Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363333353a3a2f34382d3438203d3e203136393039.roa
File: 326131343a373538343a363333353a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier: hGnQ8xtNWcxBv786MXH9rYWF8YnnDEpkU0GWMl5LqkE=
Subject key identifier: A5:D6:8D:E5:76:06:CF:23:E2:D4:B5:B4:56:FE:AA:2E:24:EF:C0:ED
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 6579504967048A761D006F5088342BD17AFD51CE
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363333353a3a2f34382d3438203d3e203136393039.roa
Signing time: Wed 21 May 2025 16:00:01 +0000
ROA not before: Wed 21 May 2025 15:55:01 +0000
ROA not after: Wed 20 May 2026 16:00:01 +0000
asID: 16909
IP address blocks: 2a14:7584:6335::/48 maxlen: 48
Validation: Failed, certificate revoked on Sat 24 May 2025 11:24:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
65:79:50:49:67:04:8a:76:1d:00:6f:50:88:34:2b:d1:7a:fd:51:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: May 21 15:55:01 2025 GMT
Not After : May 20 16:00:01 2026 GMT
Subject: CN=A5D68DE57606CF23E2D4B5B456FEAA2E24EFC0ED
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:c8:3e:34:5c:bd:c7:de:bc:49:82:b1:6b:90:
f3:31:8b:5b:b2:43:84:29:90:74:93:04:69:6e:68:
e0:b7:a8:84:8d:01:1d:69:75:a5:fb:30:2e:1d:95:
11:b6:76:66:d8:61:f9:1c:da:6f:29:12:af:27:63:
d4:4d:4d:8f:c8:dc:1f:71:75:5d:a7:80:9c:fc:cc:
70:52:34:50:58:04:b4:49:77:82:28:b5:c9:14:c8:
5c:08:9b:3a:af:14:5c:53:01:aa:f3:47:a6:b3:37:
ef:9c:32:ba:8e:60:78:3b:50:0d:10:c8:15:f8:c7:
89:68:58:61:2a:e5:7c:7f:0e:4e:da:68:1d:ac:1e:
db:58:05:84:f4:fe:97:69:6a:a6:b1:b2:8f:e4:7e:
e3:01:93:9e:82:4d:ce:47:85:9c:91:30:b6:5e:91:
72:3e:ef:d2:48:cc:e2:aa:a4:d2:22:da:86:c1:d6:
ae:39:a8:c0:80:83:da:16:8d:89:92:70:03:81:16:
4a:43:36:c6:ec:aa:46:c9:99:ca:0c:96:94:08:ab:
84:32:f8:25:00:32:2a:17:93:b8:3b:63:79:3a:f6:
fb:1c:5c:8d:7d:b3:23:78:e4:36:44:d0:72:51:bd:
8d:71:27:a1:83:e6:71:d7:07:4f:c2:c3:c0:85:12:
39:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:D6:8D:E5:76:06:CF:23:E2:D4:B5:B4:56:FE:AA:2E:24:EF:C0:ED
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363333353a3a2f34382d3438203d3e203136393039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:6335::/48
Signature Algorithm: sha256WithRSAEncryption
14:a6:ac:c9:da:7c:56:6f:4a:a2:95:37:b4:19:78:2b:37:21:
41:97:78:e1:f7:96:3c:67:93:f4:b2:f9:2d:20:0d:00:3e:07:
27:54:ae:de:dc:09:06:c9:7a:08:d7:45:26:5b:89:8a:50:ed:
d8:43:b6:6b:aa:9c:dc:2f:7a:a0:19:33:f7:4b:15:73:b6:dc:
40:1d:b9:cc:0c:3d:3a:99:f5:d7:a9:1f:69:9a:f2:46:34:e5:
dd:0f:56:98:e1:8d:84:9c:0b:11:b4:4d:51:b1:40:6a:e0:2e:
9a:96:a5:fc:a8:fc:7a:48:db:22:ac:ba:28:17:84:b9:fb:0d:
8e:9d:27:9d:a4:ff:45:de:78:e7:3e:f9:ca:29:ba:4e:47:9b:
c1:56:f5:9f:d5:9d:4b:0b:9c:48:ac:d0:ca:7e:40:5b:b1:cf:
ea:0c:1f:63:9d:3f:0e:2d:99:77:ee:3d:1c:f4:87:f4:1f:c0:
9c:ff:14:6e:69:b6:6a:5e:50:14:7e:57:c6:e2:6e:53:a4:aa:
12:ad:71:34:f1:4d:65:38:c1:e4:47:d3:b9:2a:3e:be:c0:37:
75:7a:42:8f:1d:c9:c7:32:91:d7:77:d6:ee:95:82:4c:61:1d:
22:40:79:59:a9:97:51:53:54:fa:3a:62:5a:6e:4f:c7:96:6d:
34:f2:e5:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 07:32:51 2025 by rpki-client