Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a366130663a3a2f34382d3438203d3e203136393039.roa
File: 326131343a373538343a366130663a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier: 1dOBiUqi7zV5PNuAmFFuYpFTQaGWIXweLFtvprIyIr0=
Subject key identifier: 53:C8:1B:40:B8:30:B7:1E:05:4A:F0:E6:50:1F:36:78:6F:7D:AC:4A
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 1306C5DF183C903A467BCE374728354DC06FB2F0
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a366130663a3a2f34382d3438203d3e203136393039.roa
Signing time: Sun 25 May 2025 14:35:10 +0000
ROA not before: Sun 25 May 2025 14:30:10 +0000
ROA not after: Sun 24 May 2026 14:35:10 +0000
asID: 16909
IP address blocks: 2a14:7584:6a0f::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 28 May 2025 07:48:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
13:06:c5:df:18:3c:90:3a:46:7b:ce:37:47:28:35:4d:c0:6f:b2:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: May 25 14:30:10 2025 GMT
Not After : May 24 14:35:10 2026 GMT
Subject: CN=53C81B40B830B71E054AF0E6501F36786F7DAC4A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:9c:b2:4b:b9:ab:f0:64:c5:58:c6:ef:36:e8:
e2:51:13:59:23:8c:33:ce:81:17:ab:2a:a4:23:b7:
a5:48:06:f4:c7:06:ad:b7:2a:4e:d6:b4:b5:81:78:
e5:15:e2:b3:b0:41:d7:8c:ba:0c:fb:c1:17:63:9e:
16:7d:34:0b:1d:f0:d2:09:55:8d:73:3c:c4:29:06:
68:04:34:6b:a4:b7:10:f1:e4:e5:3a:b6:29:c4:60:
f2:d1:f5:3e:32:08:18:35:fe:44:76:9e:ec:f9:44:
d3:02:95:90:6d:6b:89:fd:25:e3:73:96:33:63:1b:
ee:19:07:79:9d:83:47:8d:fb:ea:90:e2:f2:bf:70:
e0:6e:fd:28:05:4c:34:8a:c0:9f:1a:d6:5a:76:c9:
63:12:88:ca:c7:98:93:40:8b:ae:78:53:c6:d7:72:
de:f6:93:8c:37:47:04:47:36:2d:cf:69:cd:d7:63:
e1:67:2b:0e:15:c1:fc:cb:f4:e8:b0:7b:0e:62:e9:
66:f2:78:0f:b2:e7:92:2e:28:d0:a4:dc:5d:f1:51:
a7:15:63:79:b4:81:81:d2:9d:89:cc:11:94:7d:92:
e9:5a:d2:a9:4f:7f:a0:92:8e:2e:96:7c:a0:25:51:
96:fb:04:26:77:71:c8:87:98:9c:1c:78:4e:ce:ad:
8d:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:C8:1B:40:B8:30:B7:1E:05:4A:F0:E6:50:1F:36:78:6F:7D:AC:4A
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a366130663a3a2f34382d3438203d3e203136393039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:6a0f::/48
Signature Algorithm: sha256WithRSAEncryption
70:0e:6f:6a:7a:8a:30:14:b1:28:8c:d1:66:17:25:ba:ee:d5:
3c:2a:12:23:57:df:8b:56:47:49:8b:d1:5b:82:04:2f:94:17:
f7:80:f4:b4:f1:85:e4:61:e2:ab:e7:fb:98:4e:b4:5f:11:22:
d2:57:80:f7:04:42:f4:70:9b:27:9c:88:2f:b3:4a:2d:ad:3c:
03:a7:c2:4e:d4:fe:b8:f4:69:c2:21:d1:db:92:6a:de:1b:69:
c4:85:e7:c9:2c:f5:8d:26:82:7f:1d:c9:a2:35:4f:ba:a1:77:
94:9b:a4:e4:f1:3b:92:e1:f7:f4:f9:1f:dc:d8:67:43:96:ef:
f8:22:56:7c:74:bc:48:34:6c:86:8c:0d:e2:c9:1b:42:d1:6a:
58:8c:6f:93:c8:40:b7:40:e7:f7:1e:09:62:2e:e6:0f:df:67:
4c:b0:03:16:36:a1:f4:8f:7e:05:83:83:ee:9f:95:9c:ea:3d:
07:7a:17:62:ee:cd:14:13:63:4f:f4:90:f8:61:3d:c1:7f:1c:
5a:be:9f:d0:e2:5f:44:4e:ff:dc:d1:9f:99:41:b4:b3:f1:32:
5d:38:aa:23:cb:03:c3:ad:ea:81:17:67:3d:ee:f8:0f:e0:f2:
ff:83:00:97:ae:ce:10:1b:6d:bc:f8:b3:0c:7c:17:be:60:00:
33:fc:68:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 04:44:43 2025 by rpki-client