Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363335633a3a2f34382d3438203d3e203136393039.roa
File: 326131343a373538343a363335633a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier: q1qmOsvuZVc5MdAR2ueixf3tjUUhqJBEVhxfmYwkV94=
Subject key identifier: 75:13:51:78:D4:67:61:FE:21:0E:BF:31:62:46:23:64:5C:6B:AF:EB
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 651A9D42358EDB9379B89F0B31357E8AB3659DB4
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363335633a3a2f34382d3438203d3e203136393039.roa
Signing time: Fri 23 May 2025 05:06:01 +0000
ROA not before: Fri 23 May 2025 05:01:01 +0000
ROA not after: Fri 22 May 2026 05:06:01 +0000
asID: 16909
IP address blocks: 2a14:7584:635c::/48 maxlen: 48
Validation: Failed, certificate revoked on Sat 24 May 2025 17:48:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
65:1a:9d:42:35:8e:db:93:79:b8:9f:0b:31:35:7e:8a:b3:65:9d:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: May 23 05:01:01 2025 GMT
Not After : May 22 05:06:01 2026 GMT
Subject: CN=75135178D46761FE210EBF31624623645C6BAFEB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:d1:06:25:d4:88:00:2b:f9:88:2a:a4:ce:51:
d7:52:36:f5:66:2f:c1:69:8d:a7:2b:43:23:84:97:
66:5b:9d:dd:f6:97:8e:b5:05:1b:ff:74:fe:a3:fd:
41:c8:fe:67:18:c3:38:1f:db:ad:5a:ce:b2:e4:c4:
81:4e:2f:bc:0f:1e:cc:76:93:f8:6e:f1:fc:a1:4a:
4d:ad:88:2f:02:74:ed:3a:ee:0d:96:bf:4d:d7:d3:
9a:8b:c2:47:31:f7:c1:89:87:fe:6b:a5:5c:ef:80:
28:3d:6f:1a:76:4f:cc:8b:ce:05:64:27:5f:96:e5:
ca:76:83:de:dd:c7:ed:b1:7d:50:fb:3c:07:cd:aa:
e3:e3:11:51:97:07:f7:0f:0d:89:d2:3b:bb:78:23:
21:72:88:eb:52:79:c3:6f:d9:0e:ba:af:2f:ed:4f:
71:f3:30:f5:a4:6f:01:16:c1:95:d4:50:34:d6:63:
c9:c5:50:97:9b:b2:86:03:4b:ce:f1:cc:8d:d1:7a:
8c:3e:7e:90:d8:2a:f2:1d:76:a1:a0:2c:ab:6e:2c:
a4:58:e0:c0:f3:88:1d:81:7f:33:18:b4:2b:c2:89:
50:68:ec:99:81:3d:01:0c:6f:4c:e6:a0:6f:f1:87:
5f:ee:13:93:68:57:2a:e1:a1:ab:89:d8:e9:94:a0:
2e:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:13:51:78:D4:67:61:FE:21:0E:BF:31:62:46:23:64:5C:6B:AF:EB
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363335633a3a2f34382d3438203d3e203136393039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:635c::/48
Signature Algorithm: sha256WithRSAEncryption
1f:5a:d5:f5:9a:06:a4:33:89:b9:e5:c7:85:f8:12:cc:3c:18:
93:37:6d:be:ed:26:b1:cb:1e:f3:f8:dc:c4:4d:ae:71:04:bf:
8b:b9:94:19:8f:71:dd:f0:b7:dc:f5:da:ee:e6:09:6f:ff:87:
45:5f:71:18:f2:59:99:f2:88:32:31:44:a1:c3:08:03:f8:c1:
4a:f7:df:c8:58:20:7f:c8:0a:28:f9:21:11:f0:10:56:d3:85:
5d:35:80:d3:7d:35:5e:e9:b5:55:1c:4c:d3:e7:0d:f1:63:57:
35:9c:d1:dc:8f:92:3d:a1:47:43:cf:f0:42:2e:3a:e0:40:ce:
48:5e:df:0c:ff:51:ca:49:70:05:6a:10:26:14:c6:1b:88:1c:
06:8e:16:fe:2f:b9:d0:7f:7b:44:54:32:41:bb:a9:11:3c:48:
12:12:ac:08:43:3f:84:d5:dd:ae:9d:12:c6:3b:af:46:b5:57:
7c:9a:db:17:fb:3c:27:fc:11:8c:d9:35:0c:a0:82:c1:fd:93:
8a:42:9b:99:b2:c6:30:a2:63:6a:7b:8f:e0:16:70:1d:95:60:
44:d5:1c:0f:24:6a:15:97:b3:f8:69:a8:c7:81:25:b6:3e:14:
be:56:1d:c3:85:da:7a:9c:c2:00:2a:7e:8c:b1:2a:17:a7:91:
e7:9e:b2:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 06:04:40 2025 by rpki-client