Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a366435643a3a2f34382d3438203d3e203136393039.roa
File: 326131343a373538343a366435643a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier: vaOecNSzEtUH2DvzjR/x5adfngxVfleAhkxhcDLzx54=
Subject key identifier: 4E:E7:26:35:EF:5F:1A:FB:4E:8C:41:9C:4A:75:8E:41:3B:80:7A:03
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 324C8F1C4038906A97F307F64790874CE34FB312
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a366435643a3a2f34382d3438203d3e203136393039.roa
Signing time: Sat 24 May 2025 17:00:02 +0000
ROA not before: Sat 24 May 2025 16:55:02 +0000
ROA not after: Sat 23 May 2026 17:00:02 +0000
asID: 16909
IP address blocks: 2a14:7584:6d5d::/48 maxlen: 48
Validation: Failed, certificate revoked on Thu 29 May 2025 05:23:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
32:4c:8f:1c:40:38:90:6a:97:f3:07:f6:47:90:87:4c:e3:4f:b3:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: May 24 16:55:02 2025 GMT
Not After : May 23 17:00:02 2026 GMT
Subject: CN=4EE72635EF5F1AFB4E8C419C4A758E413B807A03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:0d:ee:cf:3c:93:cd:8c:d6:60:61:e0:e4:16:
04:14:17:c6:73:3e:6b:95:78:ff:77:bd:a4:10:41:
29:6c:a6:1e:c8:89:67:ae:8d:32:8b:3d:de:d1:85:
af:50:fc:eb:82:9c:06:19:f4:1f:61:c1:03:b9:d9:
9d:bb:7d:be:2d:5c:67:41:a7:d2:cd:e8:68:0f:26:
7c:c8:88:af:11:67:fd:99:25:5c:1e:36:30:09:2b:
33:29:cb:88:00:59:25:68:4d:b5:eb:38:46:22:ac:
9c:42:47:a0:7d:89:d3:ec:9a:00:0a:fa:3d:6f:25:
0c:d2:e8:3a:63:66:3e:67:35:ae:9f:60:cd:64:c8:
d1:5a:81:7a:ec:9d:d8:ac:b6:ee:cc:d8:96:0a:bb:
0a:b3:ec:05:c1:39:f8:20:eb:d8:0f:25:46:04:cb:
9b:8c:f1:ee:1b:cd:9c:05:56:5b:56:a4:75:c5:69:
a8:fe:a0:32:ad:1b:fb:28:02:e6:04:ac:65:c4:b0:
f5:4e:6a:52:d6:d8:82:39:77:c7:30:d1:be:60:94:
03:4b:58:ea:ff:ea:2c:b7:99:24:6f:fb:22:0e:fc:
43:c8:4a:72:13:1f:c2:88:38:fd:6d:21:79:41:10:
26:b6:0a:95:88:47:ed:2a:71:8b:65:88:0b:5a:06:
f5:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:E7:26:35:EF:5F:1A:FB:4E:8C:41:9C:4A:75:8E:41:3B:80:7A:03
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a366435643a3a2f34382d3438203d3e203136393039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:6d5d::/48
Signature Algorithm: sha256WithRSAEncryption
8f:cd:f5:f6:df:4b:f3:7f:d8:e6:16:2a:30:e3:50:d5:93:26:
ef:3d:12:d6:ee:c2:fb:e8:0a:df:3e:b9:ec:87:c0:58:b2:43:
56:f6:40:f3:e2:ad:4b:d9:0e:f7:a0:2e:b0:cf:4e:6a:60:ae:
dd:0c:1d:7d:f0:a7:4a:d9:14:27:6d:f1:e0:7b:c8:44:1e:c1:
e6:f1:08:17:94:50:33:11:9c:a8:3b:4c:20:1b:aa:fa:83:ca:
51:a5:ae:5a:85:a6:15:c2:f1:ad:e9:7f:31:79:86:6c:4a:eb:
77:7a:8d:5d:24:c1:b3:98:cf:18:97:d8:72:0e:c0:7a:cf:2b:
ec:29:93:84:6e:f4:60:66:76:20:c8:af:b2:15:04:31:09:7f:
bf:4f:22:07:a3:7f:d7:f5:43:a6:5d:f5:4c:f1:d0:bc:5b:33:
9c:a8:49:5b:1c:ea:5b:d4:10:37:64:42:b9:33:98:c6:62:a8:
f9:a9:06:2e:08:68:09:6d:a3:d4:3c:94:95:af:aa:e2:39:2b:
1c:56:20:26:a1:86:3e:87:68:8e:c8:77:35:95:0b:ee:16:61:
e5:4e:82:87:0d:32:90:1b:47:e6:8f:d3:ae:39:e4:b7:ba:8b:
c0:34:55:25:11:b5:32:1c:01:07:65:db:c6:46:b3:0f:e6:da:
58:64:c7:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 23:31:57 2025 by rpki-client