Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363538353a3a2f34382d3438203d3e203136393039.roa
File: 326131343a373538343a363538353a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier: rQM7BfvaC5x8/McW17/W27lrbIxWThcsczizTNfHBB4=
Subject key identifier: 19:29:23:AC:DB:8A:F4:C7:25:7C:38:30:92:6E:73:43:1E:67:5F:C5
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 5E997C8EDB6A6404E7A4A87B1A28C2E1C9E017CD
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363538353a3a2f34382d3438203d3e203136393039.roa
Signing time: Fri 23 May 2025 20:51:01 +0000
ROA not before: Fri 23 May 2025 20:46:01 +0000
ROA not after: Fri 22 May 2026 20:51:01 +0000
asID: 16909
IP address blocks: 2a14:7584:6585::/48 maxlen: 48
Validation: Failed, certificate revoked on Sun 25 May 2025 02:54:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5e:99:7c:8e:db:6a:64:04:e7:a4:a8:7b:1a:28:c2:e1:c9:e0:17:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: May 23 20:46:01 2025 GMT
Not After : May 22 20:51:01 2026 GMT
Subject: CN=192923ACDB8AF4C7257C3830926E73431E675FC5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:3f:f5:c2:1d:3c:b7:f3:d8:a8:d9:d8:71:e5:
74:e7:f7:2c:38:0e:9a:9c:68:88:df:f2:5b:5f:3c:
4f:ee:19:fa:d7:51:62:fb:fb:9e:4f:ba:22:92:89:
57:8b:36:63:6d:d4:03:49:fa:b5:43:e8:f9:73:8a:
9d:3b:2b:f1:06:65:7d:fd:de:ca:8f:37:ce:1d:da:
82:56:b7:ca:c8:8c:08:01:14:7b:fc:88:58:d6:a1:
6b:72:5d:4a:67:85:48:55:c5:e6:1b:f3:b8:31:9d:
68:45:84:0d:7e:e5:a5:77:e1:fb:93:0a:d2:40:33:
d0:22:8c:a2:67:89:d8:0e:f4:c9:b4:b8:83:22:cb:
31:b3:53:b9:b5:e7:a4:88:01:30:23:2b:3a:f2:b7:
51:fb:da:4b:d6:80:0f:e5:0f:65:91:71:07:7e:0d:
b6:c8:82:8f:da:9e:1c:52:57:ad:c5:fd:55:44:1c:
5a:6f:97:c6:96:9f:c6:4b:aa:df:98:dc:2b:e5:c6:
1c:db:d2:8d:47:72:1e:df:7c:72:45:4b:1b:70:ed:
0c:6b:55:b3:75:cf:88:67:51:c9:ae:d9:42:f4:6f:
51:e0:2d:9b:5e:87:ee:57:23:78:a8:eb:75:87:12:
03:e6:c9:ba:49:24:67:7d:25:0e:54:bf:d8:c5:0e:
2f:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:29:23:AC:DB:8A:F4:C7:25:7C:38:30:92:6E:73:43:1E:67:5F:C5
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363538353a3a2f34382d3438203d3e203136393039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:6585::/48
Signature Algorithm: sha256WithRSAEncryption
05:ff:ac:38:6c:1c:b2:55:c2:3a:a3:b3:86:6b:d1:20:51:32:
d1:4b:f2:40:1b:4c:6f:54:a8:6a:bd:76:e5:5e:de:49:68:ba:
11:f6:94:67:07:07:87:d0:09:5d:64:68:a8:59:8e:eb:f5:bd:
aa:7b:fc:94:9d:14:d3:48:68:92:a5:d4:a5:c7:b3:d6:72:de:
38:c9:e5:c6:a9:74:3a:31:4f:dd:d3:ee:aa:2d:41:d8:48:7a:
7b:f3:7a:fb:b9:e5:60:b9:bb:8e:af:0d:79:b3:0b:6b:25:65:
77:c7:1a:dd:a6:aa:15:cf:6d:8e:a4:cc:6e:4a:19:ec:de:ad:
62:58:8f:2c:a0:86:3d:76:b2:12:74:13:4a:66:23:60:14:9b:
cf:5d:af:9f:47:69:f6:92:e4:d7:8f:ac:6f:7e:0b:e0:ed:3b:
48:dd:7d:41:4d:ec:8c:dd:75:4d:87:37:7e:10:7a:29:88:06:
4c:c2:92:fa:1b:00:2e:e0:76:cc:40:db:b5:54:0d:05:b6:ad:
5e:d7:66:01:d2:a7:96:95:8f:55:ca:d1:d9:4d:0c:aa:6c:55:
9c:5a:bb:81:a0:23:09:27:4d:94:aa:54:68:d8:51:57:f1:2c:
17:91:57:c6:cc:53:18:94:db:db:72:f2:f9:98:ef:bf:72:f5:
e2:df:43:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 04:58:30 2025 by rpki-client