Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363530653a3a2f34382d3438203d3e203136393039.roa
File: 326131343a373538343a363530653a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier: V4FwEwsDef49VX5MKGYFU8y31UFrBuYt7HFmtLoPJeo=
Subject key identifier: A5:AE:EF:D6:3B:CC:D9:13:AA:20:CC:92:DA:D5:BC:2F:73:8B:61:DB
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 46C6DB4C3AF084D443D3C62538C64C50AAE234B8
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363530653a3a2f34382d3438203d3e203136393039.roa
Signing time: Fri 30 May 2025 00:12:02 +0000
ROA not before: Fri 30 May 2025 00:07:02 +0000
ROA not after: Fri 29 May 2026 00:12:02 +0000
asID: 16909
IP address blocks: 2a14:7584:650e::/48 maxlen: 48
Validation: Failed, certificate revoked on Sat 31 May 2025 17:16:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
46:c6:db:4c:3a:f0:84:d4:43:d3:c6:25:38:c6:4c:50:aa:e2:34:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: May 30 00:07:02 2025 GMT
Not After : May 29 00:12:02 2026 GMT
Subject: CN=A5AEEFD63BCCD913AA20CC92DAD5BC2F738B61DB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:50:a5:ba:52:e7:02:24:4d:aa:73:5a:88:82:
e9:2c:e1:63:36:0b:50:61:61:d6:08:d6:ea:d6:0b:
29:9d:bd:5a:ad:14:0a:01:53:36:ce:a0:c6:60:15:
41:94:e1:c4:d8:8a:1e:e7:f2:59:08:aa:49:c9:38:
15:3d:1e:4e:8d:0d:79:39:9f:93:ff:0c:2d:8e:a2:
93:ab:82:d4:ab:e8:3a:67:fb:2a:55:ae:68:86:7a:
f9:d2:a7:0d:67:bd:4e:df:2e:89:4d:68:42:51:b9:
24:fa:c4:46:57:8e:48:5a:81:1f:53:2d:ca:c5:60:
ff:fb:61:63:ca:ed:bf:70:7d:af:aa:86:14:ad:67:
ff:1f:d2:06:11:9d:8e:9c:8e:c1:51:f7:91:89:3a:
44:2a:fa:15:54:7d:11:f7:a7:b6:ac:8f:f9:5f:44:
26:fa:d1:17:14:e4:4e:f9:7a:10:55:7d:96:37:40:
39:37:30:1b:92:f5:ae:f7:05:45:9e:80:0b:19:47:
07:74:c0:dc:c4:64:2d:e1:56:da:87:6a:f7:a8:ce:
e9:04:03:35:36:99:50:a5:6d:96:fc:c0:ca:ba:ef:
7f:ad:ea:fb:48:03:32:8d:41:8a:8b:e4:9b:c8:74:
81:aa:07:ee:2b:5c:75:47:52:ab:39:0c:74:a2:8c:
f9:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:AE:EF:D6:3B:CC:D9:13:AA:20:CC:92:DA:D5:BC:2F:73:8B:61:DB
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363530653a3a2f34382d3438203d3e203136393039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:650e::/48
Signature Algorithm: sha256WithRSAEncryption
0b:59:7f:ec:16:d9:0c:3e:11:40:4e:ea:58:44:34:51:f3:a5:
9b:c1:69:12:b7:bf:c7:d6:db:6e:03:b4:9f:d7:fc:98:9a:47:
16:2f:8a:eb:08:21:bb:b6:34:29:30:80:5c:be:d8:58:62:68:
24:c2:63:ad:85:55:ec:73:ce:b6:bd:4f:c0:4c:60:6c:8e:3f:
b1:52:18:01:5d:0a:15:31:f2:d7:52:85:d7:5d:a3:e0:b5:85:
33:e7:8c:21:d4:44:4d:c3:4a:da:84:80:a3:9b:65:a3:11:cb:
0b:34:d6:ec:24:ff:fd:f9:17:16:fa:b5:f4:75:d1:d0:1a:f9:
1f:26:82:1e:12:0b:a9:0b:65:dd:7c:89:92:39:8a:7e:af:5b:
7a:e6:0e:b5:b2:52:09:09:90:c8:c4:34:5d:87:98:65:9b:20:
30:ed:2e:ee:c6:e8:9b:5e:f0:1e:d4:53:cb:40:75:55:8e:1a:
d9:e4:7e:27:ff:25:7b:ea:77:0d:d2:1d:52:ef:a4:00:fe:64:
bc:7c:04:f4:07:2c:3d:f2:93:4f:e8:0e:f9:10:f3:4d:4b:4b:
d6:ff:00:99:1c:2e:57:af:89:9a:87:56:a3:ee:19:b3:b1:e9:
c6:25:7f:df:c1:6a:f7:67:40:c0:81:da:bc:8c:19:c4:84:da:
4b:4d:2c:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 01:03:53 2025 by rpki-client