Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363336643a3a2f34382d3438203d3e203136393039.roa
File: 326131343a373538343a363336643a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier: lu0CUVu6ijpdQLJ5KA8GHbkjmy4wiWja42Cl1RzB3ZQ=
Subject key identifier: 20:61:7F:CC:3B:A8:9B:D7:D8:49:E8:9A:BC:EC:86:C8:6C:F9:CE:A1
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 505C60003EEC90092632AA301CA935D80A0881A4
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363336643a3a2f34382d3438203d3e203136393039.roa
Signing time: Fri 23 May 2025 18:00:02 +0000
ROA not before: Fri 23 May 2025 17:55:02 +0000
ROA not after: Fri 22 May 2026 18:00:02 +0000
asID: 16909
IP address blocks: 2a14:7584:636d::/48 maxlen: 48
Validation: Failed, certificate revoked on Sat 24 May 2025 18:12:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
50:5c:60:00:3e:ec:90:09:26:32:aa:30:1c:a9:35:d8:0a:08:81:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: May 23 17:55:02 2025 GMT
Not After : May 22 18:00:02 2026 GMT
Subject: CN=20617FCC3BA89BD7D849E89ABCEC86C86CF9CEA1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:44:44:92:83:72:b4:90:65:1a:18:33:50:b7:
8c:56:c3:a2:fa:f4:2c:7f:f1:ae:4b:e5:90:86:61:
fb:b4:90:47:dd:76:e1:f3:94:6c:ad:a9:5e:17:61:
c6:f9:69:e3:b6:d5:50:8d:57:ec:5b:a6:c6:be:25:
8a:6d:91:bb:4d:81:c9:b8:50:32:fa:d1:7a:f8:93:
ad:44:f1:cb:e5:6b:b9:a4:b1:21:50:11:bc:2f:c7:
af:ff:33:7a:6e:e7:fc:7b:98:c2:91:23:82:17:4f:
c5:15:e8:7f:d5:0f:b0:0f:61:6f:7b:55:03:a9:e8:
3d:85:e2:87:97:4d:f0:de:b4:d4:df:fb:ae:be:2c:
48:b5:c9:1d:27:59:6a:50:41:dd:b6:0d:0d:b7:77:
4f:46:69:0f:39:d2:9c:c6:c6:7e:48:f5:cc:2c:32:
99:0e:d5:3b:5a:78:14:01:e6:eb:19:69:d6:27:ad:
21:a7:48:d7:45:6e:b0:4d:ce:5d:59:54:2b:07:f7:
68:ff:41:e8:6f:e5:e9:44:1c:a6:fd:e1:97:16:71:
8e:0a:74:75:65:23:36:ef:19:37:47:bb:9a:c1:a1:
19:e5:b0:2d:72:1f:f3:74:1d:03:aa:7b:e5:d4:0a:
c7:46:db:72:fb:b5:17:4e:89:9e:39:7a:10:0e:8f:
3a:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:61:7F:CC:3B:A8:9B:D7:D8:49:E8:9A:BC:EC:86:C8:6C:F9:CE:A1
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363336643a3a2f34382d3438203d3e203136393039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:636d::/48
Signature Algorithm: sha256WithRSAEncryption
4b:17:ac:d9:f9:b7:ef:26:11:0d:37:8f:1e:f8:ce:a1:a4:02:
76:c1:60:53:5c:9d:e4:50:93:b1:24:6f:2e:08:91:f0:d8:c1:
58:7d:a2:dd:31:89:31:ce:b3:4f:a5:83:a6:6b:58:77:7a:2a:
6f:f4:ab:f1:2e:87:ba:7b:75:7d:cb:90:56:53:e1:91:3d:a4:
49:0f:eb:50:60:9c:7e:04:5d:0e:4f:6a:26:fc:5f:3e:60:e3:
1d:1d:15:85:74:84:f2:16:72:ed:e5:fb:2e:95:a6:b1:88:4f:
71:58:b7:fc:c5:63:39:91:0c:e7:d8:3a:ed:be:bc:55:e3:7d:
df:02:84:d7:dc:7f:75:13:60:25:bf:6a:1f:f7:0f:fc:a9:8e:
33:03:7b:0a:0d:9d:68:a6:78:90:c1:d6:99:d4:f4:8e:db:8d:
90:ae:3b:d9:ae:60:15:12:28:5f:16:29:b7:54:44:2c:56:eb:
33:3e:dd:6f:8f:a4:c6:c7:e7:80:5e:16:bb:a9:7b:4e:81:d8:
3c:17:b2:18:ee:2e:08:85:93:8b:39:8b:1b:75:17:9f:2e:94:
71:91:6b:44:59:1f:9f:7d:e9:19:20:21:45:25:77:86:02:4d:
db:c5:8d:af:85:9a:f3:0b:9a:33:3a:1b:ea:51:8c:59:ea:f8:
d4:6d:a2:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 06:09:47 2025 by rpki-client