Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363762333a3a2f34382d3438203d3e203136393039.roa
File: 326131343a373538343a363762333a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier: oUinU00INts03KqDZT7ecgE5G0xz641BohcdOAr39ww=
Subject key identifier: 3E:64:95:04:DD:F6:C5:8B:9F:22:CA:6F:FB:5D:0D:52:45:56:35:5A
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 21124AB8A638BDCAC90084D9142E4874E94BD25E
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363762333a3a2f34382d3438203d3e203136393039.roa
Signing time: Thu 29 May 2025 13:24:02 +0000
ROA not before: Thu 29 May 2025 13:19:02 +0000
ROA not after: Thu 28 May 2026 13:24:02 +0000
asID: 16909
IP address blocks: 2a14:7584:67b3::/48 maxlen: 48
Validation: Failed, certificate revoked on Sat 31 May 2025 17:16:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
21:12:4a:b8:a6:38:bd:ca:c9:00:84:d9:14:2e:48:74:e9:4b:d2:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: May 29 13:19:02 2025 GMT
Not After : May 28 13:24:02 2026 GMT
Subject: CN=3E649504DDF6C58B9F22CA6FFB5D0D524556355A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:33:5f:c3:78:96:b7:a6:2d:02:ec:e3:16:42:
67:59:1f:49:0c:45:c5:3c:60:2f:1f:ae:3c:38:41:
ab:58:7b:0a:30:07:66:39:44:ad:fc:68:80:be:cf:
96:08:24:96:af:b5:09:83:7a:23:f8:b6:00:ec:3a:
9d:0b:05:d1:f0:b3:4e:62:e8:8b:d9:b7:48:6c:4b:
cd:df:20:d0:7c:03:9c:71:52:6b:07:da:7e:99:44:
40:e3:ee:54:74:68:1a:d9:99:9c:6e:a8:7c:a8:09:
42:f8:ab:d2:c7:22:76:af:4f:72:55:0e:0d:80:eb:
22:bc:c5:1f:d2:87:b6:97:c2:e9:91:6b:a1:35:65:
0f:3b:d3:02:b4:1a:ff:be:ec:56:d3:8c:fb:cf:bb:
8f:31:a7:2d:6d:73:75:66:c3:f1:2e:d8:ba:67:a7:
b6:72:ac:fb:d0:3a:dc:19:1b:a4:d0:bb:77:c7:76:
31:4c:6e:51:c9:0f:3f:4a:62:0b:f5:5a:0a:37:6f:
3c:88:e3:52:d6:bd:7f:45:61:fb:93:df:1b:a3:0c:
e0:d6:09:83:85:24:50:34:e9:10:b7:36:c7:28:ac:
28:e4:3a:15:79:69:eb:2b:98:c7:86:81:24:ad:c8:
24:dc:29:c2:d2:b0:5e:16:f5:dc:71:19:79:e1:30:
bf:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:64:95:04:DD:F6:C5:8B:9F:22:CA:6F:FB:5D:0D:52:45:56:35:5A
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363762333a3a2f34382d3438203d3e203136393039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:67b3::/48
Signature Algorithm: sha256WithRSAEncryption
09:f1:ea:6a:2e:d1:01:86:7f:51:14:b6:7d:68:00:4a:e8:f0:
b0:8e:a2:de:28:d5:6a:5a:9e:58:1e:13:b4:8d:5d:22:c2:99:
31:8f:80:5a:77:6d:9d:9a:3c:b2:50:77:28:1f:82:ff:8c:21:
99:a7:b4:61:c2:01:ef:72:9c:ca:cd:73:ec:3b:1c:f8:93:ec:
9c:4b:39:f9:64:a9:79:d1:78:77:98:c1:5a:83:f9:49:0f:e3:
41:59:42:c9:6c:3d:ad:61:6c:33:73:0c:8c:66:92:06:66:b0:
eb:3f:d5:a8:b1:5e:ca:54:32:ba:52:65:78:3f:2b:34:4c:2d:
29:95:d5:3d:25:7c:1d:60:7a:f4:ff:f4:5c:4b:40:58:c1:f3:
e9:6f:46:85:dc:32:9c:50:0f:e6:a3:13:5b:6c:d9:aa:c3:e9:
ab:bb:b7:e4:8c:15:63:a3:71:14:79:1c:88:44:4d:cc:51:80:
d0:af:58:e3:4b:c3:34:5e:21:a6:b1:51:c2:b3:31:40:fc:a7:
8c:d3:34:4c:a9:39:33:86:24:6b:b2:85:d0:e7:f5:c6:b6:37:
36:24:06:2e:9c:28:40:ab:65:ec:fa:5d:b1:e6:0f:da:c6:9f:
c0:5c:83:62:dd:37:2a:4b:a8:2f:88:c2:7e:53:57:80:26:4d:
d1:19:82:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 06:20:43 2025 by rpki-client