Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363334393a3a2f34382d3438203d3e203136393039.roa
File: 326131343a373538343a363334393a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier: CKK9VC9xeNXleZ1Mw2f5RQ3L8UF8zKccD5lQpvVlgh0=
Subject key identifier: CF:60:15:B6:8F:57:4E:2E:15:0C:6A:7B:82:E3:61:A7:25:2C:C5:A4
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 4B5F40DAB1F438B0AE31894F06CEDFB23BF5669F
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363334393a3a2f34382d3438203d3e203136393039.roa
Signing time: Thu 22 May 2025 15:12:02 +0000
ROA not before: Thu 22 May 2025 15:07:02 +0000
ROA not after: Thu 21 May 2026 15:12:02 +0000
asID: 16909
IP address blocks: 2a14:7584:6349::/48 maxlen: 48
Validation: Failed, certificate revoked on Fri 23 May 2025 12:48:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4b:5f:40:da:b1:f4:38:b0:ae:31:89:4f:06:ce:df:b2:3b:f5:66:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: May 22 15:07:02 2025 GMT
Not After : May 21 15:12:02 2026 GMT
Subject: CN=CF6015B68F574E2E150C6A7B82E361A7252CC5A4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:3a:58:cb:1f:2f:ab:7b:76:51:11:79:cb:d6:
81:ff:ee:fe:1b:40:72:5e:e3:7b:4e:0c:1f:cd:a5:
7b:44:27:78:be:26:22:fa:33:8a:0b:7b:d9:92:55:
e9:0f:15:47:4d:4c:24:2e:5e:a1:63:cd:f0:7b:87:
c5:a4:40:02:ea:59:0c:0f:14:70:22:2b:71:87:c1:
a6:1d:e2:ca:b8:e3:46:54:27:94:0f:80:53:69:6a:
79:bc:a0:c6:62:43:e4:68:93:96:80:8a:7c:1f:f1:
05:f5:74:e1:d0:a4:53:1e:8b:2d:37:5b:eb:23:52:
69:ce:9c:03:75:fd:d4:e9:04:a3:14:a6:e8:2a:4b:
23:31:58:7f:fa:e0:da:e8:34:b4:39:5f:ae:35:9c:
e5:60:0d:a6:4b:a7:a0:de:41:a5:0b:48:6c:e4:8b:
ce:71:12:37:e1:98:fd:da:f4:94:28:b6:62:e1:c1:
a9:4f:f5:c7:77:c2:f4:e2:ac:aa:7d:a3:9e:b2:f5:
df:7f:b8:c8:35:1a:9c:95:a8:d0:c4:7d:f9:22:a8:
cb:8a:71:45:1f:0d:6c:1b:1c:57:06:d1:4a:84:65:
bc:68:ec:f6:93:18:8d:df:44:75:8e:ff:ae:6c:55:
57:3f:9b:d3:60:93:70:d6:e4:09:51:df:91:17:5c:
bc:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:60:15:B6:8F:57:4E:2E:15:0C:6A:7B:82:E3:61:A7:25:2C:C5:A4
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363334393a3a2f34382d3438203d3e203136393039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:6349::/48
Signature Algorithm: sha256WithRSAEncryption
80:bc:6b:a8:5e:67:be:28:b9:11:1b:66:2a:c9:ad:60:38:0d:
dc:5f:f9:36:b9:1d:2c:93:4c:7d:6a:cc:03:13:60:15:ff:1f:
ac:26:33:b6:93:b9:18:69:83:20:ed:c8:22:b2:61:a3:2f:cf:
ec:96:83:d1:d5:5e:35:56:c0:c1:85:f2:0f:92:d5:31:3c:be:
87:77:9f:0d:88:c1:e9:f7:e5:5d:42:ab:25:df:f8:c6:29:8c:
bc:20:f9:97:81:51:44:fa:0a:9a:92:38:49:9f:28:13:ed:0e:
33:5d:cd:62:2c:fb:29:12:20:06:63:6b:51:c7:d8:fa:f6:94:
1a:a8:37:f6:bc:77:e4:99:94:8a:d2:fc:f1:30:3a:8b:61:4d:
b9:b3:d8:a3:30:71:17:c7:78:a4:e0:8d:32:e7:27:14:c5:c7:
96:4b:8a:8a:77:2d:93:40:88:e3:d3:89:a8:8c:eb:e1:82:3b:
0a:36:93:8e:33:ca:a5:9c:3c:cf:ad:6e:5d:7e:56:a0:98:95:
f0:b8:66:78:24:3f:17:b2:4a:b0:62:d2:7e:67:5c:2d:ab:88:
ab:33:f7:99:60:9a:a8:90:f0:4d:eb:ac:61:47:ba:60:6d:47:
9f:91:e8:85:a5:f7:a8:a4:0f:6d:7a:b0:43:35:04:5e:06:bf:
2c:93:a3:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 14:40:39 2025 by rpki-client