Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363764663a3a2f34382d3438203d3e203136393039.roa
File: 326131343a373538343a363764663a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier: Z79drXx8vcUbMlkp/T3Q4YOyp3mxaXFZyw+/fjLoXI4=
Subject key identifier: 33:70:71:5F:45:88:8C:A7:9E:D5:86:26:7C:65:58:D9:BE:78:2D:BE
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 4CCB1A605CEBE694964EFF1FFCBE73DD07B2B3D3
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363764663a3a2f34382d3438203d3e203136393039.roa
Signing time: Sat 24 May 2025 17:00:02 +0000
ROA not before: Sat 24 May 2025 16:55:02 +0000
ROA not after: Sat 23 May 2026 17:00:02 +0000
asID: 16909
IP address blocks: 2a14:7584:67df::/48 maxlen: 48
Validation: Failed, certificate revoked on Sun 25 May 2025 14:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4c:cb:1a:60:5c:eb:e6:94:96:4e:ff:1f:fc:be:73:dd:07:b2:b3:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: May 24 16:55:02 2025 GMT
Not After : May 23 17:00:02 2026 GMT
Subject: CN=3370715F45888CA79ED586267C6558D9BE782DBE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:6a:f9:a8:85:23:3d:46:e4:4a:57:eb:e8:ef:
1c:1a:aa:35:ce:8e:79:f2:69:90:20:49:1c:2a:41:
2a:4d:77:25:51:11:89:40:50:ee:0f:cc:0b:3c:a0:
b6:66:47:44:03:e8:84:95:3b:c1:2b:5d:8d:95:86:
76:0a:66:05:bb:eb:7b:54:0b:37:a2:09:ea:90:51:
62:b6:1b:cb:5c:35:24:c9:13:f9:31:2e:f2:77:ea:
89:56:fe:7d:01:4e:ac:b9:e8:89:5d:41:31:82:4a:
c3:e9:ac:2a:93:50:06:47:d9:b7:af:ec:72:37:e2:
f9:b5:fb:fb:9a:aa:22:2e:d1:9c:70:38:59:ba:54:
11:2e:05:43:0c:d7:77:d2:8b:9a:ae:49:13:09:3b:
85:ea:fa:8e:dc:4a:cd:57:d0:c5:bc:e4:15:6e:e0:
dd:36:9a:8c:04:8a:e4:8e:26:cc:ec:12:e4:0f:1a:
db:4c:58:8f:46:96:73:f1:62:a3:81:41:66:9d:02:
5e:27:e5:28:88:f8:96:22:de:a2:aa:c8:0f:39:d2:
bf:b2:7d:4f:cd:d6:88:43:4f:e3:57:2e:6f:23:38:
34:31:25:a5:03:63:90:3c:ce:d4:4b:46:b2:e5:0a:
30:28:3b:89:40:a4:05:24:90:77:e7:a2:12:f1:ed:
38:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:70:71:5F:45:88:8C:A7:9E:D5:86:26:7C:65:58:D9:BE:78:2D:BE
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363764663a3a2f34382d3438203d3e203136393039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:67df::/48
Signature Algorithm: sha256WithRSAEncryption
59:d1:7c:1f:25:c4:b7:3f:8d:3a:6c:d8:fe:b0:5d:c0:1d:b4:
af:0a:63:ec:80:2c:94:d7:79:35:6d:70:24:1f:76:50:5e:eb:
f8:ba:ca:27:31:b0:32:1f:de:fc:50:40:aa:d1:ba:9c:26:10:
bb:2f:25:c9:bd:eb:5f:1f:c2:09:92:9e:00:91:b0:fd:86:92:
e2:8e:5c:cb:6b:4d:54:31:99:ec:bb:c0:36:a0:32:43:a8:88:
98:01:3d:07:fe:07:72:b5:44:10:51:e3:04:c9:74:ea:4b:0c:
3a:78:d8:f2:be:7e:96:1a:94:3c:3f:89:9e:9d:20:fc:a2:4e:
9a:7a:10:c2:44:3a:33:cf:0e:50:de:eb:61:59:86:fe:a6:78:
86:18:f3:97:d5:51:c1:a3:23:47:a7:86:d5:bf:e1:76:e9:be:
a4:01:f1:23:80:c0:1e:86:98:00:21:ae:85:0d:42:eb:6e:e9:
d7:93:72:95:3a:e1:76:60:a3:0c:ba:24:ea:8d:90:94:7c:22:
62:4a:83:01:28:3e:0e:2f:37:10:24:0b:59:1f:10:03:5e:8f:
f5:f1:c5:d1:ed:53:9d:39:e6:69:6a:08:98:73:e5:de:90:6f:
8d:1a:20:6f:8a:61:16:fc:27:d8:09:66:86:81:0e:6f:ef:0a:
91:da:83:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 12:43:29 2025 by rpki-client