Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363362613a3a2f34382d3438203d3e203136393039.roa
File: 326131343a373538343a363362613a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier: k5vy3aCmpLLVVn7bN9abXpAV6YApKuvemff4A3sK3gU=
Subject key identifier: BA:46:A9:A3:FB:BE:1A:A5:8C:00:9B:6C:9E:58:F5:14:59:59:96:03
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 5A26F3C69484AB435EFD6C10511E6340E8E0A1B0
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363362613a3a2f34382d3438203d3e203136393039.roa
Signing time: Sat 24 May 2025 06:12:02 +0000
ROA not before: Sat 24 May 2025 06:07:02 +0000
ROA not after: Sat 23 May 2026 06:12:02 +0000
asID: 16909
IP address blocks: 2a14:7584:63ba::/48 maxlen: 48
Validation: Failed, certificate revoked on Sun 25 May 2025 05:12:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5a:26:f3:c6:94:84:ab:43:5e:fd:6c:10:51:1e:63:40:e8:e0:a1:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: May 24 06:07:02 2025 GMT
Not After : May 23 06:12:02 2026 GMT
Subject: CN=BA46A9A3FBBE1AA58C009B6C9E58F51459599603
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:1b:33:07:9c:b8:b4:02:8e:14:98:0e:cc:04:
dd:5d:e5:c1:a9:8a:0b:c0:3b:13:3f:f0:f5:f4:0c:
56:89:9d:b0:56:e9:75:65:f5:8b:2b:bc:c0:ca:47:
4e:40:87:6c:44:61:e8:5c:36:84:a0:55:86:0f:6b:
1c:fa:89:8b:3a:af:33:44:00:43:03:d8:3f:c7:f8:
75:7c:56:ef:ef:0d:31:c4:78:f2:08:e3:91:21:ec:
15:c2:e6:9f:eb:da:1e:4c:57:38:15:de:37:03:fc:
55:eb:3d:c8:a9:3c:39:a2:c4:87:93:cd:43:b7:c2:
ca:87:ee:f9:9e:d8:dc:44:f5:80:2f:2f:61:47:0f:
5c:a0:31:55:88:33:a1:c1:07:35:2d:78:ec:26:14:
c6:7e:4d:65:74:4c:b5:30:d1:ca:da:9b:89:33:97:
3e:f0:a0:5c:7c:e3:65:ab:ae:24:62:7c:28:28:e4:
36:bb:a0:50:8e:65:54:a3:d6:ea:c3:b1:1f:70:f6:
15:1b:4f:c5:ab:1c:f9:7d:10:a1:a8:01:df:da:06:
2a:b6:a2:88:77:10:ec:e8:b1:23:35:1f:a6:4e:4e:
eb:6c:2d:02:c1:12:eb:53:14:56:50:79:51:8d:d5:
7d:93:22:8b:3b:96:95:ea:f1:5b:12:10:85:c7:ca:
1d:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:46:A9:A3:FB:BE:1A:A5:8C:00:9B:6C:9E:58:F5:14:59:59:96:03
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363362613a3a2f34382d3438203d3e203136393039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:63ba::/48
Signature Algorithm: sha256WithRSAEncryption
83:4f:61:9a:36:66:7d:1a:d3:53:43:77:a7:80:8f:50:0e:62:
ac:54:ee:ef:71:47:a9:93:76:47:e4:e2:28:ea:61:0c:d4:52:
e5:8f:c9:9f:9b:7c:f0:13:e8:f4:9a:66:40:da:2f:cd:ac:09:
e7:8b:9b:ef:c2:40:c6:39:c9:cf:5a:7f:73:48:0e:a7:50:7c:
54:ac:3b:60:fa:0a:ea:a8:3d:a6:ec:4b:94:23:10:d9:4a:0a:
c6:46:f0:27:b0:64:87:cf:89:ef:9a:87:72:4a:91:8b:9a:41:
57:61:11:73:79:5d:6f:8c:ad:36:1e:22:20:53:29:42:68:d5:
ff:c0:af:40:66:51:f3:11:5c:ff:b8:67:58:63:9a:77:ad:46:
c0:6c:17:3e:a8:6f:6f:d1:3b:3e:7d:ed:73:a1:61:03:ca:00:
b4:93:ce:a2:7c:a6:50:22:fa:2e:7c:7b:84:a8:f9:78:96:3d:
ed:2a:24:e0:fc:7f:0d:6e:d1:e2:1b:7c:3c:6e:b6:22:1f:5f:
bf:82:fc:d7:9a:e8:a0:68:dc:9e:e7:6b:e3:21:7e:47:52:23:
af:5f:4e:fb:d1:82:af:a2:a9:d5:2e:28:a9:3c:ec:f3:e6:e6:
1a:40:fe:a2:35:a9:b1:39:14:67:65:0a:e4:90:b9:8e:bb:86:
fd:62:cf:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 04:29:32 2025 by rpki-client