Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363432653a3a2f34382d3438203d3e203136393039.roa
File: 326131343a373538343a363432653a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier: p/dOPdQQu+VdeJ8JQkUdM2ZF6rwytloVAy8e3j9pujg=
Subject key identifier: 42:47:9A:30:E6:67:46:F2:4A:CF:D2:F0:AA:83:77:C2:E2:CB:17:5C
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 5C1C903292A6944492CC193DD8F638443980CC04
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363432653a3a2f34382d3438203d3e203136393039.roa
Signing time: Fri 30 May 2025 22:06:02 +0000
ROA not before: Fri 30 May 2025 22:01:02 +0000
ROA not after: Fri 29 May 2026 22:06:02 +0000
asID: 16909
IP address blocks: 2a14:7584:642e::/48 maxlen: 48
Validation: Failed, certificate revoked on Sat 31 May 2025 17:16:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5c:1c:90:32:92:a6:94:44:92:cc:19:3d:d8:f6:38:44:39:80:cc:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: May 30 22:01:02 2025 GMT
Not After : May 29 22:06:02 2026 GMT
Subject: CN=42479A30E66746F24ACFD2F0AA8377C2E2CB175C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:23:22:41:67:93:5e:10:ca:cf:51:39:49:12:
da:25:48:02:fc:cc:e3:d0:07:33:c0:f2:40:32:40:
fc:a2:5a:72:86:96:38:2a:d9:89:39:52:d9:ca:bb:
59:7a:9b:9d:f7:f3:0f:72:81:61:e1:09:83:cf:a0:
6f:58:50:b2:bb:67:8a:56:a5:30:d9:01:0f:e2:0f:
72:62:e1:e9:4d:49:a7:2f:92:ad:5f:03:9e:2f:fd:
58:73:bd:d6:c7:29:29:d4:76:e3:eb:42:5c:f6:69:
99:a7:da:35:9f:94:ad:3f:be:25:bf:56:99:43:06:
7b:42:fd:d5:64:f8:ba:78:04:18:4d:53:e0:62:f5:
e0:a4:d4:24:64:d2:73:50:a5:e5:56:89:2d:03:6d:
61:34:d6:dc:34:6b:fe:56:df:fc:94:de:69:3f:b1:
92:64:39:26:bd:6d:ff:53:3a:ae:99:c1:7d:a1:92:
e0:6b:74:2b:dc:57:c1:3f:95:9a:74:18:70:da:9a:
a3:3c:21:b7:f1:d4:fe:66:ab:75:71:4f:1e:ad:1a:
eb:ee:2e:b6:e3:75:a5:db:1c:95:b7:6b:b4:95:78:
d3:ee:c8:91:31:82:21:29:34:2f:d6:5a:23:00:b8:
bc:c1:e8:9b:2f:74:fe:00:d3:21:6b:85:5c:e8:b4:
d8:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:47:9A:30:E6:67:46:F2:4A:CF:D2:F0:AA:83:77:C2:E2:CB:17:5C
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363432653a3a2f34382d3438203d3e203136393039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:642e::/48
Signature Algorithm: sha256WithRSAEncryption
85:77:c3:c2:95:39:da:1b:b0:ec:27:02:bf:35:66:15:13:05:
b4:69:ef:f5:b0:e1:bd:32:25:e5:33:11:e4:52:52:8c:66:ee:
55:d6:a6:72:f8:b2:bd:10:fa:dc:8a:0d:e5:a1:ee:20:27:b4:
91:57:7f:c2:3e:f4:1b:7d:d8:cf:99:af:f1:57:4b:81:b8:02:
e7:73:f7:80:7a:97:fc:b2:11:79:f1:ad:2e:1b:b3:da:69:70:
a2:a7:15:e6:1e:b1:82:b4:09:bb:15:09:df:41:6b:ed:6b:49:
fe:4c:25:b3:30:62:8b:9e:ec:f5:75:52:c7:c2:7e:be:d8:88:
e4:2b:64:40:6f:a1:61:bd:af:9a:f0:28:0c:70:07:3e:f9:2b:
2f:de:81:8f:28:f4:ce:79:02:a6:7c:c7:a7:26:e0:cf:b6:6e:
7e:5c:2e:13:19:70:41:a0:8a:b0:7f:d0:ea:6a:79:54:d2:2a:
80:5f:78:2d:bf:74:6d:e6:f8:68:7c:a1:11:dc:e6:df:07:2b:
68:31:7d:04:3c:84:2d:73:27:bf:ab:b5:01:9e:95:01:4b:bb:
db:c5:2c:a9:73:31:59:aa:c0:54:ca:23:12:23:e1:86:be:64:
41:23:c4:ea:d6:ce:56:da:cf:64:db:9a:a6:6c:54:b7:bd:d9:
9d:d4:69:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 07:44:04 2025 by rpki-client