Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363066623a3a2f34382d3438203d3e203136393039.roa
File: 326131343a373538343a363066623a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier: DOe/uPXf0VoVhRwlNy1Cx0IOCyfXrHJu/3zThNRRTsc=
Subject key identifier: 1B:FD:99:22:94:64:FA:F2:01:CB:36:2F:2F:5F:76:17:A9:F8:B6:B4
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 6834DD91380421E26675A77C2D4133F9231C6B40
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363066623a3a2f34382d3438203d3e203136393039.roa
Signing time: Wed 02 Apr 2025 18:45:45 +0000
ROA not before: Wed 02 Apr 2025 18:40:45 +0000
ROA not after: Wed 01 Apr 2026 18:45:45 +0000
asID: 16909
IP address blocks: 2a14:7584:60fb::/48 maxlen: 48
Validation: Failed, certificate revoked on Fri 11 Apr 2025 18:31:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
68:34:dd:91:38:04:21:e2:66:75:a7:7c:2d:41:33:f9:23:1c:6b:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: Apr 2 18:40:45 2025 GMT
Not After : Apr 1 18:45:45 2026 GMT
Subject: CN=1BFD99229464FAF201CB362F2F5F7617A9F8B6B4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:12:eb:83:16:4c:55:39:00:8c:9a:ac:59:a5:
83:fe:32:d4:e0:c4:c5:cb:b0:95:6d:a8:75:1b:b6:
a1:e3:56:f4:b0:45:81:14:33:f9:50:b4:02:c0:57:
ab:d2:7c:40:36:7e:e7:53:1f:6f:19:d1:cc:25:8b:
47:85:1d:6f:87:e6:b6:80:b5:69:58:5e:25:da:50:
3e:01:c0:08:46:ac:e1:20:b8:ca:1d:7e:93:4d:6d:
64:46:9c:47:ae:1c:46:53:73:1b:5f:e4:94:4e:d0:
74:d6:43:24:fe:df:c3:22:0a:30:4e:ac:dc:41:1b:
88:6d:6a:b6:a2:73:96:8c:0f:83:ea:61:66:ba:30:
72:7b:f4:7b:8a:15:e1:48:6a:d7:44:cc:b0:d4:f5:
5b:cd:f8:47:65:d1:62:d0:12:cb:db:71:72:8c:b1:
c4:7e:b6:9a:e3:f3:43:ab:95:bd:ea:44:2d:4d:a0:
ef:88:b0:3b:d4:aa:50:49:fe:1d:03:c8:7b:b6:9b:
8b:6d:86:4b:22:c8:43:12:c4:3a:59:a9:46:51:d8:
06:92:dc:0f:9d:f3:9d:2b:6f:f6:d3:2c:fd:b9:08:
f0:7c:ea:bb:df:51:81:fd:ca:35:5e:3a:e2:cb:b9:
fe:bb:77:21:b6:7b:06:d1:de:d0:1e:80:7e:e6:ab:
33:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:FD:99:22:94:64:FA:F2:01:CB:36:2F:2F:5F:76:17:A9:F8:B6:B4
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363066623a3a2f34382d3438203d3e203136393039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:60fb::/48
Signature Algorithm: sha256WithRSAEncryption
06:f2:fb:45:1a:25:eb:36:e5:e8:e0:5b:72:3e:e8:30:44:da:
f7:2e:07:f6:56:43:bb:2c:e7:7e:9d:8b:ed:ff:78:5e:84:1f:
e4:1f:6d:e8:0d:58:13:fb:64:96:7a:97:68:6c:66:75:4f:73:
b9:45:96:6d:97:2d:19:14:d2:62:6f:65:24:21:3e:ef:c9:42:
08:54:87:25:bc:60:1b:cc:cd:6a:e5:08:94:32:66:a8:6c:7d:
85:84:c0:17:bc:29:26:af:39:bd:78:98:2a:0a:3b:b2:cb:1f:
3f:69:64:00:83:1d:5d:20:b6:d1:e4:92:80:a5:af:ed:35:88:
50:2d:f0:35:34:df:da:19:3f:94:65:db:e9:6b:96:2a:c1:14:
b2:70:4c:83:e0:7f:df:c9:52:5f:ce:16:ab:76:29:58:8d:40:
bf:e7:ee:2e:69:31:88:eb:ec:3e:9c:4b:c1:05:7d:56:d2:8b:
45:0b:7c:d7:17:aa:14:2e:72:ce:71:17:6f:9a:a3:8a:de:61:
1a:94:10:e2:08:31:d5:04:95:0c:ac:d9:11:fc:0c:45:7a:6b:
5c:bf:9a:ce:89:79:ee:50:92:58:41:32:df:8e:55:3b:84:2b:
35:21:a2:73:25:0a:83:10:8b:b4:92:46:2b:0e:36:25:1f:e9:
ea:09:b6:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 23 23:52:57 2025 by rpki-client