Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363337623a3a2f34382d3438203d3e203136393039.roa
File: 326131343a373538343a363337623a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier: zpaxmU8LwfT8mf7q1nPzEdaLujNpdsfdRMm9XQBfaXM=
Subject key identifier: 57:6F:E4:F2:6D:FA:69:1D:B9:24:E7:A0:53:4A:47:75:1A:17:02:39
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 057FB1D407BECBC479E47FBBC3EB0123CDDC0AAA
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363337623a3a2f34382d3438203d3e203136393039.roa
Signing time: Fri 23 May 2025 20:42:01 +0000
ROA not before: Fri 23 May 2025 20:37:01 +0000
ROA not after: Fri 22 May 2026 20:42:01 +0000
asID: 16909
IP address blocks: 2a14:7584:637b::/48 maxlen: 48
Validation: Failed, certificate revoked on Sat 24 May 2025 18:20:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
05:7f:b1:d4:07:be:cb:c4:79:e4:7f:bb:c3:eb:01:23:cd:dc:0a:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: May 23 20:37:01 2025 GMT
Not After : May 22 20:42:01 2026 GMT
Subject: CN=576FE4F26DFA691DB924E7A0534A47751A170239
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:1d:db:4a:f9:04:c9:16:2d:4c:6c:c3:41:18:
a3:78:58:49:09:37:ec:e6:be:95:55:f4:d2:ee:9e:
c5:90:05:f3:8b:58:99:ca:0c:c6:15:6c:40:9b:00:
a8:0f:71:72:51:22:b6:04:09:20:c5:8c:4c:11:af:
11:10:6f:88:45:4d:db:b0:8c:a0:6d:7c:6c:7d:05:
45:a3:40:ce:a8:76:99:81:40:0f:44:60:d5:64:60:
90:1b:11:a5:df:af:e9:33:b0:34:2f:cf:1d:8a:20:
aa:af:45:58:ab:c7:9d:14:e4:29:b6:46:7d:6c:c1:
89:6a:cb:11:3f:94:9f:6f:b1:e2:a9:69:37:01:e0:
4c:c9:6b:14:dd:34:ef:45:79:2f:ec:33:84:18:fb:
d0:31:0a:de:fe:8d:f6:56:c6:b2:12:e3:f1:2c:cd:
24:b0:a0:21:09:8f:0b:53:b2:35:eb:ce:c8:8d:34:
cc:14:6e:25:f2:5c:4f:8b:4e:95:7f:62:e6:29:db:
ba:68:65:55:c6:3d:57:70:e8:92:86:93:ec:0c:2b:
73:cf:5b:51:27:5c:8f:39:09:05:1c:35:6f:8e:ec:
ac:c1:1d:21:59:96:08:c4:71:cf:08:20:b5:39:15:
73:75:e0:54:6c:85:6a:62:a4:f2:2c:20:ae:8e:4d:
3c:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:6F:E4:F2:6D:FA:69:1D:B9:24:E7:A0:53:4A:47:75:1A:17:02:39
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363337623a3a2f34382d3438203d3e203136393039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:637b::/48
Signature Algorithm: sha256WithRSAEncryption
46:48:51:75:e3:f1:c4:04:dd:8f:5e:2d:22:a7:cb:b9:66:38:
57:f9:14:e6:57:66:2c:5d:e0:7f:1f:95:19:61:41:e3:1f:74:
59:b4:3e:ae:63:e7:c3:4d:47:d6:ce:8e:25:6b:e4:f0:03:42:
c8:a9:18:59:dd:40:5f:27:45:dd:57:92:fb:a7:70:c8:b7:7e:
0b:16:b0:a8:63:55:b7:c8:72:c3:1b:7f:67:11:47:df:aa:d0:
6a:52:d7:91:39:0a:43:1b:06:1f:04:51:8a:cb:3f:b3:5c:64:
78:df:b1:e5:76:ae:0d:fd:30:aa:13:c5:ae:18:46:0e:12:5f:
f9:19:3b:e1:c8:fe:a1:08:85:48:d5:a8:5a:17:65:df:49:9a:
1b:4d:2b:aa:8f:7c:7b:a8:d8:77:4e:8d:18:2f:f0:48:6d:af:
c5:37:a4:20:f7:7a:27:e1:f4:06:ea:44:c0:d0:24:1b:82:36:
01:4d:13:89:6a:ae:ce:5f:7b:a9:76:3c:7f:7b:79:59:2b:37:
5e:94:5f:fd:49:55:42:87:02:ac:cc:03:23:08:f8:f9:73:89:
f8:51:76:ae:67:7d:50:7a:f7:87:d6:eb:a1:ac:f7:4b:0f:25:
7f:84:7e:06:07:90:4a:9b:0b:34:b8:7d:b3:be:e9:d5:1f:f7:
98:9d:a8:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 03:18:39 2025 by rpki-client