Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a366437663a3a2f34382d3438203d3e203136393039.roa
File: 326131343a373538343a366437663a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier: K3j/FSdoBs3H//St4xJGkOwicj9AEvL2mdnDPx/uJ10=
Subject key identifier: 5C:09:BD:5D:5F:8D:67:15:0F:B0:B7:ED:6F:9E:EC:30:A7:92:B9:14
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 2F5E660FBF54188ACFDBDC1552E4F7200A68B359
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a366437663a3a2f34382d3438203d3e203136393039.roa
Signing time: Fri 23 May 2025 20:51:02 +0000
ROA not before: Fri 23 May 2025 20:46:02 +0000
ROA not after: Fri 22 May 2026 20:51:02 +0000
asID: 16909
IP address blocks: 2a14:7584:6d7f::/48 maxlen: 48
Validation: Failed, certificate revoked on Sat 24 May 2025 17:06:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2f:5e:66:0f:bf:54:18:8a:cf:db:dc:15:52:e4:f7:20:0a:68:b3:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: May 23 20:46:02 2025 GMT
Not After : May 22 20:51:02 2026 GMT
Subject: CN=5C09BD5D5F8D67150FB0B7ED6F9EEC30A792B914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:aa:6b:d2:3c:be:5a:dd:74:f3:82:f3:b0:55:
94:33:7e:d2:01:a4:ba:df:5c:f8:78:d0:fc:28:54:
9c:8e:68:c5:67:f0:60:96:60:dd:29:8b:a6:c4:56:
c5:89:43:29:89:89:19:ac:60:ca:45:be:13:9c:9f:
89:41:83:67:7d:47:47:d1:6e:fa:b0:7f:94:57:4e:
b0:9a:f6:b8:49:47:5a:60:ce:3e:16:0c:b2:04:b1:
e9:88:53:3a:b3:89:66:67:4a:23:7e:f8:56:59:1d:
78:15:01:7f:f1:f6:dc:df:af:74:ac:24:d7:d5:f3:
6e:fd:b0:73:ee:57:68:dd:45:4f:6c:6b:18:33:5c:
01:2e:a9:e3:50:e9:95:c2:aa:a3:cc:07:9d:5a:d9:
67:aa:70:cb:d6:20:b6:0c:27:0a:0b:c2:40:88:fc:
8e:74:5c:8f:67:8f:c5:a0:57:ac:46:3e:e8:1b:cf:
20:4d:01:44:16:77:38:60:08:d4:aa:ef:b9:f7:11:
f1:8e:21:bf:37:eb:15:09:20:1c:64:9b:05:58:75:
01:d5:32:d4:3a:c6:1c:59:69:81:b9:d9:16:13:6e:
61:9b:37:f4:2d:56:dc:53:8b:d4:2f:03:6d:45:ae:
47:fc:ca:ea:76:42:75:2e:45:40:d1:04:4f:06:f3:
a5:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:09:BD:5D:5F:8D:67:15:0F:B0:B7:ED:6F:9E:EC:30:A7:92:B9:14
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a366437663a3a2f34382d3438203d3e203136393039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:6d7f::/48
Signature Algorithm: sha256WithRSAEncryption
4f:dc:d7:5f:f7:df:aa:56:3e:1e:58:0e:e8:54:3a:5b:1f:1a:
58:82:d9:95:4f:b9:ee:06:f9:87:4c:d9:d0:93:a7:3b:ce:dc:
c7:1b:1a:57:e5:50:db:e4:59:aa:ca:41:50:b0:43:dd:02:25:
e8:86:5d:eb:1c:07:7f:6e:62:b7:16:2f:f2:6f:6c:3a:9e:2a:
26:56:20:92:c3:0d:a0:88:59:51:58:83:5a:cd:f0:a6:4b:67:
ec:0b:93:87:f5:36:05:93:13:2c:4b:e7:aa:87:b6:3e:e4:b1:
5c:ff:f8:81:a4:13:e1:30:1a:5d:f8:3f:3c:bf:a6:45:19:c6:
91:c3:22:a7:dd:a4:4b:fd:47:3e:da:19:99:d4:0e:a1:91:d8:
55:df:3d:4e:ac:da:c2:c4:35:23:9a:32:23:72:81:aa:da:5c:
71:d2:dd:92:d4:6d:36:11:c3:6c:9e:82:ee:aa:31:5a:31:c2:
01:91:3c:ad:ed:22:cf:97:b7:96:07:f7:7b:6d:2b:7e:e9:63:
fc:70:e2:a1:e5:f3:2d:b2:07:93:2d:e5:87:3b:7e:bc:f0:b1:
20:d1:61:e8:38:9b:74:d6:b4:75:16:95:77:1c:c6:c2:2e:a9:
04:20:57:0f:18:1f:f3:29:ff:05:af:68:10:ad:c2:e1:d9:41:
60:f9:51:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 06:05:17 2025 by rpki-client