Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a366131353a3a2f34382d3438203d3e203136393039.roa
File: 326131343a373538343a366131353a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier: qb2Py9voA1jsG+aaJKFuoauowfIHyt2vYwIotR02+pA=
Subject key identifier: F0:DF:30:20:1A:DB:60:33:93:C2:61:84:12:8F:D9:92:30:5F:62:70
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 5AFD301F54591AECA4D7918FCF24C14F348328F0
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a366131353a3a2f34382d3438203d3e203136393039.roa
Signing time: Sat 24 May 2025 17:10:15 +0000
ROA not before: Sat 24 May 2025 17:05:15 +0000
ROA not after: Sat 23 May 2026 17:10:15 +0000
asID: 16909
IP address blocks: 2a14:7584:6a15::/48 maxlen: 48
Validation: Failed, certificate revoked on Sun 25 May 2025 03:18:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5a:fd:30:1f:54:59:1a:ec:a4:d7:91:8f:cf:24:c1:4f:34:83:28:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: May 24 17:05:15 2025 GMT
Not After : May 23 17:10:15 2026 GMT
Subject: CN=F0DF30201ADB603393C26184128FD992305F6270
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:45:9e:e0:12:77:21:7c:37:d1:1d:6a:09:63:
91:14:8f:04:ef:c4:05:5b:b6:8e:ee:25:82:e8:fa:
6c:d0:f0:52:6f:3c:a7:b8:73:45:2f:03:16:25:cb:
12:09:a3:50:29:a2:c8:58:2b:85:77:e8:c5:b7:06:
b4:53:38:fd:0b:c2:26:fb:f9:2e:3f:2b:2a:27:c8:
71:fa:ac:18:50:6f:f9:0d:f3:36:ba:29:73:21:e9:
5f:a8:47:16:d7:97:8d:84:de:2b:0c:34:48:58:54:
95:d4:70:e2:1e:9f:93:f4:70:7e:2f:7b:fe:8e:1d:
6b:1b:38:a7:49:95:cc:02:88:55:b3:20:0b:3f:2c:
b8:b1:70:f8:96:85:01:b8:34:da:97:bf:3c:b7:a5:
c0:db:94:f2:ef:4d:dd:4a:9f:9f:ba:b3:a6:31:47:
cf:f6:46:d2:ec:6f:5d:9f:9b:35:06:4a:0a:c1:b0:
eb:83:91:48:57:ba:3d:92:81:9d:1b:cf:b3:40:f0:
6e:50:07:36:34:75:fd:c5:96:9f:33:69:96:d7:0f:
8a:6b:a1:bc:8e:e9:9e:86:23:c7:b0:67:9f:7f:cc:
f2:b2:88:ec:f9:4a:aa:1b:9e:1a:c2:5d:5d:93:c0:
3a:35:3d:0a:4b:4b:3c:02:fb:b5:cc:50:35:0c:06:
08:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:DF:30:20:1A:DB:60:33:93:C2:61:84:12:8F:D9:92:30:5F:62:70
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a366131353a3a2f34382d3438203d3e203136393039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:6a15::/48
Signature Algorithm: sha256WithRSAEncryption
4c:1a:8c:f7:ff:dd:0b:78:5a:c1:01:84:fd:cc:54:9d:1c:77:
22:5d:71:42:37:85:9e:09:7d:ac:21:f7:97:d0:fe:86:33:3e:
00:8f:b0:a6:ed:80:9e:97:4e:1f:57:16:49:77:d3:19:d4:c5:
65:31:6d:29:e4:f9:2f:2f:ac:bc:25:c9:52:97:86:d4:15:c7:
bf:cb:2a:7c:1d:22:a9:b0:66:ae:e2:6e:5d:33:72:94:e8:51:
58:62:3b:ec:a8:7e:21:2b:9c:2e:31:4f:4a:f6:bc:f4:45:a6:
e3:25:b7:86:b5:0d:29:bb:4d:64:d7:22:dc:f0:40:ee:e1:c1:
6c:8e:68:3b:b7:c6:f7:27:39:02:73:f7:1d:7e:16:10:a4:80:
54:8d:63:69:6e:3a:48:2d:59:1e:f4:76:3d:dd:b9:67:b3:32:
c2:ca:47:09:0b:11:8a:8b:c1:96:6c:61:01:30:a4:25:d7:c0:
f0:20:fa:89:77:5c:b5:71:81:28:1b:2b:cd:d9:1c:ab:19:f6:
61:b0:bf:8a:a5:49:55:ad:8d:d0:23:ef:f2:b5:9b:a4:7a:e8:
49:5d:27:86:34:9a:2a:71:b1:4d:ee:6e:f6:82:cd:15:ed:7c:
31:7a:2f:66:b5:22:45:82:39:60:f9:b8:67:4e:2c:9d:53:d8:
71:83:5e:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 06:08:52 2025 by rpki-client