Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363236613a3a2f34382d3438203d3e203136393039.roa
File: 326131343a373538343a363236613a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier: 9ljUqJz0GCldfyZaFmUaS6CRK6V4ly5xzpJcz5rCviY=
Subject key identifier: F0:D1:FD:46:C8:DC:AB:69:A0:41:98:D3:2C:A5:E1:E0:8B:43:B6:0B
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 3211656A0201DD32A5D390699B5B104085C8737D
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363236613a3a2f34382d3438203d3e203136393039.roa
Signing time: Tue 13 May 2025 15:54:02 +0000
ROA not before: Tue 13 May 2025 15:49:02 +0000
ROA not after: Tue 12 May 2026 15:54:02 +0000
asID: 16909
IP address blocks: 2a14:7584:626a::/48 maxlen: 48
Validation: Failed, certificate revoked on Thu 15 May 2025 08:12:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
32:11:65:6a:02:01:dd:32:a5:d3:90:69:9b:5b:10:40:85:c8:73:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: May 13 15:49:02 2025 GMT
Not After : May 12 15:54:02 2026 GMT
Subject: CN=F0D1FD46C8DCAB69A04198D32CA5E1E08B43B60B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:d2:7c:27:14:24:82:47:b3:d6:2c:11:8c:a5:
67:65:b6:3c:5a:04:83:0c:77:b6:c5:05:03:7f:81:
2c:b5:2c:bb:98:d9:27:7f:03:fd:f7:18:67:43:cd:
0a:9d:48:c5:7e:3a:c2:89:e9:ad:11:e7:07:69:64:
1e:21:6c:b9:e5:23:e6:72:9c:f9:51:72:96:56:52:
66:29:10:7c:c1:a0:12:fd:3d:11:41:7c:a2:44:51:
51:ca:a3:90:32:0f:93:67:bb:1f:5a:2f:91:19:6b:
6c:ec:83:b3:ad:06:e0:37:83:b7:93:44:b4:da:fc:
6a:86:8a:99:f5:f3:cf:53:34:80:23:eb:63:4b:c7:
11:41:6f:fa:c8:1e:d2:6e:b4:2b:d4:34:14:7d:06:
12:14:97:71:6b:3b:fe:f9:b9:62:e6:47:55:e5:99:
df:da:a1:80:23:39:be:30:09:85:1a:81:84:93:0e:
59:af:37:60:13:e6:cf:93:41:38:db:38:e2:64:54:
aa:d9:1a:f1:a0:29:76:bf:c5:31:1f:fc:85:03:a4:
7f:14:91:fc:5e:78:d5:59:f5:f5:82:df:82:5f:49:
63:ed:fe:76:b4:c1:15:e5:4d:c5:60:61:c7:63:7d:
6a:6c:91:94:fb:fd:63:98:4b:79:2d:74:ca:53:c0:
49:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:D1:FD:46:C8:DC:AB:69:A0:41:98:D3:2C:A5:E1:E0:8B:43:B6:0B
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363236613a3a2f34382d3438203d3e203136393039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:626a::/48
Signature Algorithm: sha256WithRSAEncryption
79:6b:10:34:0f:37:2a:de:fe:48:76:bf:66:ed:bf:9b:a1:ea:
fe:52:1c:20:9f:77:96:a4:35:a4:c1:01:34:60:f3:5d:21:50:
b0:fa:19:88:25:73:75:7d:40:3b:9a:4a:80:18:87:f0:bb:a9:
b1:cd:b4:ec:7f:93:bf:1f:b2:98:a6:1b:8d:70:c5:bf:ae:01:
71:bc:ef:b3:85:25:5a:a3:bd:77:b9:3b:09:ae:dd:cb:3f:ec:
75:a8:57:26:3f:54:07:47:15:9a:b4:e7:fd:8d:6c:df:65:f4:
51:a6:c1:ff:97:cb:39:82:96:43:dd:f1:20:d8:40:13:99:a6:
69:ac:1a:82:64:ef:3b:ad:0b:93:f9:dc:59:34:5d:9f:d6:0a:
f0:00:43:bd:22:98:0f:82:de:49:fa:d1:86:26:a6:9e:38:72:
99:33:9a:4c:09:aa:a5:07:59:5e:5d:01:75:b5:94:1b:a2:d3:
86:a4:13:6e:61:e6:62:a9:ad:a8:8d:28:15:cf:d3:ca:28:00:
5b:94:58:07:45:88:cc:8d:6b:eb:36:54:7b:38:f5:93:cd:d9:
09:6b:3f:09:9a:6f:da:3a:29:29:5b:83:f6:70:b1:8d:e3:be:
1a:ae:0a:f0:5b:0b:e1:56:c6:76:41:c6:21:69:11:a0:00:d3:
bf:e2:d3:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 25 01:09:01 2025 by rpki-client