Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a366530623a3a2f34382d3438203d3e203136393039.roa
File: 326131343a373538343a366530623a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier: dlXB3AQiNSXnfpzI+Y6Q6rwkGXUfK2Z21tn2vsUCY/o=
Subject key identifier: BB:8F:41:8C:D7:9A:E2:E3:05:D5:D5:E9:3F:FF:49:22:50:1F:08:F0
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 5C0A854C2A2AA00CCED1340B0FC4D39FCEF75702
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a366530623a3a2f34382d3438203d3e203136393039.roa
Signing time: Sat 24 May 2025 17:10:15 +0000
ROA not before: Sat 24 May 2025 17:05:15 +0000
ROA not after: Sat 23 May 2026 17:10:15 +0000
asID: 16909
IP address blocks: 2a14:7584:6e0b::/48 maxlen: 48
Validation: Failed, certificate revoked on Thu 29 May 2025 05:24:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5c:0a:85:4c:2a:2a:a0:0c:ce:d1:34:0b:0f:c4:d3:9f:ce:f7:57:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: May 24 17:05:15 2025 GMT
Not After : May 23 17:10:15 2026 GMT
Subject: CN=BB8F418CD79AE2E305D5D5E93FFF4922501F08F0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:b3:70:62:71:a6:ae:58:2e:6d:e8:69:36:c5:
c6:9c:9c:ae:47:2f:e7:b2:1a:58:38:19:1f:7b:93:
54:5f:a4:5a:9d:b5:93:09:0e:0b:1c:cc:a0:f4:cb:
4f:36:8f:51:ee:e3:11:af:23:30:17:3e:0b:a3:23:
45:6c:84:f5:85:53:24:3a:ef:98:16:d0:4e:93:28:
3a:93:40:e6:ac:c6:e1:0f:50:a4:49:79:66:85:f3:
ea:c1:59:a5:62:e1:b6:46:fa:5e:49:cd:1e:e6:61:
44:b8:e8:17:7d:e2:da:e5:5c:8b:73:92:54:9e:02:
ec:19:5e:e4:71:52:75:03:20:34:1b:8c:b8:3d:6f:
69:d3:a2:d4:d2:3e:c4:ae:df:81:ad:e4:ec:27:eb:
c1:a8:fa:75:a8:56:d3:cf:61:ac:3d:12:46:d1:56:
ac:ed:6e:dd:4d:20:32:4a:b7:c7:93:bf:6a:36:a6:
21:a4:9d:19:8d:79:76:de:87:70:22:3c:11:e2:ec:
e6:90:b1:d8:d2:04:f8:d3:ef:bf:f0:df:74:bd:da:
60:03:b0:dd:1b:ff:bd:dc:7a:62:82:7e:e9:31:3e:
d5:39:44:e4:15:d6:30:2a:cd:a8:db:82:d0:9a:d9:
ed:7b:13:42:2f:0d:6b:5d:1b:84:f2:70:56:ee:e9:
47:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:8F:41:8C:D7:9A:E2:E3:05:D5:D5:E9:3F:FF:49:22:50:1F:08:F0
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a366530623a3a2f34382d3438203d3e203136393039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:6e0b::/48
Signature Algorithm: sha256WithRSAEncryption
1c:b8:6c:23:be:7e:23:c6:cc:6d:2f:16:f7:37:32:11:93:9e:
c9:4c:93:cf:5d:56:eb:90:6c:3c:47:16:7b:c7:e2:41:48:b1:
38:20:3c:d0:6d:92:a8:2e:d5:e3:8f:c7:46:c7:a5:0e:03:69:
35:88:11:15:e9:4e:2b:3f:50:23:c9:7b:d3:29:c9:40:ae:52:
a7:c7:7d:f2:78:4b:09:29:46:9e:7f:d4:06:90:90:2b:3c:23:
2f:ac:a8:38:31:24:ec:77:6b:4c:0c:88:48:6b:30:bf:af:e5:
e4:5d:78:de:86:fa:4b:da:aa:ca:32:52:60:9a:a7:c5:f8:04:
cb:d3:69:18:9f:16:87:e4:68:cf:35:cc:3a:d0:87:4a:1b:ca:
ec:f5:f4:06:aa:04:5d:83:3c:67:bf:aa:4f:90:fc:1f:8d:7d:
5a:19:12:8c:f8:ca:15:e6:02:1b:92:9a:5d:5e:00:a3:a3:cc:
bd:ec:b3:18:d5:97:23:6b:ac:58:cb:c3:4e:80:d1:79:63:13:
81:de:5d:98:57:81:e9:6c:90:0d:c8:5c:75:41:f3:d7:22:a3:
b2:59:51:b4:20:c1:01:85:c1:83:ed:3b:a7:43:33:bf:9c:c2:
ac:99:f8:d3:00:c4:dc:db:c8:30:15:4f:d2:3c:75:07:32:11:
13:00:56:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 06:08:43 2025 by rpki-client