Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363433373a3a2f34382d3438203d3e203136393039.roa
File: 326131343a373538343a363433373a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier: vMRk6A2rrTc4FoPiXx1k+oE73lS0wi3HjY3ukOizi1A=
Subject key identifier: 22:30:EE:CB:FD:8D:0A:35:1E:6E:18:11:BE:A2:A4:F6:9E:E0:D9:79
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 3372860FD4B543B190565ED35C90192D43398888
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363433373a3a2f34382d3438203d3e203136393039.roa
Signing time: Wed 28 May 2025 20:48:01 +0000
ROA not before: Wed 28 May 2025 20:43:01 +0000
ROA not after: Wed 27 May 2026 20:48:01 +0000
asID: 16909
IP address blocks: 2a14:7584:6437::/48 maxlen: 48
Validation: Failed, certificate revoked on Sat 31 May 2025 16:24:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
33:72:86:0f:d4:b5:43:b1:90:56:5e:d3:5c:90:19:2d:43:39:88:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: May 28 20:43:01 2025 GMT
Not After : May 27 20:48:01 2026 GMT
Subject: CN=2230EECBFD8D0A351E6E1811BEA2A4F69EE0D979
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:20:b2:25:bc:1b:27:bf:a3:d8:bb:7b:36:39:
f8:17:19:8b:56:f1:e7:bf:2a:86:28:f5:50:34:0c:
7a:11:fe:c4:56:a6:d4:24:97:53:be:aa:a6:81:49:
b2:c8:9d:06:37:3e:ee:63:b4:80:37:c5:1c:5e:3b:
bb:3a:f4:b8:aa:33:b5:88:e4:e9:ef:db:ef:57:20:
90:88:e5:42:b7:fa:aa:e8:12:70:74:02:53:f4:d7:
8b:5b:6d:45:c5:49:4e:7b:21:b4:7a:7a:32:71:4a:
8a:15:82:74:29:23:96:8d:9a:af:f7:50:c2:6b:f0:
2b:ac:7e:f3:97:7e:51:93:82:c8:80:9a:24:95:3e:
89:f2:c3:d4:54:14:22:c0:f1:09:99:14:a2:0c:7f:
39:1c:5c:a0:c5:c5:24:2c:cf:09:ea:5a:27:71:f4:
7d:f4:96:21:5c:a2:90:27:e4:0c:36:e5:6e:2f:dd:
71:4a:62:cc:5a:c2:65:40:53:17:85:3b:29:ba:3d:
4e:42:93:7d:49:9e:99:03:37:8b:53:d5:06:fd:00:
ab:dd:06:7d:de:35:d8:b9:a5:03:05:46:56:7d:98:
13:8b:ab:12:ce:3d:2b:3f:99:69:55:51:37:6e:fb:
f4:13:1f:41:33:51:42:47:13:c4:94:96:6d:4c:a2:
d8:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:30:EE:CB:FD:8D:0A:35:1E:6E:18:11:BE:A2:A4:F6:9E:E0:D9:79
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363433373a3a2f34382d3438203d3e203136393039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:6437::/48
Signature Algorithm: sha256WithRSAEncryption
4d:59:6f:8c:56:08:46:6c:b4:6e:f5:0b:7f:24:d7:eb:81:6e:
d5:97:22:87:d7:77:75:d1:74:73:9a:55:46:6d:2c:a6:29:bb:
0a:ba:26:a6:1c:b2:69:91:fb:cd:d9:f2:4a:e9:d9:b4:2e:7d:
be:82:d4:c0:4e:b9:61:dd:bb:02:90:b8:99:32:30:3f:72:b5:
e1:39:42:4e:27:16:90:82:6e:a8:22:3c:9e:95:4a:57:50:29:
dd:20:16:c5:bd:66:f8:85:83:72:1c:49:ce:ea:f8:fb:06:b9:
0e:65:17:f1:89:3c:a0:c9:6f:08:02:c8:af:b0:dc:77:1d:1d:
a6:19:35:49:5c:d2:74:08:a6:b3:58:3b:ec:6c:97:16:1c:4c:
27:89:54:c0:c8:1b:4b:3a:90:27:b6:9d:1a:5e:de:07:9a:c0:
d6:96:85:ab:87:b9:5e:6e:e9:ad:2a:16:c9:31:24:d4:12:f1:
1a:f2:a9:e0:e2:97:cd:80:89:f9:20:72:85:52:d3:8a:e8:b0:
19:11:7b:3c:ee:5e:9b:29:c4:48:21:c8:fa:92:2e:70:df:e5:
71:86:c5:3d:58:15:23:22:c7:81:31:f6:c7:c4:a1:0e:da:0a:
b9:59:78:f5:54:b0:39:f8:f9:56:1a:78:c8:d5:6c:fb:dd:f6:
b8:80:bf:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 09:23:36 2025 by rpki-client