Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363732663a3a2f34382d3438203d3e203136393039.roa
File: 326131343a373538343a363732663a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier: +Thn38zmrEbUt+sEvMHW9pPrho7wUmZ23z49vmGDdZ4=
Subject key identifier: BD:D4:A8:74:E5:92:F0:C5:C6:46:DA:51:86:5A:27:E5:BD:FC:04:88
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 74F57578BACBE97E7522ED3CF0547C2D126637D4
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363732663a3a2f34382d3438203d3e203136393039.roa
Signing time: Sun 25 May 2025 06:12:02 +0000
ROA not before: Sun 25 May 2025 06:07:02 +0000
ROA not after: Sun 24 May 2026 06:12:02 +0000
asID: 16909
IP address blocks: 2a14:7584:672f::/48 maxlen: 48
Validation: Failed, certificate revoked on Tue 27 May 2025 16:18:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
74:f5:75:78:ba:cb:e9:7e:75:22:ed:3c:f0:54:7c:2d:12:66:37:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: May 25 06:07:02 2025 GMT
Not After : May 24 06:12:02 2026 GMT
Subject: CN=BDD4A874E592F0C5C646DA51865A27E5BDFC0488
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:13:90:0c:75:64:d9:0f:15:f3:ef:26:d8:06:
09:98:d7:a6:06:1a:1b:bc:f7:ba:4d:5a:df:5b:4a:
e3:85:67:84:3e:5f:ad:3a:dd:cf:c9:76:60:83:71:
73:11:f0:b9:53:d1:21:85:0f:27:8b:19:18:3c:f0:
11:93:d8:dd:aa:ab:08:3d:2c:28:1d:b4:81:5b:e8:
d8:22:1b:ba:6d:d7:33:c8:1b:b7:6e:c1:9a:fb:4b:
6a:90:8a:90:67:cb:4d:2a:02:98:44:f5:28:ee:23:
cf:47:02:ee:d3:42:68:f6:87:69:14:32:c9:21:d9:
be:5b:f0:bf:59:3e:72:7b:32:e5:ec:31:19:99:9b:
61:4c:52:24:be:30:03:f2:32:fe:fb:fb:21:83:b6:
a4:e3:89:52:da:e7:43:4e:94:9c:a7:d4:6e:21:9a:
bb:a9:af:ad:d4:1a:69:aa:fc:bc:69:bb:d6:e9:25:
8d:c0:22:97:dc:2f:87:f9:0a:d8:9c:e5:5c:18:90:
20:c3:20:7f:d1:03:b8:d5:08:85:5a:bc:82:88:06:
10:cb:08:50:e5:dc:0b:09:68:9c:30:ad:ed:6e:cc:
49:73:61:85:2c:27:9d:2b:44:e5:f7:47:e1:bf:70:
ca:49:b3:c4:65:f5:76:20:42:d5:3e:b6:01:82:27:
eb:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:D4:A8:74:E5:92:F0:C5:C6:46:DA:51:86:5A:27:E5:BD:FC:04:88
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363732663a3a2f34382d3438203d3e203136393039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:672f::/48
Signature Algorithm: sha256WithRSAEncryption
18:ff:d8:ea:b6:de:9e:32:76:fa:88:75:4e:a0:37:3a:57:cf:
b5:91:13:ea:dc:0c:2e:a3:bd:b6:4d:44:0a:b5:73:9c:a4:9d:
ac:70:36:3b:b7:39:e7:42:0d:e3:fd:14:2f:ce:07:a4:cb:ab:
b2:44:52:5f:8f:29:e4:ba:5c:95:a6:d6:2d:7e:a8:40:9e:27:
6e:cf:86:5a:66:37:04:2a:10:bc:da:06:54:e9:d4:57:a5:8c:
f0:0c:1d:9b:b9:91:5a:60:da:b1:7a:65:81:70:0b:d1:7e:d0:
cc:63:45:03:0a:0c:22:42:ae:73:dd:eb:8d:60:a9:97:23:57:
7c:a1:c9:df:1b:94:ac:7d:70:d6:75:d2:ab:37:5f:07:4b:bb:
5e:43:13:69:d6:e1:c9:c0:c0:06:6c:bb:b9:ad:3c:b7:6c:15:
a6:2b:db:f1:e9:16:ac:26:7b:f7:ec:a7:79:81:34:6e:36:93:
52:54:65:e1:0b:7a:36:15:e0:20:2d:ed:eb:64:91:83:a2:51:
94:f6:a1:7a:d1:23:16:9b:35:61:10:3d:4d:e4:36:9d:6c:b3:
29:4d:45:68:df:26:a7:64:c5:2d:a2:1a:40:3e:5b:61:93:f6:
62:a4:0f:04:66:69:a0:22:b0:b3:14:22:ed:50:9b:66:15:f1:
52:c7:c8:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 14:35:57 2025 by rpki-client