Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a366439323a3a2f34382d3438203d3e203136393039.roa
File: 326131343a373538343a366439323a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier: 1SIzPFk5/BLTJmaSY+I4onS0fZA6arXynbD8560BiB4=
Subject key identifier: CA:31:A0:82:99:2D:BE:06:D4:48:3E:D5:3F:4A:CD:60:60:3B:2E:DD
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 19E84D95407B916FA6B1A59D148D412BC5F5732E
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a366439323a3a2f34382d3438203d3e203136393039.roa
Signing time: Thu 29 May 2025 10:36:02 +0000
ROA not before: Thu 29 May 2025 10:31:02 +0000
ROA not after: Thu 28 May 2026 10:36:02 +0000
asID: 16909
IP address blocks: 2a14:7584:6d92::/48 maxlen: 48
Validation: Failed, certificate revoked on Sat 31 May 2025 17:16:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
19:e8:4d:95:40:7b:91:6f:a6:b1:a5:9d:14:8d:41:2b:c5:f5:73:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: May 29 10:31:02 2025 GMT
Not After : May 28 10:36:02 2026 GMT
Subject: CN=CA31A082992DBE06D4483ED53F4ACD60603B2EDD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:64:a7:5f:e4:74:2b:06:cc:b2:d4:09:6b:7b:
0b:04:26:02:c7:a3:77:c7:01:a5:ae:18:d3:75:9d:
4f:98:97:cb:86:e1:e8:21:4a:30:06:f7:d0:2e:20:
aa:71:75:7f:9b:0f:44:93:ec:ef:36:5a:b1:b1:e8:
eb:79:ae:1d:8b:d6:13:c0:b5:92:fc:b1:e7:85:bd:
7b:66:ff:da:40:a8:f6:10:f0:07:d0:f0:73:ef:f9:
d9:25:6f:9f:92:9b:e2:67:d0:dd:fa:71:b6:46:c5:
7b:48:fa:42:06:af:c1:cc:dd:c4:2c:fb:ff:55:32:
6b:7f:74:c7:18:30:7d:be:0b:bc:ef:af:be:62:d9:
3e:b5:05:19:d8:3e:96:9b:b3:38:ce:1f:a8:e8:91:
c4:0c:2a:e4:28:18:10:45:8b:4c:62:26:28:42:63:
8e:3e:3e:16:72:54:91:92:20:fe:6c:17:fe:8d:3e:
9d:92:44:47:f5:0c:1b:0f:ad:34:9d:57:f0:1b:b5:
44:03:00:08:75:46:e1:6d:e4:fb:4c:43:a3:e1:c0:
06:a0:29:72:d9:bd:99:d4:c9:03:b4:1f:7a:de:76:
ca:53:11:1a:65:90:1e:38:9d:7c:36:10:34:de:cb:
2b:a2:fb:c6:d6:e0:6d:55:9e:62:81:fe:f8:2e:a3:
b5:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:31:A0:82:99:2D:BE:06:D4:48:3E:D5:3F:4A:CD:60:60:3B:2E:DD
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a366439323a3a2f34382d3438203d3e203136393039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:6d92::/48
Signature Algorithm: sha256WithRSAEncryption
9a:52:c9:0b:cf:77:22:b5:5e:d8:82:77:ef:d3:24:53:7f:74:
06:17:53:7b:ce:32:7a:da:c4:36:67:3e:44:13:96:69:02:68:
57:e3:fc:91:a0:78:e5:c8:2d:55:34:86:f5:0e:59:76:4d:62:
53:9e:60:f1:3a:25:c7:f0:89:53:90:3e:9a:0d:28:1d:2b:4b:
bf:0e:c0:24:70:92:38:b1:2d:c0:c5:51:4a:e8:3a:d9:b1:05:
61:88:f0:f9:0f:77:97:17:98:57:0a:d8:10:8e:44:f4:d7:2d:
27:1b:4e:28:ec:ed:2d:bc:dc:8e:46:7d:52:53:de:f1:b4:94:
3e:a5:75:12:de:fc:60:37:bc:88:0b:d5:cd:87:ac:3e:b6:f6:
6f:28:2e:29:11:4f:4a:27:11:f6:03:4f:e3:64:42:38:27:99:
ac:65:1f:6b:ca:b8:46:82:47:e0:49:f8:2a:42:f6:0f:51:4c:
2e:87:51:83:eb:ed:21:6d:77:61:5d:52:44:04:cc:e7:f2:f8:
98:c9:f8:b2:fc:ff:31:e8:29:79:0f:e2:2f:2f:8e:d5:35:6b:
b0:f4:76:76:f0:de:b2:96:94:9f:c8:06:b3:c9:5c:88:76:97:
35:f3:f3:10:3a:b6:b3:6c:2b:87:3f:04:f8:19:de:12:c9:ee:
d6:d7:74:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 03:01:48 2025 by rpki-client