Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363337613a3a2f34382d3438203d3e203136393039.roa
File: 326131343a373538343a363337613a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier: 7Am65Q/gvGk6xVnEQxzhynC3oyE2TWe4CT9WNCN7/qs=
Subject key identifier: 51:FD:32:E2:80:CC:CA:CE:5F:41:5B:31:64:B7:8B:2A:16:E2:3E:05
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 6E3C84D965D7315C438261A9D8612D5FE9A4531E
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363337613a3a2f34382d3438203d3e203136393039.roa
Signing time: Fri 23 May 2025 20:42:02 +0000
ROA not before: Fri 23 May 2025 20:37:02 +0000
ROA not after: Fri 22 May 2026 20:42:02 +0000
asID: 16909
IP address blocks: 2a14:7584:637a::/48 maxlen: 48
Validation: Failed, certificate revoked on Sun 25 May 2025 11:30:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6e:3c:84:d9:65:d7:31:5c:43:82:61:a9:d8:61:2d:5f:e9:a4:53:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: May 23 20:37:02 2025 GMT
Not After : May 22 20:42:02 2026 GMT
Subject: CN=51FD32E280CCCACE5F415B3164B78B2A16E23E05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:ad:01:3f:d2:da:ad:29:ff:ff:71:f3:66:bc:
5e:40:e8:4b:bd:ee:f1:73:19:03:d9:67:78:d1:c7:
90:5f:71:f1:fe:2d:9b:71:a1:c3:d7:aa:cc:04:be:
69:15:39:b9:13:89:6d:24:d3:1b:6c:0b:07:4a:62:
88:64:e0:82:44:63:83:e2:21:7d:fd:7a:12:12:8c:
f2:67:8f:51:ec:7c:a3:4a:65:d0:58:aa:b8:cc:81:
c1:8b:71:11:69:67:3d:90:af:93:2b:fb:ec:d7:26:
5c:cc:1b:ca:73:e1:a7:2d:7a:5d:73:ae:13:38:58:
dc:fd:78:b0:a2:8e:57:b8:da:01:72:45:2f:a7:88:
a9:1b:56:84:ac:2e:47:a5:3b:2e:a1:c8:67:f4:93:
88:2c:dd:3c:44:a4:2a:c6:87:3b:89:06:44:1e:c8:
29:22:87:45:f9:fc:d2:f0:61:02:3e:24:64:c9:fe:
84:c1:70:f2:18:c4:95:d4:29:9a:79:8c:7a:ef:9a:
4e:7c:06:7d:e8:bb:70:4c:6f:89:66:57:d4:f5:7e:
f4:aa:75:46:2c:0f:1f:88:6c:f8:83:22:96:eb:a4:
e3:ea:4c:29:92:32:f7:bc:13:10:ef:7d:28:a1:35:
ee:1d:09:92:7b:86:b1:dc:40:1c:7f:53:28:82:a3:
99:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:FD:32:E2:80:CC:CA:CE:5F:41:5B:31:64:B7:8B:2A:16:E2:3E:05
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363337613a3a2f34382d3438203d3e203136393039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:637a::/48
Signature Algorithm: sha256WithRSAEncryption
4e:1a:84:b6:e2:b4:4c:05:b3:6d:0c:b5:d7:62:53:45:90:9d:
2b:33:e6:f3:ad:45:99:ce:81:1a:8c:a6:a8:91:8b:e6:9f:1b:
59:99:b7:0b:56:f9:78:42:29:95:a7:a8:9f:43:c9:c2:f2:e0:
05:21:2c:2f:7e:3c:eb:b2:d4:73:1d:d7:1e:b9:10:94:7c:1f:
4f:e6:f6:0c:8e:ce:c4:9d:a8:be:31:6f:7f:6e:22:1f:d3:d7:
24:7a:b3:88:00:b9:45:3f:df:45:51:16:25:b3:0f:79:5b:b7:
ae:8b:57:a7:27:76:49:63:49:0b:61:25:f9:da:a1:7d:84:07:
c9:d4:b0:61:73:a0:c5:e5:5e:57:88:b9:0a:f3:d5:43:cc:a8:
08:25:d2:22:e1:e0:a9:d7:33:2b:f7:ca:16:dd:7a:5f:2c:26:
10:ee:b1:33:11:96:a2:af:49:d4:69:19:9b:8c:52:f2:cf:ea:
70:59:47:d8:76:d4:1e:42:80:18:cc:a1:4e:46:e8:80:23:12:
b8:72:0b:e0:c4:0e:f7:eb:46:56:7d:44:a0:2f:62:4f:79:0b:
20:ff:d9:0d:bc:37:c7:ee:45:c3:27:af:ee:8c:b3:26:b3:85:
6a:48:ac:0b:77:50:c3:30:78:de:33:60:b8:46:4d:01:f7:f0:
d6:c9:65:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 06:00:20 2025 by rpki-client