Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363735653a3a2f34382d3438203d3e203136393039.roa
File: 326131343a373538343a363735653a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier: zXM9MN0j95IIpmKZ60WMuW5ExDbfW69xW0JRfSCze5E=
Subject key identifier: 5A:DD:BB:0A:E0:3C:8F:16:4F:97:B3:71:BB:DF:87:BB:68:22:D7:EE
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 5CC61BDF31CAD8D93E2FE04F87C8CEE7D0D56BF9
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363735653a3a2f34382d3438203d3e203136393039.roa
Signing time: Sun 25 May 2025 02:54:01 +0000
ROA not before: Sun 25 May 2025 02:49:01 +0000
ROA not after: Sun 24 May 2026 02:54:01 +0000
asID: 16909
IP address blocks: 2a14:7584:675e::/48 maxlen: 48
Validation: Failed, certificate revoked on Mon 26 May 2025 19:54:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5c:c6:1b:df:31:ca:d8:d9:3e:2f:e0:4f:87:c8:ce:e7:d0:d5:6b:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: May 25 02:49:01 2025 GMT
Not After : May 24 02:54:01 2026 GMT
Subject: CN=5ADDBB0AE03C8F164F97B371BBDF87BB6822D7EE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:c6:3d:b2:23:80:ad:36:6f:ea:b0:ab:e2:23:
85:c5:f8:d1:57:3a:92:2f:db:71:5d:a9:10:5a:1e:
e0:57:92:63:d3:d6:9e:60:4f:62:ef:10:e0:84:77:
4c:ac:27:35:b3:b9:33:48:c5:52:63:0a:16:c1:d3:
8f:26:ee:05:11:94:5f:17:04:83:98:4d:41:f6:3c:
de:14:f5:d2:b0:ab:19:2f:c9:13:83:68:17:8d:91:
10:b2:4d:2c:5e:41:9d:d6:3f:9a:b6:4a:44:b8:4c:
65:55:6d:e1:5a:f2:02:ab:32:ef:76:61:e1:ea:c2:
c5:8f:b4:9b:0b:13:4a:39:08:17:44:e0:19:fb:cd:
cb:18:6e:9b:6a:2a:93:a0:2c:cf:53:2c:38:f8:f3:
a5:f5:fe:0d:a5:29:e2:a5:d3:a1:b8:a7:4d:58:c6:
35:5a:34:9f:5a:a2:7c:0f:8e:98:f6:e2:29:28:8a:
57:28:ef:f2:26:e5:14:e8:81:4e:15:eb:87:e9:c2:
76:4c:4c:a1:49:da:cf:ac:67:82:34:ee:68:e7:53:
19:5a:2d:fc:ab:ff:ca:60:83:44:1a:40:c8:c4:02:
03:1f:c0:84:88:6a:68:d7:d7:7f:e6:d1:6f:1c:d0:
31:2f:fd:d2:43:7a:6c:19:4e:20:22:28:51:fd:66:
51:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:DD:BB:0A:E0:3C:8F:16:4F:97:B3:71:BB:DF:87:BB:68:22:D7:EE
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363735653a3a2f34382d3438203d3e203136393039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:675e::/48
Signature Algorithm: sha256WithRSAEncryption
02:cc:29:1c:d4:5b:66:66:24:96:47:13:a1:9d:f6:e7:68:2d:
f0:fe:56:12:2e:f2:9f:a4:d4:9e:f8:0e:3e:f8:28:81:6c:e2:
7a:58:8f:73:ee:46:e6:8c:04:18:9c:3f:3b:00:85:38:ce:94:
28:27:cd:40:e4:90:6a:54:0c:7d:3c:af:5f:23:c9:c7:91:35:
90:44:0b:95:ce:2a:8e:b4:39:5a:23:30:c3:a5:26:f2:f5:9a:
24:42:a7:8c:1a:53:3b:29:18:27:19:96:c5:12:82:20:2f:6f:
e5:7d:c2:52:38:c8:50:c5:76:0f:8a:3f:62:f5:df:32:33:ff:
64:6c:d0:af:f5:01:db:64:8a:3f:41:6b:a2:ae:c7:6a:52:42:
26:e2:56:6f:6b:7f:b2:1c:15:fd:96:86:11:45:c4:95:d2:07:
ce:2b:74:23:25:76:4a:2d:83:85:01:fd:ba:60:6d:ce:cb:07:
bb:63:2a:75:5c:46:4b:7f:11:1e:6f:57:2f:cd:f0:ec:3d:af:
74:a4:18:a9:b9:a1:21:04:5a:06:a8:4a:55:d6:08:51:26:ce:
12:dc:a5:d4:4e:82:48:a5:43:bd:f6:8f:84:b7:1f:0d:fe:44:
0c:bd:f7:1c:b4:47:fd:a9:a8:a2:24:70:fc:54:0e:51:e0:b2:
75:6e:0c:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 02:40:40 2025 by rpki-client