Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363530663a3a2f34382d3438203d3e203136393039.roa
File: 326131343a373538343a363530663a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier: tHeKNGSAG7soE4ZPHoyDfK1NipKpZEOOcwREfhyGgEU=
Subject key identifier: 09:62:8B:E7:9F:70:21:51:CC:22:46:20:94:4F:55:B3:9C:81:77:C9
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 161D0B6F00D9DD8B645E83503CDF85F3B1ED96AD
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363530663a3a2f34382d3438203d3e203136393039.roa
Signing time: Sat 24 May 2025 16:12:02 +0000
ROA not before: Sat 24 May 2025 16:07:02 +0000
ROA not after: Sat 23 May 2026 16:12:02 +0000
asID: 16909
IP address blocks: 2a14:7584:650f::/48 maxlen: 48
Validation: Failed, certificate revoked on Sun 25 May 2025 02:42:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
16:1d:0b:6f:00:d9:dd:8b:64:5e:83:50:3c:df:85:f3:b1:ed:96:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: May 24 16:07:02 2025 GMT
Not After : May 23 16:12:02 2026 GMT
Subject: CN=09628BE79F702151CC224620944F55B39C8177C9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:c9:34:78:92:31:9a:11:59:d2:b1:f7:3a:32:
f0:29:73:21:29:02:61:cb:45:40:73:bf:b1:78:43:
c0:6d:db:45:e1:f2:18:5c:10:f6:95:f9:74:8d:df:
e6:77:3b:d1:86:4d:fd:b0:12:53:35:a1:10:35:27:
52:67:a8:62:96:7d:54:83:5d:f8:c1:df:f7:27:e4:
ae:b0:37:13:4b:13:f7:0e:59:a9:be:b7:32:17:c4:
4c:6e:49:c6:f9:6e:bb:26:57:53:14:96:bb:e5:aa:
5b:94:5e:54:35:94:9d:35:0e:3f:58:32:91:7c:9a:
4b:ee:d4:8e:87:a7:90:32:51:4d:36:bd:c2:e9:0b:
bc:19:96:50:d2:f5:67:da:0a:97:3f:f5:e8:7e:d4:
bc:77:4a:d9:d7:a0:a4:74:bc:bf:92:50:fb:fa:b5:
d8:a1:9c:4b:e5:55:0d:04:4d:ca:f0:ec:77:8e:e8:
b4:d6:1d:17:19:9f:0f:04:2a:3d:27:b4:93:bd:50:
81:55:44:76:92:28:8e:24:c5:f7:ce:da:48:7a:de:
d9:fd:90:3d:08:af:de:00:2a:97:37:f4:e1:f1:ef:
83:cf:cd:d0:48:b8:1d:25:d4:36:95:93:a4:cb:57:
b8:c9:42:d2:9e:87:d7:8b:c7:29:34:b1:f2:d4:5d:
e6:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:62:8B:E7:9F:70:21:51:CC:22:46:20:94:4F:55:B3:9C:81:77:C9
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363530663a3a2f34382d3438203d3e203136393039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:650f::/48
Signature Algorithm: sha256WithRSAEncryption
48:f1:f6:8a:5d:c7:b4:fc:b0:13:e6:47:2f:7a:33:fa:b4:cb:
41:34:07:2c:63:8e:8a:0e:2e:92:a7:73:a0:54:1d:71:68:1d:
8a:6b:bd:5b:8b:54:6a:04:7d:15:4f:75:08:f5:35:84:fc:c1:
a9:52:2d:db:c4:05:a1:c1:44:c9:c3:e9:ca:87:ec:4e:89:d5:
fc:01:59:01:37:22:1a:ee:7e:c6:f4:da:7e:b7:3a:de:91:85:
a2:98:9f:b1:87:ed:be:29:34:b8:35:3d:b3:12:b1:1d:c7:25:
0a:97:e3:52:7d:36:06:ea:ed:b6:79:13:65:bf:72:45:73:db:
cd:c4:6e:16:81:c1:3b:60:63:7a:05:3f:a9:fe:79:31:e8:52:
71:e2:ab:f5:35:1f:3c:cd:28:db:d7:25:e1:88:88:7b:cd:73:
e5:a5:7a:0d:2d:c1:a3:8a:16:9f:51:9f:72:44:aa:1f:69:39:
b7:7d:16:5b:74:72:da:22:40:18:54:61:44:6c:11:42:ea:13:
05:7f:6d:62:0d:ad:52:48:45:20:70:33:f9:c1:8b:01:25:51:
53:50:37:84:10:84:83:71:3d:6d:96:a5:7d:5a:89:90:5d:5e:
60:f4:a7:75:58:f3:b9:44:31:cc:eb:a8:70:f8:22:34:a6:46:
41:a5:d7:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 12:45:11 2025 by rpki-client