Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363066393a3a2f34382d3438203d3e203136393039.roa
File: 326131343a373538343a363066393a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier: F/pVsmfsw+ybhqahlypP7dbxfa5c4jy5cUPfrDQmt8o=
Subject key identifier: D7:13:6E:2A:10:B7:BD:A4:CC:E1:B4:E6:0F:AB:3C:5A:EC:4F:36:C9
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 6837642B409F192C2D534F3F8EE130D4F5D6E098
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363066393a3a2f34382d3438203d3e203136393039.roa
Signing time: Wed 02 Apr 2025 18:45:43 +0000
ROA not before: Wed 02 Apr 2025 18:40:43 +0000
ROA not after: Wed 01 Apr 2026 18:45:43 +0000
asID: 16909
IP address blocks: 2a14:7584:60f9::/48 maxlen: 48
Validation: Failed, certificate revoked on Fri 11 Apr 2025 18:31:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
68:37:64:2b:40:9f:19:2c:2d:53:4f:3f:8e:e1:30:d4:f5:d6:e0:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: Apr 2 18:40:43 2025 GMT
Not After : Apr 1 18:45:43 2026 GMT
Subject: CN=D7136E2A10B7BDA4CCE1B4E60FAB3C5AEC4F36C9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:07:99:8f:e8:c4:0c:e9:6b:9f:9f:9c:74:ac:
e0:1c:b4:2b:f5:23:31:35:81:12:58:5b:94:29:a1:
a2:46:6c:8e:80:74:fc:40:a4:81:63:ee:5a:ae:4a:
08:db:f4:75:1b:c5:8d:20:96:de:82:37:ae:2f:af:
07:af:2c:f9:4b:42:64:f7:4f:50:37:a2:45:30:fd:
ea:eb:11:ca:b1:24:df:0f:e3:85:41:c8:d4:91:e1:
79:12:42:66:c6:d6:cb:e0:ec:72:a0:84:0f:59:d5:
0e:00:91:c2:36:35:78:f2:ae:50:27:37:98:60:b4:
59:5a:83:b7:55:de:31:5e:62:7e:fb:81:6c:c6:ef:
b5:b8:22:d0:47:68:ae:3f:aa:b6:5a:39:ea:fa:25:
99:1d:7a:66:e8:4d:85:88:86:6d:bf:80:70:52:0b:
61:9c:e3:8b:48:65:69:20:47:81:a3:b4:27:d8:54:
d1:f3:7b:a8:f7:93:f7:91:60:6c:1f:d6:06:94:7a:
c1:c3:11:59:c4:cf:00:13:f8:e0:7d:57:0a:84:cf:
11:50:f1:e5:27:50:8a:6e:a9:70:fb:be:ec:6e:c5:
c5:2f:3e:6d:68:4c:be:4f:8e:65:f8:1e:f1:bf:db:
45:d9:1c:c7:9e:a6:01:54:5f:1f:19:40:54:3b:7f:
5a:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:13:6E:2A:10:B7:BD:A4:CC:E1:B4:E6:0F:AB:3C:5A:EC:4F:36:C9
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363066393a3a2f34382d3438203d3e203136393039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:60f9::/48
Signature Algorithm: sha256WithRSAEncryption
b9:a3:4f:ae:9c:e6:49:00:1d:01:37:c2:25:a4:48:84:f2:66:
f6:5a:8b:d2:39:dd:32:90:77:5f:f0:9d:03:40:fd:b7:b0:96:
7b:4e:47:0a:80:ca:8f:e5:60:cf:e4:36:70:c3:19:26:1d:c3:
7b:0a:4c:6d:26:0f:95:4c:0f:d1:c5:2f:a1:9e:9d:d5:5d:95:
c8:ad:f7:68:8c:b6:98:52:a0:ec:ac:3d:2d:be:fa:16:d5:a6:
36:2a:6b:d7:6e:28:36:72:08:d1:8a:15:ab:21:84:f5:39:50:
39:60:1f:17:b9:04:a7:7b:45:d1:c4:c7:ca:7f:0e:96:2d:10:
35:3e:f0:a4:52:65:bf:96:fd:19:c0:da:2d:58:7f:74:fd:33:
37:aa:80:a9:74:f7:42:24:37:dd:96:6d:01:f0:ec:34:f5:d4:
7d:06:66:9a:a4:b6:1f:f2:fe:ff:ed:6f:49:f6:ee:fd:9d:d9:
8e:17:52:5c:20:62:3a:0a:1a:da:d2:04:6c:83:ff:85:41:0d:
56:42:a9:7b:e1:01:85:36:f2:05:db:98:77:d5:20:ea:93:d3:
9a:2b:ff:65:ae:c4:54:f6:5d:47:d6:1c:9b:d2:8d:90:57:de:
f2:44:2c:a6:a1:bd:e5:72:fe:7d:bb:b5:27:9b:31:7a:e4:e6:
76:7f:29:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 25 01:03:26 2025 by rpki-client