Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363661633a3a2f34382d3438203d3e203136393039.roa
File: 326131343a373538343a363661633a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier: xg5QxFcMOyy0EHm/J1E+2i/0av8A4+hYyF3PaEIVeKY=
Subject key identifier: 53:F9:F5:B9:3A:5D:D4:C6:6E:F5:3D:52:0F:35:32:E8:40:15:9E:53
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 79DB5941B3C8939392746AE5A8DC7F50F10DDE59
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363661633a3a2f34382d3438203d3e203136393039.roa
Signing time: Mon 26 May 2025 20:06:02 +0000
ROA not before: Mon 26 May 2025 20:01:02 +0000
ROA not after: Mon 25 May 2026 20:06:02 +0000
asID: 16909
IP address blocks: 2a14:7584:66ac::/48 maxlen: 48
Validation: Failed, certificate revoked on Thu 29 May 2025 13:12:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
79:db:59:41:b3:c8:93:93:92:74:6a:e5:a8:dc:7f:50:f1:0d:de:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: May 26 20:01:02 2025 GMT
Not After : May 25 20:06:02 2026 GMT
Subject: CN=53F9F5B93A5DD4C66EF53D520F3532E840159E53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:ee:54:00:cf:73:a2:3d:82:12:c5:d0:97:fc:
52:f7:43:4e:8b:f5:f6:63:80:dd:48:3d:be:d6:dc:
2a:a9:37:ad:be:6d:34:7b:6b:db:5a:55:58:29:6d:
4b:6f:ef:c6:16:71:3e:4a:6b:51:f1:e2:ca:88:63:
e8:9f:95:9e:0e:d0:03:d5:f7:91:1c:bf:73:ee:21:
91:c6:97:8c:fd:a8:ef:10:e5:7b:e1:e0:01:b8:5e:
ba:bd:eb:e0:b9:db:d5:f7:ed:6d:54:a3:ab:2d:28:
ca:ab:db:f0:46:07:67:29:9c:0a:49:b6:30:1a:6d:
ea:33:7c:09:55:30:31:2f:e3:7d:67:b6:b9:c4:ce:
32:37:68:95:fe:11:3a:25:ee:7f:5c:8a:d6:26:6a:
f6:ad:b2:d5:59:2e:be:51:ce:6e:ec:3f:6f:07:82:
dd:90:7f:7c:5d:b3:be:d6:8b:bc:81:c7:ea:a0:03:
a6:0a:f4:99:98:ab:90:17:f3:1a:6b:cf:f0:70:fd:
2a:5a:70:7f:04:63:b1:a0:89:97:f0:bf:e2:3f:b8:
2f:39:a2:97:2b:80:f5:f7:7c:3b:23:3c:da:67:f6:
e4:d5:68:96:74:47:c8:7b:60:4f:5e:f4:e9:cb:a9:
c3:bd:50:69:4b:17:e7:0f:b6:e6:a2:8b:40:a9:bc:
46:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:F9:F5:B9:3A:5D:D4:C6:6E:F5:3D:52:0F:35:32:E8:40:15:9E:53
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363661633a3a2f34382d3438203d3e203136393039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:66ac::/48
Signature Algorithm: sha256WithRSAEncryption
7e:9e:dc:01:ff:9d:86:0b:51:5d:c4:31:4e:8d:33:90:17:64:
84:71:c3:8c:2e:70:0d:6d:7f:91:bf:45:d5:4a:f1:aa:74:b7:
2a:2a:81:59:a4:e5:07:09:e3:6e:50:07:ce:e7:e4:39:8c:3b:
c0:e4:80:e3:f4:88:52:00:17:43:21:f0:69:65:f3:48:f0:3b:
0a:5f:f9:23:37:8a:d4:23:a1:e4:ca:02:22:d6:d1:3b:6a:53:
09:fa:1c:93:d9:3c:6b:11:d2:a0:96:f5:78:4f:af:d7:db:b8:
20:c8:fb:97:0c:98:67:ea:04:c8:b6:cc:09:44:4d:81:33:01:
2c:8a:d7:1f:45:a6:d1:b0:c6:b4:d3:d6:fd:98:ec:a7:dc:03:
c7:ce:f2:a8:bd:6d:3f:a6:c3:5d:f4:73:2a:e1:8a:24:b2:d4:
7a:96:9a:a5:99:5d:76:4e:75:24:7d:f0:4d:e9:54:eb:4f:bc:
26:67:87:df:f2:29:f3:9d:d8:8b:24:b5:70:8c:4a:36:d1:e5:
f5:11:07:af:91:7a:be:73:84:31:1d:7a:dc:74:c0:0d:26:b7:
b8:36:b4:41:cd:c1:3e:3b:c4:d3:ee:b8:56:29:4d:d0:3f:fe:
11:00:6f:39:22:81:b0:e6:ce:e9:bc:6e:5c:86:57:e9:4a:c4:
66:11:b6:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 01:17:07 2025 by rpki-client