Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363334333a3a2f34382d3438203d3e203136393039.roa
File: 326131343a373538343a363334333a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier: CHt0/0j4QK5yqbFMBCTMV6gwl7nzCJFeyMWVGAuLKyc=
Subject key identifier: 14:3A:0D:56:CB:0C:AB:BD:10:AD:91:48:FF:29:75:B2:E9:0F:1A:D0
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 0B0FB22A0A7FEEFA866B9DDBBE612590BCECB405
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363334333a3a2f34382d3438203d3e203136393039.roa
Signing time: Thu 22 May 2025 06:48:02 +0000
ROA not before: Thu 22 May 2025 06:43:02 +0000
ROA not after: Thu 21 May 2026 06:48:02 +0000
asID: 16909
IP address blocks: 2a14:7584:6343::/48 maxlen: 48
Validation: Failed, certificate revoked on Fri 23 May 2025 20:30:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0b:0f:b2:2a:0a:7f:ee:fa:86:6b:9d:db:be:61:25:90:bc:ec:b4:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: May 22 06:43:02 2025 GMT
Not After : May 21 06:48:02 2026 GMT
Subject: CN=143A0D56CB0CABBD10AD9148FF2975B2E90F1AD0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:43:d6:80:53:bd:59:69:31:f8:d2:ae:7f:ea:
b6:ba:b2:0d:e2:3c:5d:e4:47:8d:fc:c8:1a:98:e2:
f9:b0:54:e7:f4:a1:b6:73:1a:27:b2:76:04:a4:f7:
41:01:b0:3b:15:97:80:92:f3:66:e4:42:c4:4e:39:
5f:70:29:05:8c:1e:e3:20:b7:5e:99:6f:4f:9e:f1:
ae:f2:ea:4a:ea:c5:3a:4c:ee:8b:9f:89:16:18:b9:
91:e2:f8:31:95:c4:95:1f:03:98:ab:df:1f:b0:d7:
79:03:f2:07:35:0b:0d:26:96:18:21:f9:b3:32:5f:
33:a5:34:d6:f7:d5:8f:20:eb:9b:b4:54:30:fe:b6:
c3:56:07:47:03:3b:d4:b2:b1:27:f6:ef:76:7b:30:
ae:23:26:d8:9c:f0:6d:ce:21:fe:43:62:75:28:bb:
e3:42:1b:39:bf:6e:d6:51:ae:9f:5d:2d:fe:b4:b9:
6c:e3:70:bb:be:1f:f6:c9:e2:bd:24:43:9a:fe:46:
17:ff:4f:d3:dd:f5:d0:51:be:70:17:0e:94:0c:d7:
58:23:40:b0:e5:ea:c9:a9:63:f4:32:d9:4b:af:e2:
ed:5b:7a:8f:ca:87:43:1f:0e:ad:a9:7e:a2:b1:4f:
89:e6:7f:09:c6:ca:23:a5:54:e0:96:06:81:a6:26:
1d:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:3A:0D:56:CB:0C:AB:BD:10:AD:91:48:FF:29:75:B2:E9:0F:1A:D0
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363334333a3a2f34382d3438203d3e203136393039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:6343::/48
Signature Algorithm: sha256WithRSAEncryption
9f:0e:89:b9:ad:ba:de:54:ed:73:b2:e2:17:27:fa:68:83:67:
ad:d9:03:90:d2:a3:88:d7:ab:d1:08:a1:70:28:8f:e7:72:6f:
fc:83:d4:1a:cf:17:43:b2:b2:37:64:ee:4c:c3:40:ca:fa:c4:
cc:ab:a6:98:9b:8c:bc:7e:45:07:be:06:48:ef:26:a9:f4:a9:
39:80:7d:26:b2:d8:00:65:6c:1f:24:b0:61:fd:ad:35:0e:28:
fd:fc:2f:a0:7a:2e:e0:22:c0:09:82:fa:2d:27:0d:61:c0:9c:
97:51:91:ed:62:cc:9b:46:f5:cd:c8:5e:f2:c5:e2:cb:c7:7e:
79:7c:41:01:91:bf:e3:45:1c:19:4f:d3:ca:64:87:1a:07:85:
0f:5f:d6:61:6c:b4:cc:d9:4f:cd:bb:ce:a0:e2:03:3a:ca:8a:
80:47:dc:12:3a:80:73:e9:70:ec:d1:35:45:98:05:72:a4:b3:
f2:78:64:81:1f:e9:b9:8b:26:dd:d8:7a:70:6d:0d:d7:2a:b2:
d0:fc:dc:3e:16:a9:0b:11:9e:ab:00:b2:0a:a0:be:6e:3c:94:
64:6a:de:c3:4d:b1:bf:5c:e1:c8:40:73:1a:47:73:18:33:a2:
f6:a9:12:25:b5:06:db:38:94:82:79:1a:ef:ee:f0:d5:aa:dc:
ba:0c:ba:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 14:41:58 2025 by rpki-client