Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363564373a3a2f34382d3438203d3e203136393039.roa
File: 326131343a373538343a363564373a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier: /4aYqt0C+mzJaTWXXiQl6IbypBp61CDpyUpGl6VTsck=
Subject key identifier: AE:DE:19:7D:99:D1:83:2F:8C:56:32:D6:8D:31:7B:55:F5:5A:48:A7
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 4D34B5F08E8F6F57109F6ECF2391D6C889A38C84
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363564373a3a2f34382d3438203d3e203136393039.roa
Signing time: Tue 27 May 2025 06:36:02 +0000
ROA not before: Tue 27 May 2025 06:31:02 +0000
ROA not after: Tue 26 May 2026 06:36:02 +0000
asID: 16909
IP address blocks: 2a14:7584:65d7::/48 maxlen: 48
Validation: Failed, certificate revoked on Fri 30 May 2025 00:12:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4d:34:b5:f0:8e:8f:6f:57:10:9f:6e:cf:23:91:d6:c8:89:a3:8c:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: May 27 06:31:02 2025 GMT
Not After : May 26 06:36:02 2026 GMT
Subject: CN=AEDE197D99D1832F8C5632D68D317B55F55A48A7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:3e:ce:8b:ac:26:ec:71:ab:e3:fb:2d:6a:6e:
4a:2b:18:ad:ca:b0:de:4d:ff:1b:9b:76:00:53:4c:
b4:c1:11:35:89:b2:60:8d:e4:be:22:bc:ad:df:21:
24:b5:ce:69:a1:58:51:f0:cf:12:99:df:2a:c6:fc:
49:1b:c9:26:37:d8:94:27:a1:4b:69:ab:d8:a7:2d:
1a:35:dd:68:ab:b4:a1:ab:c5:31:da:3b:91:58:51:
1a:d1:f9:f3:82:39:ff:5a:09:d6:72:7e:09:8c:a3:
d1:e9:85:39:0e:58:fa:76:a3:64:c9:55:de:fa:13:
be:3f:b0:b3:d8:00:c0:da:c1:88:7f:03:81:d8:76:
e7:19:b8:56:3e:d2:bf:13:16:b4:bf:d7:1c:5d:8b:
60:de:12:8d:08:a9:f1:44:cf:61:49:b5:94:0b:de:
17:58:4e:9f:e9:dc:2b:1c:2d:26:e3:b8:12:5e:fb:
e2:5c:69:66:33:f4:fe:b3:e3:fa:be:20:bf:35:b7:
77:94:67:da:8c:12:b0:30:4e:26:9d:95:8c:4d:84:
88:5d:37:b6:eb:e3:93:a1:d9:b4:dc:4d:72:9b:5d:
e7:3c:4c:56:d5:e6:3f:d4:40:a8:81:eb:94:2b:42:
0b:eb:47:7d:36:15:03:09:74:cd:57:90:77:98:a9:
b4:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:DE:19:7D:99:D1:83:2F:8C:56:32:D6:8D:31:7B:55:F5:5A:48:A7
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363564373a3a2f34382d3438203d3e203136393039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:65d7::/48
Signature Algorithm: sha256WithRSAEncryption
38:a0:8c:74:a9:ad:23:dc:68:5d:37:e5:e9:be:ed:27:f0:93:
49:90:34:9e:e8:dc:83:61:f2:9f:e2:97:95:d1:b3:f5:1d:91:
10:1f:c8:bf:77:e8:b3:e8:a4:7a:73:c0:af:f4:73:bd:36:3e:
79:06:3e:52:5e:15:c7:74:34:59:d7:dd:21:ac:b3:3e:b3:89:
b1:ba:07:ff:62:e5:69:52:2e:2c:d4:df:63:3b:9c:18:7f:c1:
d6:77:01:63:d4:6b:7f:99:f4:59:53:8f:82:4c:12:f7:19:e3:
63:de:84:52:3f:ce:d8:d2:38:df:13:0d:31:2b:1a:d6:50:be:
d3:6d:00:87:5f:4f:6e:0e:d4:71:ff:73:ef:f3:96:bf:7c:64:
d7:6f:a0:33:25:73:52:b2:c4:16:eb:43:b4:78:56:92:c1:47:
c7:67:0d:ff:d7:1d:09:42:13:2d:c5:dc:0d:fc:9e:02:b0:b5:
8d:14:de:24:05:a6:43:44:01:b9:82:9a:bc:d8:b7:40:55:a2:
d0:ee:51:17:b7:df:89:58:3d:8b:91:12:5e:fe:cc:38:de:c0:
d8:07:94:a8:6f:81:d1:bb:8e:85:18:9e:77:c2:e1:4e:d4:97:
0c:a3:5f:0f:18:44:5d:62:b9:d8:77:97:b3:0d:3d:8f:a9:ad:
09:e8:0f:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 12:41:53 2025 by rpki-client