c:6a:2b:87:3f:f7:72:45:76:f4:26:6a:76:05:78:
94:b5:05:9e:2d:6d:13:c0:57:81:e6:d5:6d:a5:3c:
db:68:63:77:dd:9d:29:0d:b9:6a:99:af:25:6e:a2:
1e:ee:75:ed:fe:99:38:3f:1b:82:96:8c:b0:09:f2:
10:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:E1:83:AB:46:90:7A:1C:3E:23:F6:8D:BD:E7:ED:9E:73:D2:23:0A
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363332383a3a2f34382d3438203d3e203136393039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:6328::/48
Signature Algorithm: sha256WithRSAEncryption
1d:8f:c7:97:55:db:9d:4d:99:4a:9a:b2:b9:da:b6:be:9c:a5:
7f:ad:b7:f9:7d:6c:2d:21:83:82:ca:35:1e:01:18:85:9c:31:
96:d1:87:60:d4:31:1f:20:3d:91:db:9f:dc:f9:1d:0f:38:71:
41:c2:d2:9a:92:ed:02:69:63:3f:a9:32:b8:9f:8f:08:c1:39:
bf:d3:43:9e:4c:9c:71:9a:d1:1e:83:e4:be:15:29:3d:9d:9d:
f4:fe:f5:70:43:72:98:e4:a3:94:d3:b5:f8:c7:9d:50:ef:e6:
ed:cf:1a:ac:45:d9:e2:85:e8:bd:d5:bb:1f:15:6b:3b:c8:27:
7b:15:5c:a0:cd:90:18:b9:42:f8:10:6d:08:4c:26:fc:53:c3:
d1:17:c3:7a:d4:0e:c0:fa:75:27:e7:bd:86:7a:89:36:3c:7d:
c5:42:f7:09:4e:0b:63:3a:23:8d:0d:7c:fb:f4:51:db:f8:12:
f5:67:5c:91:74:83:e6:02:bb:37:dd:ee:d7:33:60:90:4e:4b:
5c:29:a7:27:1b:a4:47:c2:18:56:87:ac:23:b6:62:82:c1:7f:
0b:49:e9:a7:71:21:e4:33:22:fc:5b:c9:d4:23:52:3a:7e:29:
1c:c6:13:4b:1a:eb:b6:c3:bf:62:f3:5b:97:fa:d7:15:50:d5:
ba:a8:47:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 16:37:44 2025 by rpki-client