Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363333323a3a2f34382d3438203d3e203136393039.roa
File: 326131343a373538343a363333323a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier: CJvbLLzhyoIWoooZVuc1ALqL1aTmX+G/QvAUsR4HZTY=
Subject key identifier: 3E:39:06:D8:63:4C:D6:71:21:AF:39:0D:78:82:CA:4C:24:94:5D:28
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 190D8C9AC48BDA2445F6082D3B9927F1921A2ABD
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363333323a3a2f34382d3438203d3e203136393039.roa
Signing time: Wed 21 May 2025 09:18:02 +0000
ROA not before: Wed 21 May 2025 09:13:02 +0000
ROA not after: Wed 20 May 2026 09:18:02 +0000
asID: 16909
IP address blocks: 2a14:7584:6332::/48 maxlen: 48
Validation: Failed, certificate revoked on Fri 23 May 2025 17:54:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
19:0d:8c:9a:c4:8b:da:24:45:f6:08:2d:3b:99:27:f1:92:1a:2a:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: May 21 09:13:02 2025 GMT
Not After : May 20 09:18:02 2026 GMT
Subject: CN=3E3906D8634CD67121AF390D7882CA4C24945D28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:96:99:18:70:b7:43:c1:cc:70:cd:a2:ca:1d:
a1:14:b3:4d:3d:7b:e2:00:71:27:4e:53:10:8a:02:
05:d4:36:29:1a:ff:8c:3f:97:2d:90:59:7f:b6:30:
c2:9c:75:86:dc:cb:1c:c0:d4:e0:75:3f:55:43:b5:
a9:5e:9d:04:a8:dc:89:c4:cb:50:1a:81:c4:3f:04:
1b:ac:98:9b:a9:9b:a9:ac:d5:28:b9:bc:72:9a:11:
df:c3:29:3c:0c:04:9c:2b:10:75:d7:fa:44:32:93:
77:5a:8b:92:e9:ac:a1:1c:de:b0:e0:0e:21:99:42:
70:42:d4:dc:dd:6d:f6:1e:94:ff:bd:f4:75:00:da:
ff:14:9a:6f:4f:35:42:69:2e:2b:69:1d:1f:d5:d1:
c1:23:d1:c9:b1:32:12:52:87:94:91:97:97:04:e3:
a7:2f:61:68:f3:dd:19:36:a3:52:53:f1:f9:57:2e:
7d:4a:ae:5c:03:aa:53:6d:22:bf:5c:10:e7:1f:f3:
9b:3e:07:da:8e:08:c2:60:47:1b:88:fc:f3:5e:57:
eb:17:8b:aa:ab:39:11:fb:0a:19:cc:4f:f6:6e:19:
1a:56:ed:0a:06:dd:85:4b:3b:3d:41:21:17:0e:0d:
98:78:c5:36:4c:a5:d8:5c:fe:44:40:72:49:d6:bb:
ef:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:39:06:D8:63:4C:D6:71:21:AF:39:0D:78:82:CA:4C:24:94:5D:28
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363333323a3a2f34382d3438203d3e203136393039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:6332::/48
Signature Algorithm: sha256WithRSAEncryption
26:c9:b8:5b:69:58:5b:94:70:7e:23:27:2e:25:f0:52:b1:c7:
13:5d:10:72:1b:4a:81:38:db:69:6a:df:a7:3c:10:c7:3e:1b:
27:3f:ef:e0:9e:78:41:bf:a6:d6:6b:c7:20:73:d3:19:d4:99:
85:4e:4d:0e:c5:7f:a1:1f:30:1a:f2:5c:12:07:b7:10:1c:5f:
8a:1a:c2:e4:53:83:e5:0d:ce:2d:c9:3c:13:1f:ec:8c:74:18:
af:59:a9:5c:fe:af:86:86:16:26:24:1f:2a:62:bc:3f:89:95:
21:2b:d8:5b:b4:9e:a3:5d:fc:c8:7a:5d:97:f3:b7:2b:f8:08:
91:11:e3:07:32:b7:a2:6e:4a:37:4c:31:7a:39:ee:bd:52:7c:
86:2b:c3:6e:bb:0e:a8:38:0a:1a:8f:b4:a1:b6:42:2d:7e:62:
c5:a6:50:43:14:6f:79:b2:0b:32:74:9f:71:b0:79:cd:ef:58:
5a:96:37:db:28:e2:bb:17:29:d3:20:a8:ba:ab:9e:f0:64:db:
08:94:f8:c8:76:74:ba:7a:16:4b:b7:60:4b:e3:07:7f:bf:0f:
e9:21:60:67:99:35:fb:b4:50:b8:39:b9:f8:76:c7:38:bd:2a:
c8:a1:b1:28:a7:e9:99:01:9c:8e:0c:62:fa:20:10:66:27:60:
52:13:e5:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 06:28:44 2025 by rpki-client