Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363336313a3a2f34382d3438203d3e203136393039.roa
File: 326131343a373538343a363336313a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier: nCoNPk8rUnE3NvyZl8YukxUGR48EXIJEcVkHKpl0jIU=
Subject key identifier: 14:5B:F2:C2:E7:1E:F2:21:52:6B:D4:2E:F2:6E:E0:FD:F7:D0:BA:81
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 717349584E7E40C26F8D48765898678DF323814F
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363336313a3a2f34382d3438203d3e203136393039.roa
Signing time: Fri 23 May 2025 05:18:03 +0000
ROA not before: Fri 23 May 2025 05:13:03 +0000
ROA not after: Fri 22 May 2026 05:18:03 +0000
asID: 16909
IP address blocks: 2a14:7584:6361::/48 maxlen: 48
Validation: Failed, certificate revoked on Sat 24 May 2025 18:18:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
71:73:49:58:4e:7e:40:c2:6f:8d:48:76:58:98:67:8d:f3:23:81:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: May 23 05:13:03 2025 GMT
Not After : May 22 05:18:03 2026 GMT
Subject: CN=145BF2C2E71EF221526BD42EF26EE0FDF7D0BA81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:9f:80:4d:a9:93:ab:66:e8:f6:5b:24:dc:5f:
74:89:51:b1:ac:8f:40:e9:1e:4c:18:21:64:d3:66:
a4:00:64:9c:3e:4a:5f:29:49:73:4b:6b:57:03:c9:
b0:12:f5:81:ec:8c:4e:d0:d7:97:3b:d3:61:d5:ee:
ec:d8:97:68:3f:90:33:64:9d:40:51:d7:20:2c:93:
de:d4:6a:12:9e:10:32:67:58:21:09:85:7a:0d:3f:
c3:1e:b7:95:15:9d:43:f1:48:84:32:5b:3c:ff:9d:
43:4b:95:14:4a:d0:db:7e:41:ef:ed:82:e5:09:40:
50:ac:b1:27:93:2b:56:48:be:a1:a9:9e:df:69:8a:
60:9d:39:32:ce:ee:ee:e0:b4:f6:8f:a7:3f:e0:40:
77:a4:8e:a3:cb:85:52:d5:de:ed:19:1a:20:ee:25:
8a:c3:48:80:3c:14:aa:9c:b4:f0:54:b8:24:e5:e4:
7f:9e:24:d1:ea:d0:65:23:88:48:66:35:46:c7:d1:
07:06:7f:69:36:cd:37:49:37:9e:02:1e:7a:2e:2d:
5c:1b:c1:ca:8b:16:74:f0:e6:a1:5e:5d:0b:26:48:
8a:58:ef:10:64:16:52:ce:68:6b:49:2c:41:e4:8b:
42:3e:88:cf:53:3a:c6:42:2f:81:81:38:14:20:0d:
03:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:5B:F2:C2:E7:1E:F2:21:52:6B:D4:2E:F2:6E:E0:FD:F7:D0:BA:81
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363336313a3a2f34382d3438203d3e203136393039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:6361::/48
Signature Algorithm: sha256WithRSAEncryption
b7:2d:18:7f:6c:a1:df:ff:74:87:b5:42:a0:88:19:7e:ce:a8:
74:34:eb:82:ae:d2:84:88:0b:da:a3:f4:21:39:30:3d:06:75:
31:2f:da:e1:ec:7f:e2:72:ee:26:56:de:17:47:81:2e:5d:f1:
f8:e2:8c:82:03:91:02:e0:8f:32:73:50:93:67:1d:df:48:af:
48:c1:c0:ef:79:65:57:85:61:ba:db:4e:48:e2:eb:85:90:e4:
8c:23:17:01:66:e8:88:44:bf:9b:95:e2:9f:4f:97:b6:13:2e:
f7:35:12:f5:58:90:d8:45:b5:2b:53:c6:df:97:a4:a2:98:20:
5c:1b:2d:17:bb:fe:79:8e:4e:c7:f1:80:04:b0:dd:11:4d:b5:
a2:26:e8:18:72:ff:65:b1:ec:35:74:8b:3f:52:dc:f6:38:1e:
ea:db:b3:5d:23:41:ec:be:3e:fd:59:8f:ce:e7:81:9e:71:12:
75:0c:d7:1c:44:b0:da:18:86:cb:35:6d:62:f0:8c:94:98:f0:
ef:2f:0b:e4:44:a3:cf:e3:d3:83:fa:ab:fa:ba:34:d6:dc:63:
a0:e8:bf:c8:ff:1c:0b:81:c0:c4:f8:06:c8:ea:8f:b6:80:52:
c0:ab:34:41:cc:f5:8e:e4:83:97:74:c9:b7:72:c7:31:31:6f:
56:fe:70:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 06:34:31 2025 by rpki-client