Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a366631633a3a2f34382d3438203d3e203136393039.roa
File: 326131343a373538343a366631633a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier: 66upb6CSEJ4Gs71PqxB3RYDHCbYK8B5DXIedwycb0eY=
Subject key identifier: B3:B0:1E:CC:27:46:FA:9E:BC:6C:D0:A0:3A:BB:66:15:E3:99:C3:4C
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 53C9F5600D4F2535E086D629E19B3975E5C32419
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a366631633a3a2f34382d3438203d3e203136393039.roa
Signing time: Tue 27 May 2025 22:00:03 +0000
ROA not before: Tue 27 May 2025 21:55:03 +0000
ROA not after: Tue 26 May 2026 22:00:03 +0000
asID: 16909
IP address blocks: 2a14:7584:6f1c::/48 maxlen: 48
Validation: Failed, certificate revoked on Fri 30 May 2025 07:43:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
53:c9:f5:60:0d:4f:25:35:e0:86:d6:29:e1:9b:39:75:e5:c3:24:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: May 27 21:55:03 2025 GMT
Not After : May 26 22:00:03 2026 GMT
Subject: CN=B3B01ECC2746FA9EBC6CD0A03ABB6615E399C34C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:eb:26:74:7a:6c:77:fc:60:27:f5:e6:69:39:
60:59:f2:92:a1:d8:2e:fd:1f:f9:d7:53:f1:32:3d:
6f:93:0a:86:14:9d:b7:12:16:ee:91:e2:87:d3:c3:
ad:11:97:cc:24:71:a0:0a:fc:02:3e:d4:a9:bc:40:
74:e6:da:fd:4c:38:4f:54:9a:dc:14:b2:6b:42:94:
79:b3:13:4e:81:94:d6:6c:36:a4:3e:8d:f3:3f:b3:
d2:dc:72:a1:6c:cf:19:22:33:78:09:c3:2c:38:2c:
0c:3e:8e:2c:d0:ba:df:8e:32:cb:6d:3f:11:d9:a4:
12:22:89:07:f5:12:5b:21:8d:ca:9d:ed:78:cf:fa:
9d:50:4b:0e:f7:85:10:fa:44:9c:01:1f:bd:91:97:
39:14:d9:7a:4d:e5:74:1b:5d:6c:ba:07:5c:22:22:
09:80:09:dd:a1:f5:1d:92:5e:7a:e0:f1:9e:ff:a1:
fc:aa:92:49:3b:63:29:d5:d3:32:ab:ad:70:41:69:
b5:33:0b:33:c3:46:09:88:5d:4e:78:39:d4:8d:08:
3d:07:1f:cd:77:55:6e:09:75:17:1b:32:50:0a:d9:
e6:da:47:73:cc:16:23:c8:1f:1a:2c:8c:d7:64:c5:
6a:ec:d6:46:90:c4:ef:90:58:e7:0e:c7:71:c0:52:
49:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:B0:1E:CC:27:46:FA:9E:BC:6C:D0:A0:3A:BB:66:15:E3:99:C3:4C
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a366631633a3a2f34382d3438203d3e203136393039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:6f1c::/48
Signature Algorithm: sha256WithRSAEncryption
55:eb:df:62:71:50:09:13:48:fa:c1:5f:3d:fb:cd:7f:35:74:
22:ff:74:53:a8:32:bd:03:19:b8:4e:42:c7:9f:8f:38:5b:f4:
b5:4f:71:fd:e7:00:76:fd:5d:a3:39:f9:43:34:33:70:6d:51:
a8:e5:73:0f:f9:79:79:31:18:2a:7d:f7:b7:b1:01:b5:d5:dd:
38:c3:25:2b:71:35:6b:4b:7d:99:0d:bf:3d:07:d7:62:f9:ab:
fb:2b:3e:fa:50:d1:06:ca:60:b3:2f:a9:90:2b:c0:59:a1:a9:
92:7f:b9:6c:60:87:ac:60:ad:66:74:e8:03:e9:a9:2e:1a:21:
f4:aa:1c:af:be:be:96:df:21:cd:ff:c2:c2:b5:64:77:5f:35:
c7:bd:bb:0a:27:5a:dc:0f:56:ed:ab:9b:a0:fe:a7:4c:7a:b1:
fd:6f:ab:85:e5:7d:a5:9b:fc:16:43:64:d8:e3:b6:6e:1b:9c:
74:4c:b4:79:c0:a7:23:a8:56:e2:2f:4c:89:a7:ef:23:a5:a0:
36:df:f4:32:89:3e:88:81:4e:cd:04:e8:23:c8:ee:ce:7a:33:
5a:b2:74:44:52:63:19:aa:08:db:07:79:4a:fd:db:01:b7:33:
c7:91:2a:10:16:9b:3c:1b:75:80:73:97:29:e5:f1:72:00:6a:
ab:18:e9:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 07:44:01 2025 by rpki-client