Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a366364393a3a2f34382d3438203d3e203136393039.roa
File: 326131343a373538343a366364393a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier: p7QEvbrJVxUEnuhw0hNA1cYIEC5O3yNZFI5P9ZAd4nM=
Subject key identifier: CF:3B:71:29:0A:7B:41:90:86:76:6A:11:62:DF:A9:5E:CF:97:7C:AB
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 499061C2D846A3C29169C3E5F5E2212781606BDC
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a366364393a3a2f34382d3438203d3e203136393039.roa
Signing time: Fri 30 May 2025 03:30:02 +0000
ROA not before: Fri 30 May 2025 03:25:02 +0000
ROA not after: Fri 29 May 2026 03:30:02 +0000
asID: 16909
IP address blocks: 2a14:7584:6cd9::/48 maxlen: 48
Validation: Failed, certificate revoked on Sat 31 May 2025 17:16:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
49:90:61:c2:d8:46:a3:c2:91:69:c3:e5:f5:e2:21:27:81:60:6b:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: May 30 03:25:02 2025 GMT
Not After : May 29 03:30:02 2026 GMT
Subject: CN=CF3B71290A7B419086766A1162DFA95ECF977CAB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:4c:1f:08:75:85:75:9c:6e:ae:f2:58:e4:87:
86:d8:f1:a2:35:e0:4c:5b:35:85:2a:30:d1:5b:b0:
8b:8d:16:f7:c2:56:65:05:38:8d:db:10:d4:a8:1d:
9e:90:ac:7c:9c:3e:c4:24:b5:79:54:42:07:43:56:
ac:91:c7:d9:1d:44:78:8e:8a:42:cc:0f:6b:79:da:
1e:8e:8b:84:4e:8c:8d:0c:ff:db:0c:80:37:dc:80:
15:84:21:3a:96:a6:93:8b:3d:29:2c:93:50:2d:b9:
24:87:42:aa:94:07:28:60:ee:04:8e:4f:06:d1:1e:
00:fb:fe:5a:6a:b6:e5:4d:a6:fe:93:d8:7c:bd:e5:
c3:1f:1b:45:f4:1d:4f:fd:c5:ea:47:97:9a:e0:96:
3a:d1:cd:5c:7c:8c:db:a2:69:fb:6f:dd:bd:bc:62:
39:1d:72:e9:8b:68:c8:b3:4b:96:e2:bf:9f:e0:ea:
74:11:c2:65:76:df:a3:cc:cb:ee:aa:e9:4a:fa:e4:
27:74:e8:4d:b4:5f:19:bb:e3:25:c3:3d:33:4e:cb:
ff:d3:52:af:c9:ff:3e:73:b9:b4:ec:e5:21:57:e0:
ce:02:ef:a1:0d:db:8a:e3:4a:ab:a4:a1:04:b6:5b:
d0:9d:6c:0a:88:e9:f1:76:e3:29:25:bd:50:da:a5:
eb:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:3B:71:29:0A:7B:41:90:86:76:6A:11:62:DF:A9:5E:CF:97:7C:AB
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a366364393a3a2f34382d3438203d3e203136393039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:6cd9::/48
Signature Algorithm: sha256WithRSAEncryption
aa:ab:46:a8:d9:23:53:58:e1:8e:3c:cc:7f:f3:cf:e5:18:30:
4c:53:c3:55:dc:40:18:3c:9c:c8:74:aa:89:dd:39:c2:bc:d0:
ef:54:20:bb:e6:9f:64:e2:26:cb:8e:86:36:45:b6:93:b7:fa:
05:77:cd:38:35:b7:a0:e4:b8:84:7c:81:7a:ab:6a:dd:a4:9c:
13:5d:a9:78:d8:14:b0:de:58:cd:e9:8f:59:24:e9:67:9d:77:
52:fc:88:05:3e:af:bb:e3:07:9f:46:32:f8:34:38:dd:03:06:
a4:5f:9e:19:bd:77:1b:14:04:6c:23:8d:e6:56:5f:ea:94:9d:
ae:b4:94:2c:5f:64:c0:64:b0:51:d3:2d:a1:65:6e:cc:d3:1a:
f2:da:56:01:0b:b8:e7:79:18:cf:19:eb:9d:0a:4a:91:3e:f4:
b1:55:d3:39:12:5e:84:24:da:1c:ec:c0:07:98:68:01:37:cd:
26:61:94:3b:1e:1c:7b:e6:50:6a:0e:e9:1a:04:70:21:b0:c7:
01:c1:ed:bd:3a:51:d5:24:98:d5:13:f4:61:5b:4f:63:88:2e:
e3:23:83:df:38:80:49:62:58:26:0e:1d:57:7c:84:b1:03:04:
3b:b4:1e:f1:0c:85:06:29:26:1e:0b:6f:c2:f5:80:f1:eb:6f:
09:9c:03:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 07:39:24 2025 by rpki-client