Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363536393a3a2f34382d3438203d3e203136393039.roa
File: 326131343a373538343a363536393a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier: ywhMleeiByKw2K2Sr/KWixkiwNo6fCZXciPgf4UbycA=
Subject key identifier: 42:CE:D0:E2:AB:80:30:24:16:A8:4E:4D:8A:7E:6D:42:6C:E5:05:BF
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 344AF780F82198F8919515575ACF07AB10ACB493
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363536393a3a2f34382d3438203d3e203136393039.roa
Signing time: Fri 30 May 2025 17:54:01 +0000
ROA not before: Fri 30 May 2025 17:49:01 +0000
ROA not after: Fri 29 May 2026 17:54:01 +0000
asID: 16909
IP address blocks: 2a14:7584:6569::/48 maxlen: 48
Validation: Failed, certificate revoked on Sat 31 May 2025 17:16:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
34:4a:f7:80:f8:21:98:f8:91:95:15:57:5a:cf:07:ab:10:ac:b4:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: May 30 17:49:01 2025 GMT
Not After : May 29 17:54:01 2026 GMT
Subject: CN=42CED0E2AB80302416A84E4D8A7E6D426CE505BF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:37:52:8a:53:9e:27:56:13:fe:00:15:c6:5a:
37:a5:6e:69:f7:a4:06:f3:af:ab:ff:ee:fa:1b:d1:
cb:1f:26:2a:47:81:df:b1:4b:48:1b:6b:9a:19:d9:
96:2d:2b:33:89:ff:7b:7b:92:c9:5b:a4:59:d7:70:
5e:ab:55:23:d9:65:c4:08:28:7c:62:02:bf:bc:56:
4a:73:b8:f2:71:55:0d:6b:50:72:6e:5d:43:df:aa:
e8:28:df:50:83:19:c0:af:1f:00:29:14:5f:b7:f2:
e5:c4:09:8b:0f:ef:56:ea:dd:bd:f8:d7:3a:1f:1f:
38:97:d2:09:68:4e:37:e6:f4:89:9d:fd:f2:d5:4c:
cd:3d:5f:99:68:ec:93:7c:46:3f:6f:88:60:5f:b2:
46:0d:8f:d1:55:72:78:ea:d0:c9:46:de:8f:50:68:
97:9b:03:4a:51:83:95:f8:0a:52:7f:ba:ad:58:dc:
30:66:04:56:db:8b:cb:54:69:13:b4:e2:38:ae:85:
ee:f6:b0:c4:67:d1:6e:f2:b7:bc:17:ed:33:2f:0c:
8f:23:9d:92:5c:a7:37:6e:19:d1:03:c1:88:a9:9a:
eb:31:9e:f7:26:b8:00:18:cc:a9:aa:ad:b8:ff:84:
4f:b9:d4:b5:f0:93:8a:5e:e2:60:96:a1:32:7d:77:
61:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:CE:D0:E2:AB:80:30:24:16:A8:4E:4D:8A:7E:6D:42:6C:E5:05:BF
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363536393a3a2f34382d3438203d3e203136393039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:6569::/48
Signature Algorithm: sha256WithRSAEncryption
18:47:78:88:e4:ac:dd:e2:6b:b5:33:cb:b2:2d:2c:78:8e:bb:
bc:8e:1d:90:11:04:3d:b4:9a:2b:62:68:a5:c7:6b:95:d7:80:
87:76:6a:08:ae:5a:fb:b7:d9:7d:78:30:e4:57:e1:27:97:e6:
5c:e2:ed:02:e9:16:f6:22:12:53:55:bc:a9:d4:51:d3:2a:05:
c1:2b:42:ea:73:db:42:de:3a:89:02:26:17:74:d1:e4:35:71:
de:9a:ce:e4:f9:0d:3e:46:ac:36:f2:f6:62:d1:d6:5a:a2:67:
11:65:ad:b3:b9:8c:39:59:72:a6:e4:f3:2c:f7:7b:15:cf:4a:
00:81:b8:94:14:b9:e1:a2:fb:96:35:ec:24:6c:02:56:f7:9f:
f8:35:46:76:c5:d6:86:80:5d:74:e4:44:db:59:5e:30:45:6d:
9a:40:80:8b:79:c5:21:13:d0:db:4c:b9:52:91:0c:94:b5:1b:
1f:0b:11:24:e4:ab:06:9c:2c:f5:8a:19:d2:41:72:23:35:2f:
16:d3:23:e2:6a:03:6f:4e:54:b1:09:65:57:dd:cb:bd:af:41:
60:a7:ba:8a:08:01:a0:2b:e0:54:37:df:65:d9:6e:d0:68:f9:
2f:66:22:99:b8:58:ec:ce:08:4b:58:b0:36:6a:b4:24:05:f4:
3d:9d:47:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 07:27:26 2025 by rpki-client