Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363065613a3a2f34382d3438203d3e203136393039.roa
File: 326131343a373538343a363065613a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier: U7INsUCOr5zLv62e3Em+jdMgqJs1X2g0ncxKi/iHeWs=
Subject key identifier: E5:4B:25:58:D9:3B:95:F9:B4:9D:4A:02:3A:F0:0A:A5:4F:A5:87:5C
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 4BEE636F28A2AECD43075A57E11A04A64819A8A5
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363065613a3a2f34382d3438203d3e203136393039.roa
Signing time: Wed 26 Mar 2025 14:22:08 +0000
ROA not before: Wed 26 Mar 2025 14:17:08 +0000
ROA not after: Wed 25 Mar 2026 14:22:08 +0000
asID: 16909
IP address blocks: 2a14:7584:60ea::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 02 Apr 2025 18:44:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4b:ee:63:6f:28:a2:ae:cd:43:07:5a:57:e1:1a:04:a6:48:19:a8:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: Mar 26 14:17:08 2025 GMT
Not After : Mar 25 14:22:08 2026 GMT
Subject: CN=E54B2558D93B95F9B49D4A023AF00AA54FA5875C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:34:4e:d8:46:6a:18:10:b8:7c:01:a4:1a:c4:
68:8a:de:6e:20:cf:ff:e1:6a:64:ab:c8:ee:92:c7:
81:b2:f5:09:20:bc:01:49:58:e6:a8:a1:e4:95:28:
fb:02:68:72:9c:e4:3c:d4:bb:38:78:94:14:01:d1:
6c:03:aa:91:0c:72:23:83:2a:8d:91:f8:28:ac:d4:
86:bd:b1:20:c5:ed:8c:d4:f8:78:4c:ad:37:e8:7b:
e3:00:02:fa:a1:d7:53:27:0c:35:7d:12:89:0f:74:
d2:6e:e5:e2:71:b8:73:69:64:01:57:7f:89:52:27:
bd:bf:8b:7b:0a:5b:3c:38:92:bb:17:f8:60:71:cf:
3c:8f:75:f0:2e:e3:5d:fc:74:96:10:a8:5d:72:1b:
e3:fc:8c:15:7b:7f:e1:f8:ee:cc:6b:a1:c3:91:5f:
6a:bd:2a:3f:05:39:67:4e:62:35:65:e1:5b:c9:bf:
40:00:16:95:48:6b:2f:1a:25:94:96:7b:30:c2:d3:
d1:40:e9:0d:ff:6d:ba:5d:ec:68:4d:78:f6:8f:87:
bb:39:da:90:08:2f:35:c8:a8:a2:30:88:ec:1e:9a:
1d:5b:9c:bb:2b:57:74:d3:ab:63:6d:22:b4:b3:55:
b6:21:2c:a7:61:15:39:be:de:f6:f2:14:44:12:ba:
11:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:4B:25:58:D9:3B:95:F9:B4:9D:4A:02:3A:F0:0A:A5:4F:A5:87:5C
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363065613a3a2f34382d3438203d3e203136393039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:60ea::/48
Signature Algorithm: sha256WithRSAEncryption
52:09:e4:fb:18:3e:69:51:f7:9b:50:41:56:14:bb:9b:4d:6e:
d4:29:09:5d:06:55:9b:50:a5:10:d8:ee:03:ed:3f:63:8e:d2:
70:94:f5:78:eb:71:99:5c:54:b3:1e:f3:07:16:4f:45:d3:f7:
6d:1a:56:50:a5:1d:cb:1c:7e:c0:ec:ae:72:ed:2d:ba:5d:14:
12:27:24:38:29:25:70:6a:6d:4d:2e:85:8e:7e:8d:dd:24:42:
e9:9c:15:b4:bf:8e:e2:1c:ec:98:19:6d:44:02:b7:8c:2c:39:
5b:5d:ad:90:1e:ba:c1:04:30:11:18:62:98:2b:eb:f0:97:27:
c6:73:aa:5a:e9:ee:fe:4c:4b:2a:de:01:0e:58:b2:21:54:5d:
f7:90:61:b4:04:d4:2c:3e:6a:02:a8:83:08:77:c5:1c:09:7e:
1d:8a:57:81:c8:08:0e:89:6d:15:b7:15:46:32:6c:0d:22:24:
8a:a5:76:a2:14:9c:2f:8e:78:7c:49:a1:60:a4:99:44:1d:48:
00:9e:81:10:a2:5f:f7:59:30:1b:aa:2b:30:d3:f6:b6:b6:62:
81:ec:f8:83:f6:b2:dc:82:44:f3:81:3e:91:dd:0d:86:b9:a4:
f8:6a:4a:2d:36:54:6a:fd:a6:27:44:bf:f1:91:97:0c:b0:ae:
90:7b:b8:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 08:58:43 2025 by rpki-client