Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363065653a3a2f34382d3438203d3e203136393039.roa
File: 326131343a373538343a363065653a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier: VPQ1n6kAJvbzJVC2V/rvGTOywzNfZ38Aj+JuHSEmU6g=
Subject key identifier: 6C:31:C0:17:B1:61:5A:1D:95:1E:93:7A:F5:7C:67:EC:2A:C3:95:1D
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 149D339B0ACC296C2ADF57237B10CD4C73C81841
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363065653a3a2f34382d3438203d3e203136393039.roa
Signing time: Wed 02 Apr 2025 18:45:21 +0000
ROA not before: Wed 02 Apr 2025 18:40:21 +0000
ROA not after: Wed 01 Apr 2026 18:45:21 +0000
asID: 16909
IP address blocks: 2a14:7584:60ee::/48 maxlen: 48
Validation: Failed, certificate revoked on Fri 11 Apr 2025 18:31:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
14:9d:33:9b:0a:cc:29:6c:2a:df:57:23:7b:10:cd:4c:73:c8:18:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: Apr 2 18:40:21 2025 GMT
Not After : Apr 1 18:45:21 2026 GMT
Subject: CN=6C31C017B1615A1D951E937AF57C67EC2AC3951D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:f9:73:d9:7b:ab:05:ec:0f:83:35:13:02:f5:
f9:98:51:5d:ee:0e:51:e8:01:58:59:4a:7f:d1:df:
09:6f:81:db:a1:10:11:0e:6a:60:67:5a:d3:df:b5:
a0:fa:d0:3b:ed:3c:56:5a:87:84:53:8d:37:5e:1e:
97:e6:e2:66:69:a2:b9:c6:c2:04:a6:15:ee:02:1f:
6c:05:10:94:7b:70:5d:54:c1:bc:e1:fb:9e:26:7c:
27:33:b5:1f:33:c3:99:94:d5:fd:22:e1:7a:ca:fd:
e2:c1:75:df:76:d9:61:d7:48:d2:2b:2f:33:2e:57:
bd:6e:8d:61:45:5b:6a:a8:14:dd:72:22:c9:b2:ad:
c6:31:73:4d:e5:93:e3:c3:3e:56:e4:cb:1f:e5:32:
db:ac:27:aa:79:18:0f:b7:03:ff:34:30:73:89:2e:
1b:5b:8f:bf:3a:49:9f:e8:45:59:1a:78:4e:1a:e2:
87:e0:15:68:31:e7:b7:c3:da:3d:d6:1e:53:89:f1:
08:87:09:98:bc:1a:6c:cd:72:da:61:6c:51:91:7a:
b5:dd:8b:9c:83:eb:16:b5:a0:51:ab:d2:c4:8f:17:
dc:72:be:fe:2f:f5:57:7a:d9:56:9e:dd:5a:e7:34:
da:0b:8f:3e:7b:01:2c:9a:17:60:1f:e3:0b:a3:d6:
ab:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:31:C0:17:B1:61:5A:1D:95:1E:93:7A:F5:7C:67:EC:2A:C3:95:1D
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363065653a3a2f34382d3438203d3e203136393039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:60ee::/48
Signature Algorithm: sha256WithRSAEncryption
b2:42:22:08:59:7d:5c:bc:02:21:93:57:77:c4:74:31:92:34:
08:ef:77:ed:35:5b:b6:0d:83:5d:a6:30:d9:15:e1:2f:8f:e9:
b1:cc:05:48:25:27:a3:6d:9b:fd:ab:b2:40:77:4a:23:3f:a0:
19:76:2f:a5:f7:84:b0:11:89:25:71:e2:78:62:57:71:dc:cd:
5a:00:74:ec:f1:69:40:0f:db:42:67:da:8c:fd:06:b0:f9:cb:
f8:48:ee:51:99:aa:34:a6:86:cc:24:96:f0:63:42:15:4b:83:
0a:74:1e:aa:90:04:08:e4:ee:55:6c:de:72:92:1d:ee:b1:8c:
16:0d:a7:59:20:f5:4f:47:9c:71:6f:34:2c:71:b3:55:1d:9c:
ac:b3:7d:01:82:0e:75:70:cd:cb:6d:25:36:42:18:14:6e:29:
a8:0f:6a:c0:7e:4b:ab:81:ab:bd:76:b0:82:c9:11:70:fb:ec:
6e:fc:5f:c3:72:2b:5b:e1:cd:f4:d5:39:3d:59:36:cf:9b:f1:
e2:8a:b7:32:a0:4a:ff:bc:8e:6c:f3:13:bf:13:74:46:36:94:
32:54:ec:f2:a5:6a:e3:32:5e:17:b2:dd:c1:a4:48:65:a2:e0:
7a:ee:63:20:8d:15:64:a1:ac:f2:51:ea:4b:99:28:b4:e8:ac:
81:2e:9c:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 23 23:51:58 2025 by rpki-client