Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a366335323a3a2f34382d3438203d3e203136393039.roa
File: 326131343a373538343a366335323a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier: F1O+4ZVpzlSxQsHzRQiFqg62K2PykLkATw0/G9juyIc=
Subject key identifier: 7C:F4:84:B3:BC:01:F0:F1:B2:59:10:90:06:8C:D5:E9:4E:6F:16:BA
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 3BE5FB71FD488F86931385CD9A9567325A1835C3
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a366335323a3a2f34382d3438203d3e203136393039.roa
Signing time: Sat 24 May 2025 15:54:02 +0000
ROA not before: Sat 24 May 2025 15:49:02 +0000
ROA not after: Sat 23 May 2026 15:54:02 +0000
asID: 16909
IP address blocks: 2a14:7584:6c52::/48 maxlen: 48
Validation: Failed, certificate revoked on Mon 26 May 2025 08:30:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3b:e5:fb:71:fd:48:8f:86:93:13:85:cd:9a:95:67:32:5a:18:35:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: May 24 15:49:02 2025 GMT
Not After : May 23 15:54:02 2026 GMT
Subject: CN=7CF484B3BC01F0F1B2591090068CD5E94E6F16BA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:b1:45:24:c4:92:0b:cc:80:2f:7f:b8:01:f5:
a1:36:3b:50:15:93:af:8c:cf:d2:3e:d7:9c:dd:c1:
fc:d2:9a:2f:b4:a3:94:94:2d:78:98:e5:ea:ae:27:
21:11:a8:0f:8a:f7:37:a5:0f:9a:70:cc:c8:82:62:
76:76:63:19:b0:ff:9e:1d:f4:fd:ee:0c:c4:a7:07:
aa:1b:b9:a6:db:41:0f:30:5e:1c:4f:04:0f:a0:81:
06:46:67:12:5c:50:55:91:12:6f:da:07:3b:4f:a9:
32:ba:9f:39:ec:60:2b:9d:be:e9:14:f2:f5:46:fc:
14:94:bc:fd:23:2e:a2:e1:d1:7a:32:f9:04:7f:40:
23:35:8e:ae:e5:6a:2d:38:08:4f:ca:e7:17:8f:1f:
67:79:98:46:57:e9:c4:96:70:17:f9:4d:4d:80:79:
41:35:3d:9b:ec:03:9b:f7:8c:28:5d:5c:98:cd:08:
2f:46:23:33:b4:19:04:c2:24:86:39:61:c0:be:4a:
81:81:a2:1c:d7:e7:6c:eb:2a:e2:cf:56:81:82:76:
d7:55:94:4f:fd:57:ab:b6:c6:cb:f9:91:42:a7:1d:
82:04:36:fb:53:80:51:da:3b:d9:26:87:53:33:cb:
c1:f4:3d:3d:e7:2e:2e:d0:05:5d:f6:ac:fb:72:a4:
dc:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:F4:84:B3:BC:01:F0:F1:B2:59:10:90:06:8C:D5:E9:4E:6F:16:BA
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a366335323a3a2f34382d3438203d3e203136393039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:6c52::/48
Signature Algorithm: sha256WithRSAEncryption
0b:1c:0d:c1:50:45:8f:6a:42:28:7b:9c:16:dc:b0:b4:cb:63:
ba:53:54:d5:e3:4b:66:27:bb:d5:5d:6c:9f:14:ae:b8:77:42:
9b:b1:6b:94:b0:c7:af:1d:ab:f1:a1:39:bb:85:b0:20:be:4c:
05:fd:56:ac:67:46:88:4c:b6:7e:26:46:0f:53:f3:98:ea:51:
cd:c9:1d:57:e9:9c:a3:0c:0e:c2:d2:89:09:7b:20:f3:d4:af:
bf:f2:db:fa:a7:6e:d4:1f:96:f6:6f:b9:69:c8:3f:91:4d:a9:
1b:d2:67:0c:62:f4:15:5c:41:1a:57:6b:c0:13:9f:57:03:bc:
45:e0:13:a6:fd:49:0a:91:a3:06:b9:51:d6:e4:f7:34:a8:73:
fe:d1:48:e4:ce:62:37:b9:57:ac:dc:84:7f:83:ab:7d:eb:23:
59:bf:ab:93:33:7d:73:e6:4e:20:00:d3:94:cf:4a:0f:0b:05:
64:78:47:38:0f:a7:2d:8d:43:99:86:6b:c4:27:89:24:ee:ac:
5c:7a:04:e8:bc:73:a6:75:cf:aa:bd:bb:87:d1:20:88:7d:13:
24:58:c3:21:d7:ca:dc:38:40:0d:53:7b:a3:13:c2:7b:1f:d3:
f9:7c:74:80:a4:a1:c9:be:fd:92:6f:10:86:a8:38:c0:fb:2b:
33:19:6a:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 00:42:39 2025 by rpki-client