Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363335363a3a2f34382d3438203d3e203136393039.roa
File: 326131343a373538343a363335363a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier: JCrtVWl8+NoCNQD8ASanybDxuVSqGrUcmV3zmz1p758=
Subject key identifier: F7:EB:52:97:5E:66:D1:7D:B7:23:8F:89:23:3A:AB:92:83:ED:EB:D1
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 328497C00B9E893620EF3D5D4CD4C6623F355146
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363335363a3a2f34382d3438203d3e203136393039.roa
Signing time: Thu 22 May 2025 17:00:02 +0000
ROA not before: Thu 22 May 2025 16:55:02 +0000
ROA not after: Thu 21 May 2026 17:00:02 +0000
asID: 16909
IP address blocks: 2a14:7584:6356::/48 maxlen: 48
Validation: Failed, certificate revoked on Fri 23 May 2025 20:36:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
32:84:97:c0:0b:9e:89:36:20:ef:3d:5d:4c:d4:c6:62:3f:35:51:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: May 22 16:55:02 2025 GMT
Not After : May 21 17:00:02 2026 GMT
Subject: CN=F7EB52975E66D17DB7238F89233AAB9283EDEBD1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:c0:6a:c3:18:ee:15:21:54:f8:e0:44:56:d3:
42:2b:47:2e:f8:dd:b5:d0:77:31:15:a7:94:fb:7d:
34:ce:8d:7c:57:1b:ad:aa:a9:e8:6d:da:a5:dd:15:
27:49:bb:dc:bb:e9:57:65:2f:16:ff:5b:a1:9c:b2:
d9:eb:5c:3a:de:46:28:e6:43:0a:5c:77:32:92:61:
eb:ba:10:c5:dd:51:fc:c7:d6:3a:f5:fc:a6:74:66:
5a:e8:b7:97:52:df:ba:30:79:64:73:a7:18:02:3d:
37:52:76:b3:f9:f8:59:b0:a5:85:ec:9d:98:aa:81:
18:7e:89:6a:70:48:7a:4c:c0:f5:e1:1e:96:b8:a8:
a8:90:82:62:37:b0:43:62:5b:62:e2:19:db:c2:32:
da:e8:18:d8:3b:42:65:8d:cf:8a:ef:2c:6b:c7:8a:
29:0f:a8:8f:bf:8e:75:de:53:51:90:3d:9a:9b:80:
8c:1b:4a:c3:87:07:76:7a:3a:43:4b:6b:98:8d:f9:
43:1f:6a:fb:a5:ea:74:bd:56:00:d9:76:fa:2e:8b:
80:6c:e9:b3:6e:58:6b:d6:9a:20:e2:c8:92:9d:c6:
71:fa:ba:74:02:0a:eb:8d:c7:93:1f:ee:a7:2d:76:
75:55:10:97:74:5e:d0:cd:a5:fd:40:4d:ef:72:9a:
cd:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:EB:52:97:5E:66:D1:7D:B7:23:8F:89:23:3A:AB:92:83:ED:EB:D1
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363335363a3a2f34382d3438203d3e203136393039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:6356::/48
Signature Algorithm: sha256WithRSAEncryption
32:e2:0e:a0:75:38:1b:da:80:84:51:3b:61:9d:b2:af:0b:93:
65:27:6b:1e:6d:9c:b4:67:b6:ef:5b:e3:c4:48:13:4a:cd:d5:
1f:17:88:45:77:ee:60:7f:66:a5:25:10:23:4c:df:cf:c9:dd:
02:51:bc:4f:e8:2c:53:99:e1:ff:fc:48:b0:01:54:67:79:94:
58:fe:a8:de:72:5b:f2:dd:e0:25:45:c7:bf:c7:cc:fa:b4:59:
5f:6a:f9:d7:2a:b1:50:32:f5:1c:ac:16:66:b8:f0:8f:4d:cb:
1c:4b:14:e3:13:8e:60:f6:48:32:be:dc:21:ec:ae:e8:b8:f4:
80:e2:fa:da:c8:73:12:b0:d7:05:d1:5c:fc:f6:25:63:0d:55:
dd:1a:c5:fc:0f:cd:85:57:f6:eb:33:0d:e3:55:8f:9b:9c:58:
ac:a0:74:c2:e0:b1:77:d1:67:cf:e5:60:bf:88:dd:34:85:c1:
17:a3:e5:42:6c:e7:55:3c:de:61:a0:db:d2:86:d9:e3:83:6b:
81:3d:a5:39:a7:40:78:cf:39:22:08:a9:9f:98:63:9d:e6:58:
fb:21:7c:bc:db:ba:da:d5:5e:ac:f8:74:59:5c:0e:b6:11:85:
78:74:b2:a4:c8:20:20:cf:ca:e8:67:62:d7:25:84:5b:95:2f:
a0:89:bb:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 08:22:25 2025 by rpki-client