Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363336353a3a2f34382d3438203d3e203136393039.roa
File: 326131343a373538343a363336353a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier: JaW8mmezMepxYC9M98X/UWxKxBilmqj3HGP2bPo0nC8=
Subject key identifier: C8:61:3B:FA:DC:F4:08:53:76:49:84:19:33:7C:3F:24:30:BD:AC:70
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 0FBEB15E23C330FD18D34675F8E22F1734CF23B6
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363336353a3a2f34382d3438203d3e203136393039.roa
Signing time: Fri 23 May 2025 08:00:02 +0000
ROA not before: Fri 23 May 2025 07:55:02 +0000
ROA not after: Fri 22 May 2026 08:00:02 +0000
asID: 16909
IP address blocks: 2a14:7584:6365::/48 maxlen: 48
Validation: Failed, certificate revoked on Sat 24 May 2025 16:54:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0f:be:b1:5e:23:c3:30:fd:18:d3:46:75:f8:e2:2f:17:34:cf:23:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: May 23 07:55:02 2025 GMT
Not After : May 22 08:00:02 2026 GMT
Subject: CN=C8613BFADCF4085376498419337C3F2430BDAC70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:ea:f3:2f:ef:e9:c9:24:47:3f:d6:fb:c7:d8:
9a:59:b4:87:6d:cf:83:4a:79:8b:bd:ef:c4:6c:ea:
8f:ed:78:e2:58:86:e4:12:e5:67:2a:04:1b:16:5f:
0b:a6:e1:fc:51:b5:42:c5:32:1f:26:ca:12:00:5d:
db:f5:f1:37:bd:41:12:59:28:6c:54:a7:09:15:06:
89:ce:16:cb:1d:1f:99:5b:b6:a1:6c:0e:31:6b:41:
57:0b:71:5f:94:57:3c:4c:e7:0d:79:e7:1b:35:e4:
56:84:8b:e5:bb:98:a3:f7:4c:b9:79:c2:e9:c0:75:
70:3d:61:49:5a:da:36:aa:59:dc:cc:d6:fc:04:a4:
12:ad:1a:94:58:36:25:56:90:df:da:f0:15:b3:46:
2d:88:09:39:2c:d3:da:e7:cc:c2:24:87:7d:17:3b:
a2:17:92:17:ce:0f:52:f4:69:81:b7:81:bd:98:06:
6a:86:80:48:b4:80:1d:e1:db:68:be:dd:04:ea:56:
cb:f7:e8:30:97:6b:09:a4:b9:6d:ef:b7:26:ab:19:
06:dd:a1:05:7b:15:f1:89:54:96:01:8e:c4:fb:06:
8b:47:bd:83:5a:11:99:e4:c4:a6:c1:f7:ff:5c:cb:
83:49:d7:f7:48:1d:05:1d:cd:e8:c0:8b:8b:a0:b8:
6a:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:61:3B:FA:DC:F4:08:53:76:49:84:19:33:7C:3F:24:30:BD:AC:70
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363336353a3a2f34382d3438203d3e203136393039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:6365::/48
Signature Algorithm: sha256WithRSAEncryption
19:44:ab:4a:91:bf:60:40:a8:8a:a0:05:b0:20:fe:c5:97:e9:
e1:9a:89:67:0e:61:b2:2b:c8:c4:6a:4d:9d:c5:82:06:43:7c:
a3:52:68:76:f2:4f:f9:e5:b6:98:1c:e3:9e:83:e3:a7:cf:da:
43:ad:00:6a:78:54:6e:8e:13:d0:66:05:16:83:85:0d:3c:17:
b0:ac:07:6a:be:3d:0a:9d:d9:1d:7c:7f:5d:de:35:82:d6:6b:
46:b6:77:76:36:f3:d7:7b:e9:0c:92:df:22:cf:07:13:b4:02:
0d:db:e4:04:0d:b7:49:6e:c1:69:41:b0:dc:8f:be:8a:86:d7:
00:2b:50:95:73:51:af:15:7a:83:da:53:05:b5:76:52:dc:bc:
1f:fb:d9:2a:2a:ee:bd:e8:3e:b0:33:21:93:fe:2a:0a:80:45:
ed:d3:d7:22:fc:7b:37:58:87:47:20:8e:e0:d9:52:a3:cc:a0:
e5:d8:f1:43:8f:92:87:61:a0:19:d4:0f:9f:bb:92:b9:47:6d:
1a:fd:07:9b:81:13:ea:cc:ce:64:b4:67:b5:fa:3d:3e:30:44:
a9:ce:02:4d:da:6e:cd:c3:d9:68:11:0e:a5:e1:a3:76:e3:eb:
89:f2:a8:9a:35:21:8a:b3:ad:ce:1c:f6:aa:f4:cd:a9:6d:3c:
6e:e7:95:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 06:26:48 2025 by rpki-client