Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363335383a3a2f34382d3438203d3e203136393039.roa
File: 326131343a373538343a363335383a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier: DX6udD7CALu0MLisiy7AFnpzK4YhAr6nI5Jt+In7YG4=
Subject key identifier: 1D:F4:91:69:63:AC:14:53:14:D4:74:B2:AF:53:85:6E:0E:29:8A:FD
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 5572ED45B9828837636A23F520DAC2A166E81BD1
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363335383a3a2f34382d3438203d3e203136393039.roa
Signing time: Thu 22 May 2025 17:00:02 +0000
ROA not before: Thu 22 May 2025 16:55:02 +0000
ROA not after: Thu 21 May 2026 17:00:02 +0000
asID: 16909
IP address blocks: 2a14:7584:6358::/48 maxlen: 48
Validation: Failed, certificate revoked on Sat 24 May 2025 16:12:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
55:72:ed:45:b9:82:88:37:63:6a:23:f5:20:da:c2:a1:66:e8:1b:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: May 22 16:55:02 2025 GMT
Not After : May 21 17:00:02 2026 GMT
Subject: CN=1DF4916963AC145314D474B2AF53856E0E298AFD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:c6:5b:78:0b:56:f2:e4:63:ec:d1:50:2f:b8:
f6:87:05:5e:76:fc:6b:2d:61:08:ba:e0:08:ac:16:
74:b6:d6:c3:9b:91:88:b2:a0:5c:c7:b8:9a:03:1b:
05:41:f3:11:97:d3:e1:c7:f2:bc:07:79:e3:90:5b:
a7:2d:05:89:27:d3:bb:ad:05:23:0f:47:52:82:b9:
71:b3:01:b6:5f:40:3f:9c:e5:84:18:e6:47:1e:23:
ba:cb:48:74:1a:46:44:d3:8b:4d:65:96:30:80:26:
46:92:e3:4b:ca:3b:82:8f:a8:e6:b9:6d:92:b4:c2:
82:7a:6e:fa:69:14:07:2a:01:22:ca:0f:f7:ae:c8:
18:e6:4f:16:c8:54:2a:98:f9:79:de:cb:a0:2f:c1:
b3:25:4e:89:55:6d:6d:9c:4d:dc:25:d8:7c:ef:f6:
be:d3:c7:35:68:bc:f9:58:4d:eb:68:9d:d9:9e:32:
79:03:8b:53:0c:3e:24:65:38:e6:8c:f1:ab:3b:0c:
3c:3f:d2:cc:c5:2c:64:06:8f:97:26:f6:13:fa:42:
35:34:85:45:48:43:02:dd:09:f1:14:32:cb:80:3a:
2d:af:0b:08:09:5b:4c:a9:10:ea:54:45:2b:34:81:
6b:8e:93:57:39:2a:0b:31:5b:b4:9b:c1:18:bf:27:
1b:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:F4:91:69:63:AC:14:53:14:D4:74:B2:AF:53:85:6E:0E:29:8A:FD
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363335383a3a2f34382d3438203d3e203136393039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:6358::/48
Signature Algorithm: sha256WithRSAEncryption
55:89:f7:4e:47:90:53:5b:9e:4a:c5:25:5a:d6:d9:7f:be:c0:
9c:cd:18:9b:79:3b:1d:67:d9:91:e7:89:05:b3:2c:91:80:82:
08:fb:6d:1e:a3:83:ed:13:98:55:81:9a:93:80:00:fb:76:2d:
82:e6:e4:69:a7:96:c1:98:84:f6:ad:ec:5c:30:3f:a8:7d:67:
77:19:85:1c:92:5e:90:0f:6b:c8:7b:6d:9b:de:15:fc:d0:74:
8c:df:3f:4e:6c:f7:85:7e:48:ba:e0:c1:b8:e9:10:c6:83:c9:
41:09:89:72:79:13:16:b7:ff:ab:23:21:06:55:ff:da:51:6f:
21:71:3a:eb:4d:49:ae:9f:b9:dc:d0:25:4f:f8:30:4b:08:af:
4b:25:6f:71:79:0e:11:94:78:08:8d:a4:87:0e:cd:3e:10:c0:
71:d8:59:75:ec:89:65:fd:ef:de:9f:4a:dd:4e:c5:dd:50:80:
9d:51:d6:0c:81:3a:ca:98:fd:5b:2e:42:40:ce:a0:a7:70:9e:
54:ae:b5:02:88:d3:98:3e:b9:8d:ba:af:ea:20:6d:c4:fd:4a:
5b:48:f4:8f:07:2f:e4:61:93:a6:8d:3e:08:f3:2d:f8:a9:ed:
98:7e:63:14:89:6f:27:a9:bd:b3:70:69:bd:42:52:b0:f4:9c:
f3:df:86:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 07:48:24 2025 by rpki-client