Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363538393a3a2f34382d3438203d3e203136393039.roa
File: 326131343a373538343a363538393a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier: 9UJfCOYdg6iox5zhWgT4D1tv4sI7Cc/gCreHTddO+b4=
Subject key identifier: BC:BD:F7:F3:1A:5D:49:32:CB:7D:B5:B3:37:71:D1:DE:12:7A:E0:C9
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 5FD4022055A7EBC6D487ED75B5A888F94DEC3059
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363538393a3a2f34382d3438203d3e203136393039.roa
Signing time: Sat 31 May 2025 13:57:39 +0000
ROA not before: Sat 31 May 2025 13:52:39 +0000
ROA not after: Sat 30 May 2026 13:57:39 +0000
asID: 16909
IP address blocks: 2a14:7584:6589::/48 maxlen: 48
Validation: Failed, certificate revoked on Sat 31 May 2025 17:16:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5f:d4:02:20:55:a7:eb:c6:d4:87:ed:75:b5:a8:88:f9:4d:ec:30:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: May 31 13:52:39 2025 GMT
Not After : May 30 13:57:39 2026 GMT
Subject: CN=BCBDF7F31A5D4932CB7DB5B33771D1DE127AE0C9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:cd:99:15:c1:02:b1:ec:aa:8e:90:dc:4a:f3:
e1:16:e5:5a:07:10:5f:aa:c4:4b:c3:a8:f2:2a:f6:
04:e6:58:2a:8f:c8:26:64:b3:e8:db:e0:2f:25:a8:
a3:54:18:40:79:8a:bf:57:f3:08:ab:b8:4e:f8:1e:
2c:f3:42:13:57:66:12:cc:cd:ab:cb:de:53:90:bf:
a3:e2:11:3d:fc:2f:cc:86:96:b5:48:df:60:62:b3:
bc:7e:e3:b4:20:05:7c:68:e9:b2:33:3c:7c:9c:e4:
bb:fc:67:f3:79:90:99:00:86:d2:3d:79:60:4e:87:
11:71:f8:8b:6f:6c:84:13:93:ea:a2:e0:1d:89:ac:
4b:1f:eb:7e:17:87:b2:ba:89:7a:d9:8e:2f:aa:d7:
cc:d3:d8:b6:74:91:81:b7:e1:f5:c3:0b:72:e4:fb:
ca:14:7a:53:f4:e2:35:f8:29:65:bb:5a:2d:84:53:
bd:dd:d2:b3:5f:51:7b:04:8c:59:94:27:b4:72:12:
4c:0e:54:d1:78:68:61:f0:b0:a7:d7:ce:48:50:cd:
4c:fa:ff:ec:37:c3:e2:d4:f7:8e:ea:bb:e2:70:98:
c9:10:7e:70:9f:26:e4:be:4b:d1:0d:b9:8a:b9:6b:
dc:89:61:16:93:6e:c4:c2:a6:fa:38:91:fc:5a:9b:
3b:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:BD:F7:F3:1A:5D:49:32:CB:7D:B5:B3:37:71:D1:DE:12:7A:E0:C9
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363538393a3a2f34382d3438203d3e203136393039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:6589::/48
Signature Algorithm: sha256WithRSAEncryption
82:6e:d3:10:55:81:e0:9d:bc:08:c7:16:3d:b5:17:48:6e:b3:
5e:ba:5b:fb:d8:dd:63:cf:4d:44:dd:04:f3:f9:3f:bf:f3:c8:
ce:02:5c:a0:27:42:06:da:0a:13:0e:d4:3e:a1:64:5e:f6:e2:
ca:a3:c8:42:dd:9b:c2:65:21:13:51:12:c9:92:ee:b6:35:91:
ec:95:4e:a8:fa:6c:62:a3:6d:d0:6f:ef:c2:4a:b9:81:98:03:
57:2d:f4:35:2e:a2:9d:76:3c:53:89:4e:79:c7:37:6c:da:fe:
1e:20:5c:7d:41:2b:cd:76:58:18:b3:89:7d:88:ba:dc:6c:63:
78:91:9a:16:3c:04:54:de:61:ef:a3:b2:04:8a:f9:98:68:c1:
7f:c5:92:6c:ab:59:f5:50:04:70:d6:ee:63:8e:79:c0:0a:24:
02:a7:3b:30:ca:ce:45:fe:01:bc:89:8d:58:dc:65:1a:e4:42:
fe:bc:90:32:3c:4c:46:fb:03:55:91:29:cc:22:e8:1f:a6:a2:
da:35:cf:1d:8c:2b:c4:f6:ac:7c:b2:a7:61:7a:c1:bb:4b:3f:
9d:d6:04:1e:5c:76:4c:aa:0d:88:8b:73:f6:46:8a:95:32:85:
1e:de:97:74:72:a6:22:a6:ae:d5:67:e4:92:ee:6d:a5:e9:23:
59:66:bf:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 07:41:18 2025 by rpki-client