Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a366166393a3a2f34382d3438203d3e203136393039.roa
File: 326131343a373538343a366166393a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier: W4EbZjBPAoCp9/E4xRLfyntg6QappKE1X3arfS0DagA=
Subject key identifier: 9A:2E:7F:08:86:B7:82:58:82:88:C1:A0:C3:27:EE:C8:34:C4:1D:48
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 5597B8A0855F96533C8459FEC1A78C2522350445
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a366166393a3a2f34382d3438203d3e203136393039.roa
Signing time: Fri 23 May 2025 20:51:01 +0000
ROA not before: Fri 23 May 2025 20:46:01 +0000
ROA not after: Fri 22 May 2026 20:51:01 +0000
asID: 16909
IP address blocks: 2a14:7584:6af9::/48 maxlen: 48
Validation: Failed, certificate revoked on Sat 24 May 2025 17:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
55:97:b8:a0:85:5f:96:53:3c:84:59:fe:c1:a7:8c:25:22:35:04:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: May 23 20:46:01 2025 GMT
Not After : May 22 20:51:01 2026 GMT
Subject: CN=9A2E7F0886B782588288C1A0C327EEC834C41D48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:46:69:0f:74:2f:24:9e:d3:1e:1e:8a:6b:c3:
f2:39:eb:a0:ce:51:83:f1:fe:84:55:1d:f0:6d:33:
48:5d:40:1e:0d:00:45:e9:fd:c4:b1:34:63:5e:1a:
66:7e:bb:af:97:0c:06:14:e4:e0:3f:f8:b0:20:cc:
de:e7:dc:9f:54:68:03:79:84:81:61:ca:69:53:40:
1c:04:2e:39:74:ce:a4:b9:b6:9d:c4:16:ef:2a:45:
43:5a:80:a3:76:09:7b:03:f8:f7:bd:71:22:d4:0e:
a2:50:cf:53:84:13:e6:bc:66:8c:69:c4:3d:86:be:
1b:5b:88:3f:dc:25:b8:c3:d2:f0:a6:a7:b4:6d:78:
8b:01:0c:58:54:ad:6e:c4:b2:82:21:6d:a0:80:be:
46:3b:35:ca:fa:d6:b6:a7:98:91:2c:a7:5d:e4:1a:
48:8f:75:10:60:b7:06:a7:ed:b4:80:e4:3a:6f:38:
68:98:29:6a:ef:81:3d:b5:1c:24:d1:77:f7:bb:8b:
0d:77:11:90:6f:d1:fe:09:6b:32:49:cd:d4:dd:d1:
48:1d:b8:a7:0b:ea:59:cc:b0:91:15:4c:c6:52:1d:
7c:fa:73:88:6c:96:29:9d:f1:ce:55:a8:b0:33:d2:
c9:e8:d4:eb:22:6e:55:26:21:85:0a:6f:1f:71:a4:
81:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:2E:7F:08:86:B7:82:58:82:88:C1:A0:C3:27:EE:C8:34:C4:1D:48
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a366166393a3a2f34382d3438203d3e203136393039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:6af9::/48
Signature Algorithm: sha256WithRSAEncryption
93:ab:83:6b:5d:4b:be:5f:95:d3:5d:a7:7d:ee:51:c2:f9:1d:
9d:97:da:c9:8e:e2:62:0c:e1:ee:7c:1a:10:ff:37:0f:28:09:
9b:ea:a2:46:92:4a:44:47:cc:70:f4:26:7d:f6:e9:11:b5:96:
44:93:00:f0:a4:91:7d:cd:b8:8e:49:cf:b5:a8:d4:3f:ef:3b:
96:52:1e:68:c3:0c:78:4e:27:87:b2:02:b2:1b:35:7c:a7:19:
33:d8:14:0f:37:c9:58:54:1c:ab:01:fc:48:6a:44:5a:90:cf:
a3:c9:42:dd:3d:35:24:8f:6c:91:3a:d3:5d:05:3d:74:53:6e:
3c:55:12:5d:0f:67:31:e8:64:f4:92:a1:f2:5d:8d:d1:a2:b8:
8c:98:31:d8:d8:19:f3:76:f7:35:e9:13:0c:4c:f7:b8:53:b7:
ef:85:af:71:fb:12:cc:45:17:7f:b9:88:45:5d:80:cb:b4:2f:
c6:e7:90:ce:88:af:82:ec:1b:bc:2a:39:01:3a:7b:26:4f:62:
b1:32:d9:aa:1a:e8:34:95:ae:b9:2e:49:a0:0b:70:52:47:0c:
84:a3:2b:14:fb:b3:5b:c8:df:33:d3:58:46:24:87:d5:af:ec:
37:35:bb:6c:5d:2b:8f:3b:0d:83:38:0c:9b:4f:69:73:bc:97:
36:5f:9c:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 06:11:40 2025 by rpki-client