Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363365643a3a2f34382d3438203d3e203136393039.roa
File: 326131343a373538343a363365643a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier: ZYx+vtkLp9kRoXgewKE0nSBcwPh17lbAze15Av9zpkU=
Subject key identifier: 44:5B:F2:0C:DF:AB:F1:D0:A7:57:B9:9B:C5:A8:9D:37:46:A9:B7:F5
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 4872CF8C283C3A4C778707EBF2A48D1A3A362D4D
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363365643a3a2f34382d3438203d3e203136393039.roa
Signing time: Fri 23 May 2025 20:51:01 +0000
ROA not before: Fri 23 May 2025 20:46:01 +0000
ROA not after: Fri 22 May 2026 20:51:01 +0000
asID: 16909
IP address blocks: 2a14:7584:63ed::/48 maxlen: 48
Validation: Failed, certificate revoked on Sun 25 May 2025 21:54:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
48:72:cf:8c:28:3c:3a:4c:77:87:07:eb:f2:a4:8d:1a:3a:36:2d:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: May 23 20:46:01 2025 GMT
Not After : May 22 20:51:01 2026 GMT
Subject: CN=445BF20CDFABF1D0A757B99BC5A89D3746A9B7F5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:e5:48:4b:33:7d:17:1d:a9:42:69:e1:f1:e0:
e1:ba:70:3f:32:28:ed:86:a6:bb:25:7a:97:7a:ea:
4e:98:d1:f4:10:ab:a6:3f:59:99:c0:25:32:28:b5:
91:c5:00:c5:1f:aa:97:c0:26:55:23:a7:3d:7f:7a:
e7:90:19:7d:fd:d9:b6:29:6d:b4:fa:7c:8d:f7:47:
9f:f1:c8:cf:3a:45:9b:3c:be:78:4c:81:f3:91:45:
e3:8f:49:88:ce:ec:6b:e0:11:58:41:6d:20:4d:3c:
c6:3a:c6:c6:9b:df:4f:1c:45:b9:e2:3a:1d:5b:a9:
9c:75:42:46:a5:f3:41:fa:3c:9c:f8:2f:c3:5e:8c:
33:bf:3f:d7:6c:e3:91:eb:97:f5:29:36:de:cc:45:
35:de:00:60:9d:c5:38:a3:86:16:9e:60:8b:c0:97:
6d:6d:1a:f1:f6:e5:f6:88:ef:3c:81:ed:bf:b5:51:
30:6e:0a:4f:6b:2c:1e:29:b8:d3:18:08:f5:b2:6a:
ad:ac:d6:ac:fd:bf:5e:8c:d8:bc:89:82:4e:54:5a:
a8:79:c5:6c:37:93:fd:ca:26:06:b7:d1:72:a5:00:
3b:69:bc:c9:a7:30:34:9a:06:73:79:01:a0:7e:c7:
a6:b8:6c:e4:0e:6b:29:cb:a0:b9:2c:68:f4:af:8b:
ed:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:5B:F2:0C:DF:AB:F1:D0:A7:57:B9:9B:C5:A8:9D:37:46:A9:B7:F5
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363365643a3a2f34382d3438203d3e203136393039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:63ed::/48
Signature Algorithm: sha256WithRSAEncryption
21:5b:78:0c:91:c3:7f:6f:87:31:2b:ee:7f:f5:3c:27:f5:da:
78:f1:de:1e:3b:1c:1a:70:1a:7d:64:81:66:3d:0b:7a:b5:d6:
93:cb:37:4e:7d:a6:e8:0f:a5:95:0a:ec:40:b7:e8:a2:a1:f3:
b0:f1:20:c1:a8:b7:a6:d4:0c:42:eb:16:bd:8c:84:e7:32:ff:
3c:e4:92:15:e1:31:cd:d5:62:f5:13:53:a7:17:b0:25:18:03:
79:f5:ad:1a:10:1f:be:18:ff:11:29:0d:a9:7a:32:e3:d0:65:
8c:bc:56:5a:35:e6:7f:56:e5:97:b5:c3:fa:50:c3:61:dc:33:
2e:d6:c4:e3:ab:d2:26:0c:f8:9c:dc:54:40:6d:8d:3c:1c:f4:
e5:a9:7e:ab:e7:1b:48:6d:e0:d6:7c:3f:67:3f:f9:6b:7b:60:
e8:5c:3d:9f:38:46:59:aa:2f:02:d7:1b:8a:71:39:10:92:eb:
8c:6b:bd:ef:9b:66:33:eb:89:06:5f:76:f7:18:6a:80:1b:b4:
ef:f0:c7:0c:8b:a1:f8:42:c4:ad:f9:8d:3c:c7:b4:4c:90:ea:
3f:12:a7:5e:b1:b0:45:56:eb:eb:25:1d:31:c9:c5:82:64:58:
af:af:96:5f:99:43:ed:7d:a5:c9:8c:c1:d1:a5:e2:fc:f2:0e:
57:9e:80:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 06:20:57 2025 by rpki-client