Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363336343a3a2f34382d3438203d3e203136393039.roa
File: 326131343a373538343a363336343a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier: CDuon3L5hVMiVlftY1sgYgcoQ5sSfDyWcJklqxjH5Vg=
Subject key identifier: 4B:66:0B:7F:25:5D:FF:A1:40:E5:D0:63:65:E1:3C:F3:27:24:FD:00
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 519BAC5EA2139976778E44B854A15EC67B6C5160
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363336343a3a2f34382d3438203d3e203136393039.roa
Signing time: Fri 23 May 2025 08:00:01 +0000
ROA not before: Fri 23 May 2025 07:55:01 +0000
ROA not after: Fri 22 May 2026 08:00:01 +0000
asID: 16909
IP address blocks: 2a14:7584:6364::/48 maxlen: 48
Validation: Failed, certificate revoked on Sat 24 May 2025 16:48:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
51:9b:ac:5e:a2:13:99:76:77:8e:44:b8:54:a1:5e:c6:7b:6c:51:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: May 23 07:55:01 2025 GMT
Not After : May 22 08:00:01 2026 GMT
Subject: CN=4B660B7F255DFFA140E5D06365E13CF32724FD00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:97:e5:65:fb:1f:ca:81:c0:bc:1d:c1:db:f1:
2b:ea:68:8f:96:2f:aa:fd:a8:2b:d3:13:c4:ef:72:
dd:7f:53:4b:be:4a:dc:41:c3:53:5b:66:a0:20:21:
f7:9a:bb:5b:e9:c8:64:2d:10:9b:e8:c1:89:0a:d7:
41:a1:0c:e6:91:26:58:c8:48:ff:dd:8e:14:ca:1c:
be:b7:be:fb:40:6e:ac:4e:19:01:ac:f0:c4:1a:19:
c4:48:9e:60:f3:15:89:f7:3d:4d:ea:51:f4:81:b5:
fc:3d:71:eb:1f:ec:e9:6b:a3:c0:69:3a:f0:1b:39:
5b:a1:03:07:ca:d1:ab:b6:e6:be:af:cc:e7:26:24:
67:87:c6:e1:0b:b5:3c:cb:a6:e0:49:e1:b8:03:1e:
1b:a1:27:7d:30:fc:6a:64:71:7b:79:0d:c5:0e:66:
74:23:95:db:cf:56:02:75:bb:b7:24:38:04:a3:bb:
15:ac:93:ec:05:ed:7a:27:a2:19:35:22:3b:47:6b:
98:e7:5b:00:fc:74:11:af:a2:0f:75:ae:c4:79:8f:
3e:a4:94:66:12:a6:87:d7:ef:92:cf:d4:c6:bf:df:
7a:6e:d0:6e:67:04:12:dc:6e:4c:44:d5:31:aa:17:
ae:04:08:8e:3e:d5:64:ec:b0:68:98:e8:56:e9:48:
17:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:66:0B:7F:25:5D:FF:A1:40:E5:D0:63:65:E1:3C:F3:27:24:FD:00
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363336343a3a2f34382d3438203d3e203136393039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:6364::/48
Signature Algorithm: sha256WithRSAEncryption
3a:5d:61:e7:e2:65:b3:b1:6f:7f:91:6e:11:c7:70:a7:f4:1a:
b4:1f:5e:cb:2c:ab:3f:c4:fe:ea:ce:c0:f3:6f:d0:fc:bf:1f:
76:38:6a:15:16:7a:fb:d8:ce:15:13:0a:2d:0c:52:27:86:81:
19:30:2d:ca:18:94:9c:45:e6:5e:ae:98:40:d9:da:56:0a:4b:
4d:60:b8:f3:cb:9a:d1:32:4b:da:76:66:3d:54:f1:e6:ca:11:
7b:11:bd:fd:31:6c:d3:f5:f4:b8:50:fa:46:16:df:75:62:8d:
55:3f:62:34:41:81:92:65:fa:eb:fe:09:59:f0:8b:ee:44:d3:
10:62:25:99:4c:ab:94:1d:4f:d9:a3:2f:95:e4:ed:4f:20:2d:
2e:9c:52:2f:38:c1:be:9a:15:8c:0c:54:2d:33:e5:86:75:a5:
59:2a:4c:49:c0:c1:c3:39:18:50:5e:1f:5b:49:54:2e:d2:3d:
43:62:7d:54:1b:91:df:7c:10:59:90:63:b3:a2:44:50:2d:18:
ce:68:e7:72:cb:6a:7a:a6:8f:63:8b:80:4d:07:9c:e7:bb:61:
c5:bf:95:b3:e8:40:ae:04:4a:79:aa:9f:7f:40:71:31:6f:5e:
15:69:37:87:34:68:85:2c:a6:82:c5:bb:96:ef:08:f2:8b:bb:
ac:07:fc:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 06:37:33 2025 by rpki-client