Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363130623a3a2f34382d3438203d3e203136393039.roa
File: 326131343a373538343a363130623a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier: nv1Tkn+ioftTRWQoHq0bX8CSNxXNXAu6vpXOCBaFFCo=
Subject key identifier: A6:76:A4:88:70:D5:06:CB:1B:A3:21:EE:5B:15:EC:B0:36:46:69:72
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 5EB09B12BF4D4FC6E901FD69753A418C6027E17E
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363130623a3a2f34382d3438203d3e203136393039.roa
Signing time: Wed 02 Apr 2025 18:46:39 +0000
ROA not before: Wed 02 Apr 2025 18:41:39 +0000
ROA not after: Wed 01 Apr 2026 18:46:39 +0000
asID: 16909
IP address blocks: 2a14:7584:610b::/48 maxlen: 48
Validation: Failed, certificate revoked on Fri 11 Apr 2025 18:31:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5e:b0:9b:12:bf:4d:4f:c6:e9:01:fd:69:75:3a:41:8c:60:27:e1:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: Apr 2 18:41:39 2025 GMT
Not After : Apr 1 18:46:39 2026 GMT
Subject: CN=A676A48870D506CB1BA321EE5B15ECB036466972
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:1a:c3:10:76:48:54:1c:9c:47:b7:f4:56:51:
fd:bc:0f:b2:5c:df:7a:9e:09:72:8c:e6:9d:83:dc:
06:bd:2e:bb:f7:89:ba:13:d3:e1:c0:9a:eb:3f:24:
ce:d1:79:66:af:c7:db:b6:29:29:b4:5f:c6:8e:99:
7c:4f:f8:77:6d:e3:f5:d4:ac:e2:67:da:6f:55:0e:
dd:fc:9b:7e:df:62:dc:9e:7f:37:b1:39:14:de:24:
0e:cb:df:b4:ed:d2:06:d5:61:29:39:98:8c:d3:83:
52:64:97:63:e3:a5:3f:8b:a3:93:52:2f:fa:1d:ed:
3f:cf:4d:0e:77:94:2c:eb:a2:82:7b:7c:ab:3e:02:
b4:0b:88:bd:bc:3c:60:18:7b:0c:39:1b:c5:25:20:
eb:d8:9c:25:1e:b0:80:a0:c5:e7:f2:ca:68:48:16:
e2:6d:b1:85:9c:c9:8b:89:75:07:4e:22:97:56:77:
43:2c:9d:04:28:63:b4:ca:fe:57:13:6f:c7:29:4d:
da:74:52:bb:e8:d1:d0:e8:a0:8d:40:c1:17:fb:f8:
2b:57:70:fb:fa:98:8b:77:dd:0c:68:ed:f7:d2:98:
46:c9:42:55:44:b2:39:b4:48:82:9c:14:d3:53:56:
25:fb:61:bd:c8:54:a8:82:91:54:e6:dd:39:9c:46:
6b:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:76:A4:88:70:D5:06:CB:1B:A3:21:EE:5B:15:EC:B0:36:46:69:72
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363130623a3a2f34382d3438203d3e203136393039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:610b::/48
Signature Algorithm: sha256WithRSAEncryption
2a:5f:77:23:a2:9a:98:97:17:06:2d:9c:f6:d8:c0:f8:1c:2c:
2d:89:a5:c3:b4:28:3e:44:e4:1d:6e:c5:d2:05:c0:52:7b:f5:
10:a4:44:36:ce:a8:cb:1b:6b:ec:b9:9a:b8:8c:fc:43:3b:4e:
54:68:22:4a:e9:ff:c8:5a:c4:71:96:48:50:b6:0e:25:29:b4:
7f:59:c6:cd:31:f6:ee:ba:46:d7:6e:f5:28:07:3a:54:a5:3c:
a8:9d:b6:c2:ef:8d:63:37:83:eb:c1:d9:3c:55:81:b8:34:9a:
91:06:82:e6:9e:32:be:9a:75:e3:87:33:6a:24:cb:b3:61:c4:
fb:eb:9f:cb:37:49:0e:5a:bf:e1:77:04:3f:30:76:20:ca:cf:
00:c9:37:3c:94:22:56:80:23:6b:46:b2:c6:91:66:03:c2:f2:
9d:d4:b2:7b:61:64:fe:f9:fe:85:a5:7b:6d:3e:ea:2a:cc:68:
3c:28:03:a6:5b:23:2d:cc:7b:93:ca:30:77:25:80:36:6e:da:
5e:99:6d:f4:96:ba:5b:b5:2d:f5:7b:1b:a0:d9:73:8e:4d:87:
5a:11:3d:f1:a8:e3:82:3b:38:ac:6b:18:d2:a5:f8:09:0b:53:
28:42:e8:4f:3f:99:7a:bd:80:87:8e:21:e6:27:e7:b2:67:65:
f7:4c:be:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 23 23:53:38 2025 by rpki-client