Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363563323a3a2f34382d3438203d3e203136393039.roa
File: 326131343a373538343a363563323a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier: Qe0p22+n1tZjvZstOh+D+jpqwdOVqAujcBbUjEZ5jyg=
Subject key identifier: 4D:A4:DE:60:48:59:7E:08:F4:B2:53:D5:57:D7:72:D8:6E:4B:FF:15
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 0A5BF074196A0AA9E6ED7B7D3719CF14CE9DAA9B
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363563323a3a2f34382d3438203d3e203136393039.roa
Signing time: Sat 24 May 2025 15:54:02 +0000
ROA not before: Sat 24 May 2025 15:49:02 +0000
ROA not after: Sat 23 May 2026 15:54:02 +0000
asID: 16909
IP address blocks: 2a14:7584:65c2::/48 maxlen: 48
Validation: Failed, certificate revoked on Sun 25 May 2025 05:42:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0a:5b:f0:74:19:6a:0a:a9:e6:ed:7b:7d:37:19:cf:14:ce:9d:aa:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: May 24 15:49:02 2025 GMT
Not After : May 23 15:54:02 2026 GMT
Subject: CN=4DA4DE6048597E08F4B253D557D772D86E4BFF15
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:d2:d5:50:04:28:99:49:25:c6:e6:60:e8:8c:
18:e3:87:53:7f:d2:1f:f7:81:90:b8:28:41:ae:ac:
68:e2:45:08:85:2a:e2:3c:37:e8:e6:a7:c8:54:30:
d2:58:48:4c:76:1e:8a:8d:0a:3b:ed:bc:09:d9:ee:
96:18:bb:f0:7d:78:86:04:19:88:29:09:7d:8e:f9:
bb:d0:81:1c:d0:a2:d5:12:e5:95:e0:b1:60:4a:f3:
ab:0c:74:03:eb:bd:b6:f7:cd:db:4a:28:ca:19:19:
bd:83:a9:60:31:87:38:6e:ab:d0:ab:e8:37:fb:a1:
89:50:a1:d8:2c:53:44:5e:7d:21:41:9e:45:c7:e5:
ec:fd:72:5a:a0:64:e7:9a:e8:66:ce:6e:07:35:1f:
31:3f:58:35:28:47:79:62:e8:8b:c0:cd:fe:03:89:
b0:2e:06:00:32:3e:ee:70:42:95:be:1a:cb:38:e1:
52:92:e2:ee:01:07:62:36:58:b2:69:9b:ff:2d:a2:
b6:3c:66:cc:22:f4:9f:e6:c7:81:be:a7:c1:4f:9e:
64:36:68:dd:99:30:f3:63:64:a0:11:a3:57:b3:d7:
ca:f7:1d:e3:27:2c:86:f2:a7:e9:2d:b9:99:1f:29:
4b:3a:95:03:d6:1d:b4:cc:93:42:02:04:02:93:65:
b8:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:A4:DE:60:48:59:7E:08:F4:B2:53:D5:57:D7:72:D8:6E:4B:FF:15
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363563323a3a2f34382d3438203d3e203136393039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:65c2::/48
Signature Algorithm: sha256WithRSAEncryption
86:46:9b:fa:2d:89:39:6f:76:ca:c7:5e:9e:41:78:9b:f2:73:
be:c5:cb:bd:a8:1a:db:05:1f:32:3c:43:9f:2e:56:0f:cf:ae:
c0:88:d6:5a:f6:d6:40:cd:58:00:7e:9a:2e:2b:79:ca:44:3d:
42:66:78:13:28:b6:e5:4a:7b:30:fc:f7:b2:c7:6a:14:e9:18:
ef:03:18:85:28:8a:a4:5b:fa:dc:2b:c8:be:f8:6e:73:1a:f3:
bf:93:b2:b2:3f:50:87:0b:54:da:fc:6f:c3:a7:85:ce:2d:1e:
39:31:a4:5f:03:84:17:ca:42:cb:67:8f:97:68:e9:75:5a:92:
63:74:1f:35:a2:f6:53:8f:74:4c:08:29:99:d2:63:69:d0:60:
9d:3e:ee:e6:84:f8:42:0b:e4:dd:e5:ca:74:fb:3c:60:c0:2e:
ad:3c:a4:c6:b1:f4:1e:30:d0:13:08:bf:82:7f:b8:a0:91:17:
66:28:fc:1f:91:77:6d:6b:ff:64:8f:ba:92:c9:9d:62:33:57:
e9:d9:98:38:04:98:af:b8:1e:e5:83:f0:0a:67:31:28:cc:92:
0f:bd:2c:27:22:0e:9e:16:96:ac:14:64:4b:37:32:27:4a:3e:
16:f0:62:2e:51:b5:c0:18:bf:54:cb:12:93:d7:7c:bb:f7:6e:
2f:ab:db:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 07:17:34 2025 by rpki-client