Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363863353a3a2f34382d3438203d3e203136393039.roa
File: 326131343a373538343a363863353a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier: Q1fv/KYFNx6AMVtfxe7CGyJsMuk4oY0fOf3tpRilRvU=
Subject key identifier: 51:91:B5:1D:3B:D5:2E:C3:B1:53:36:86:89:95:0A:EE:5D:B1:5A:72
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 161CA44FD8BE0D61054102FF2F1471ED3CE2F625
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363863353a3a2f34382d3438203d3e203136393039.roa
Signing time: Sat 24 May 2025 16:30:02 +0000
ROA not before: Sat 24 May 2025 16:25:02 +0000
ROA not after: Sat 23 May 2026 16:30:02 +0000
asID: 16909
IP address blocks: 2a14:7584:68c5::/48 maxlen: 48
Validation: Failed, certificate revoked on Sun 25 May 2025 13:48:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
16:1c:a4:4f:d8:be:0d:61:05:41:02:ff:2f:14:71:ed:3c:e2:f6:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: May 24 16:25:02 2025 GMT
Not After : May 23 16:30:02 2026 GMT
Subject: CN=5191B51D3BD52EC3B153368689950AEE5DB15A72
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:3b:1a:b0:6a:73:3d:35:96:99:f4:7f:d9:07:
36:04:42:25:25:a9:3b:fc:00:f1:06:06:ec:8c:7a:
bc:4a:f5:96:9c:30:e4:8b:51:ed:54:37:2e:6a:54:
85:45:8e:3e:5d:37:82:9e:b7:df:82:ac:9a:97:05:
a0:90:6f:a6:15:85:7a:8c:21:d5:9f:1d:43:b4:87:
49:60:f0:69:ee:94:ee:fa:c8:12:01:41:55:bc:a1:
d1:aa:39:7b:56:fc:49:da:37:6f:7e:06:13:0b:4b:
96:b6:0a:34:77:12:82:7f:27:b4:bc:00:96:c9:ac:
92:a8:fe:92:03:ae:2a:f3:ae:55:3e:79:8f:0d:cf:
28:3e:25:82:a9:60:78:bc:8f:85:0d:ff:5e:4e:08:
63:8b:27:4a:37:6c:ea:a1:c4:a0:f8:ba:e1:b5:3c:
2e:80:52:b4:5a:8a:21:8e:93:56:2d:35:27:e8:ba:
6d:60:cb:27:8a:bf:e8:81:16:a3:c0:f0:81:ee:11:
be:c5:0e:66:e9:f3:0f:55:0d:64:49:f9:aa:59:6a:
8c:50:e2:2a:a6:0e:7b:f5:72:91:42:d5:0c:e2:a3:
4e:0c:d8:d9:f9:6f:eb:d0:d2:ba:25:70:62:14:11:
f9:61:8b:d4:0f:05:4a:59:77:85:ef:82:0c:51:d4:
2b:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:91:B5:1D:3B:D5:2E:C3:B1:53:36:86:89:95:0A:EE:5D:B1:5A:72
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363863353a3a2f34382d3438203d3e203136393039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:68c5::/48
Signature Algorithm: sha256WithRSAEncryption
66:61:fa:d7:57:56:4e:34:f0:b0:be:03:3a:f3:22:a6:83:91:
3d:eb:a4:7e:c1:ec:f3:88:c6:61:19:b8:2d:26:c9:fd:87:f7:
f5:53:0c:56:d7:42:aa:42:d3:2a:ea:b2:7b:dc:67:54:26:3d:
e3:ef:f3:9f:1a:ed:02:50:04:10:68:28:bf:eb:e8:17:f2:7a:
88:e4:a3:f3:c6:7e:68:6f:82:6b:fa:21:3a:3a:c1:1f:ae:84:
23:20:3a:6c:b2:5d:eb:f1:38:2b:f8:9b:c0:a6:01:cc:58:06:
6b:66:fb:48:58:7a:41:91:87:c4:b4:a1:d3:80:bd:e6:91:29:
05:3b:56:41:09:05:9e:f9:dd:9a:06:7c:c8:d5:98:c8:aa:f5:
89:23:b1:14:eb:63:b3:33:d6:71:d6:60:f8:9a:32:52:11:8b:
7d:4b:3e:b3:b2:3a:84:67:08:b0:3f:4d:eb:bf:13:6b:29:96:
31:4e:af:d6:a4:2e:30:8d:3d:d2:14:62:ef:d2:8b:9e:6d:bf:
74:26:cc:76:eb:bf:57:0e:39:77:6a:0e:13:47:1f:2b:79:f5:
6d:1c:6e:15:cc:4a:b3:a7:11:a6:c4:e3:d1:80:5e:e7:38:5c:
71:d9:0c:6f:22:1a:5c:29:15:4a:f0:c6:ad:fd:45:a9:ad:e3:
73:0b:1e:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 07:35:25 2025 by rpki-client