Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363335653a3a2f34382d3438203d3e203136393039.roa
File: 326131343a373538343a363335653a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier: g8OEw/OjBopA5Df/ABQZxYg+ZFFQ3FrliePCygtVc6U=
Subject key identifier: 7B:97:EB:6F:AF:11:2E:69:99:C1:9E:17:B3:0A:E8:8A:B7:A8:A3:06
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 4C15B8C316715729EA5D2C3C36C6BC7FB4B92B9A
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363335653a3a2f34382d3438203d3e203136393039.roa
Signing time: Fri 23 May 2025 05:18:03 +0000
ROA not before: Fri 23 May 2025 05:13:03 +0000
ROA not after: Fri 22 May 2026 05:18:03 +0000
asID: 16909
IP address blocks: 2a14:7584:635e::/48 maxlen: 48
Validation: Failed, certificate revoked on Sat 24 May 2025 17:54:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4c:15:b8:c3:16:71:57:29:ea:5d:2c:3c:36:c6:bc:7f:b4:b9:2b:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: May 23 05:13:03 2025 GMT
Not After : May 22 05:18:03 2026 GMT
Subject: CN=7B97EB6FAF112E6999C19E17B30AE88AB7A8A306
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:34:41:9e:8a:74:b6:8b:2f:f2:0a:62:d2:b6:
fb:e0:8f:03:90:f7:d1:ee:bb:f4:32:e3:6a:b6:c2:
fa:ad:86:56:b1:04:a0:2b:bf:da:a5:e6:ec:52:c8:
67:24:aa:df:6c:34:30:ab:2c:ba:42:33:93:cc:9f:
dc:f6:84:a8:ad:e2:54:da:ab:5a:17:89:f3:09:3c:
9e:ad:2c:46:18:cd:80:fd:a3:81:c7:6c:f9:ef:c6:
48:17:4a:0b:c8:ab:12:04:1a:b4:b7:68:48:ff:4c:
09:56:84:61:83:07:d4:2e:f2:46:67:68:49:0a:57:
bc:18:b4:71:9a:f6:b9:3d:22:e4:61:fe:48:30:e6:
65:46:5f:b0:e8:5e:c1:8b:de:6b:b7:a7:a9:b9:07:
8d:94:a6:70:17:b0:8d:01:42:66:f4:d9:8b:24:50:
7a:97:25:ea:87:5c:b2:50:09:9b:95:d1:8f:be:a6:
76:e0:b5:54:16:db:aa:7c:6b:5b:f5:93:82:7a:19:
97:5e:c5:be:8a:6f:25:2b:05:12:4e:07:2e:17:10:
8b:82:84:11:67:30:c2:11:7d:ea:e7:d1:77:05:90:
96:45:c7:42:cc:f8:52:f4:b1:77:ed:6a:7b:00:58:
56:79:96:b1:5f:3d:44:0e:32:20:7e:b5:32:64:ae:
94:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:97:EB:6F:AF:11:2E:69:99:C1:9E:17:B3:0A:E8:8A:B7:A8:A3:06
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363335653a3a2f34382d3438203d3e203136393039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:635e::/48
Signature Algorithm: sha256WithRSAEncryption
4d:02:db:b8:88:3e:3e:6b:4d:53:65:c3:2a:4e:ed:25:73:f9:
86:17:9e:12:4e:9c:00:48:f5:a4:27:12:58:e9:86:e6:0a:72:
0d:2f:a8:97:8d:14:8d:fa:a2:e0:e0:24:1e:c8:28:0f:8a:bd:
c9:bd:a3:0c:bb:06:4c:ba:20:64:a3:e8:9d:27:05:a2:76:69:
f0:e3:7e:74:dd:95:3f:ec:9c:ef:20:3d:c2:2e:72:52:02:04:
f0:3a:d6:3e:99:26:1c:aa:16:d6:35:8c:96:0b:1f:63:a6:9c:
d3:ef:fd:56:8b:e1:a9:82:c5:9a:29:0c:81:a1:3f:ea:81:7d:
ef:c3:de:e0:31:b3:9b:ec:04:3a:06:c4:56:52:c7:d3:79:6b:
80:2d:42:d2:80:05:2a:87:c7:51:34:41:2b:8d:b9:ef:e4:3a:
36:43:f0:17:1a:27:2e:89:54:0e:e2:cf:85:e4:d6:a4:19:de:
ec:51:f4:ee:f6:89:fc:10:74:10:15:92:6e:17:13:6b:dd:07:
57:73:00:44:b1:6e:be:77:fa:46:c4:89:69:a9:c7:53:8f:22:
b0:2e:5b:90:69:88:a9:a3:de:ef:75:14:1e:36:ee:5c:cb:1e:
f8:d8:8f:8f:b9:a0:58:cd:90:3a:c0:0c:a1:75:9d:8f:7c:da:
9a:0b:00:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 07:29:26 2025 by rpki-client