Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363833643a3a2f34382d3438203d3e203136393039.roa
File: 326131343a373538343a363833643a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier: mJGaIpoKgeNQCTazU7DuzqJ1ATxQUwm++UXZUB+1kN0=
Subject key identifier: 50:1F:53:5C:83:81:B8:54:6F:AB:F7:CC:39:41:13:8D:EA:82:40:1C
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 1E73B1DA2949F25C0150ECA6CD597276CDC87E88
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363833643a3a2f34382d3438203d3e203136393039.roa
Signing time: Sat 24 May 2025 17:10:16 +0000
ROA not before: Sat 24 May 2025 17:05:16 +0000
ROA not after: Sat 23 May 2026 17:10:16 +0000
asID: 16909
IP address blocks: 2a14:7584:683d::/48 maxlen: 48
Validation: Failed, certificate revoked on Sun 25 May 2025 03:12:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1e:73:b1:da:29:49:f2:5c:01:50:ec:a6:cd:59:72:76:cd:c8:7e:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: May 24 17:05:16 2025 GMT
Not After : May 23 17:10:16 2026 GMT
Subject: CN=501F535C8381B8546FABF7CC3941138DEA82401C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:06:85:ee:ec:ff:77:af:f6:3e:56:c8:35:3f:
e3:0c:8e:8a:20:5f:17:35:1e:9a:90:45:87:a2:8c:
49:0c:ea:0e:4a:5a:53:7d:1e:ca:9a:45:79:74:70:
29:7e:4c:85:94:ee:82:39:77:bb:48:37:2d:48:56:
2a:90:81:10:af:bf:c7:9b:4c:d1:cf:18:41:a6:e0:
24:4a:84:c6:ce:ea:3a:19:65:82:66:63:bf:57:4c:
c3:7a:a5:71:8e:9b:3b:ce:ca:1a:3c:a5:86:39:60:
be:2e:13:dd:1a:c2:2e:1e:bc:f9:fd:4f:88:a2:a0:
3d:61:99:59:8d:07:39:26:06:47:92:d2:c3:6a:e2:
8a:10:70:2e:51:10:e1:e9:44:9a:99:e5:07:e0:bb:
f3:dd:d3:25:45:aa:b9:43:89:89:5e:f2:18:fe:c7:
0b:e0:5f:61:d3:b5:aa:39:4f:f1:dd:f5:61:1d:a4:
90:25:d3:bc:b3:05:44:d0:ed:51:3c:fd:46:e5:24:
57:53:3f:14:09:15:d6:c8:f1:5b:08:05:a0:eb:e1:
3a:d3:45:ff:99:cd:ac:41:a3:a1:38:9e:2d:93:05:
dc:93:71:16:2d:0f:73:60:65:cf:77:4b:d6:1d:c2:
72:f7:b4:db:22:33:b7:85:62:bc:53:03:2d:64:85:
4c:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:1F:53:5C:83:81:B8:54:6F:AB:F7:CC:39:41:13:8D:EA:82:40:1C
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363833643a3a2f34382d3438203d3e203136393039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:683d::/48
Signature Algorithm: sha256WithRSAEncryption
19:02:72:0b:30:93:c7:d9:99:ba:9a:c5:61:6f:1a:ac:f1:9a:
33:7d:91:3a:2d:27:9c:5a:2e:80:1c:4f:0e:bf:70:e2:ff:68:
61:56:ec:e0:12:12:99:a2:91:df:54:d4:f9:9d:62:d0:c4:f3:
32:48:60:99:38:6f:21:fc:5a:a0:44:08:a3:d8:37:4c:0e:57:
8d:fd:8e:fd:12:be:7a:8c:3a:bc:1e:5f:cc:e9:5a:87:07:96:
97:e7:a9:c0:5c:ba:e9:ff:e8:c4:ef:1a:d8:e2:19:11:1f:19:
ec:fa:ba:7c:86:2f:e0:4e:29:87:f8:10:c8:a1:af:c7:ee:04:
46:06:6d:76:12:72:66:15:17:b3:bc:f8:16:05:c7:77:03:49:
05:3d:62:ce:fb:55:a9:10:d0:8d:ea:1e:7b:07:8f:2c:36:b9:
a8:88:9f:6f:ab:8b:08:c4:90:a7:87:83:ad:ba:7a:39:19:23:
d2:39:28:5b:91:0a:11:a7:20:7c:62:77:33:3e:89:91:7d:95:
2a:f2:99:cf:55:f1:53:53:76:f6:35:7d:ec:0d:f4:eb:1b:d5:
40:64:4f:9d:e4:76:94:ca:41:35:bc:36:0b:aa:7a:53:f4:aa:
94:78:3a:44:32:27:6e:8a:b1:c4:6a:f4:af:6d:f5:3e:34:92:
9f:09:3f:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 07:25:34 2025 by rpki-client