Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363262623a3a2f34382d3438203d3e203136393039.roa
File: 326131343a373538343a363262623a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier: 8nyxp4UOfWdcgo0aq2K0k3Llh4L0iFqjSiyfAuJbiEs=
Subject key identifier: 81:6F:24:D8:A4:96:44:D9:35:39:C3:07:8B:C1:5C:0A:73:E5:1E:4B
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 6EF934B412BDE1BDCA3E0D2853A9FA713D98A173
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363262623a3a2f34382d3438203d3e203136393039.roa
Signing time: Sat 17 May 2025 05:18:02 +0000
ROA not before: Sat 17 May 2025 05:13:02 +0000
ROA not after: Sat 16 May 2026 05:18:02 +0000
asID: 16909
IP address blocks: 2a14:7584:62bb::/48 maxlen: 48
Validation: Failed, certificate revoked on Sun 18 May 2025 23:18:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6e:f9:34:b4:12:bd:e1:bd:ca:3e:0d:28:53:a9:fa:71:3d:98:a1:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: May 17 05:13:02 2025 GMT
Not After : May 16 05:18:02 2026 GMT
Subject: CN=816F24D8A49644D93539C3078BC15C0A73E51E4B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:51:85:9a:92:ef:fa:b4:02:fd:4c:cd:b9:18:
04:83:4b:0a:bc:dd:5d:8b:ea:b1:5e:a4:44:8a:fc:
7d:0b:0e:10:76:d4:cd:90:4f:f8:92:4a:f9:61:ff:
0e:09:67:46:de:18:13:25:ff:e9:94:e7:30:64:76:
9a:9c:5b:41:a4:8d:fc:87:21:b6:b8:18:0d:bd:52:
b9:67:bb:f7:6f:5e:88:63:70:cb:8b:c7:68:1a:e6:
c6:78:2f:89:3c:97:02:47:49:e4:cf:59:dd:ff:29:
a6:fe:a6:3c:24:3a:d1:ae:10:28:15:7b:e3:13:36:
94:c3:07:25:f6:03:d5:6c:a0:6c:dd:ef:84:47:e3:
d6:45:e4:23:10:77:57:9f:8c:b7:6f:50:3f:95:9a:
ea:13:59:80:25:12:25:ea:04:c0:aa:94:6b:04:20:
ac:b3:d1:83:c3:a4:bf:64:5f:05:8c:89:f4:8d:fe:
5c:dc:07:fd:3e:2a:26:cd:55:04:cc:66:01:f9:fc:
e2:57:b7:4b:ca:12:56:59:db:fe:e2:df:89:47:c5:
e9:82:75:50:43:cd:cc:1c:44:29:a1:d9:4e:e0:80:
84:62:e7:5c:42:fa:c7:47:47:68:22:94:08:f2:2b:
42:f7:ce:bc:94:e5:e1:ad:77:9a:6e:9a:d9:d5:97:
c1:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:6F:24:D8:A4:96:44:D9:35:39:C3:07:8B:C1:5C:0A:73:E5:1E:4B
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363262623a3a2f34382d3438203d3e203136393039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:62bb::/48
Signature Algorithm: sha256WithRSAEncryption
5d:9d:30:8e:b4:d7:d9:ba:dc:60:b6:41:25:ec:6f:00:a5:30:
ef:6c:74:e3:41:b0:f1:c7:ee:ab:da:9c:1f:63:35:e8:3b:80:
ea:b1:da:35:23:80:b9:40:74:49:15:28:8f:7f:e1:ff:a0:bc:
05:e1:68:14:78:ae:9a:8f:fa:0b:81:da:aa:23:60:d1:50:a0:
44:f8:7f:c2:a5:0e:8d:95:a3:a0:d4:79:03:31:70:0a:3c:3c:
88:4c:a7:f8:60:28:13:93:09:3b:36:7c:01:4e:38:d9:de:ff:
7d:a7:5e:94:db:a0:51:74:4f:7b:2b:1f:fa:e5:d5:be:9e:f4:
d8:98:61:d5:88:4a:73:ab:16:4a:21:da:9a:24:35:c2:75:4a:
33:2d:80:83:09:01:38:3d:3f:bc:f3:a4:88:da:4c:f7:d4:74:
b6:55:16:a6:da:f6:d0:9e:88:05:1b:e8:3e:e3:d3:69:0e:f7:
74:c6:5c:86:cb:0f:7c:c7:39:65:a0:0a:b5:7f:49:ec:a9:04:
62:41:4d:6f:86:d7:cf:de:1f:e9:a8:ae:85:05:8b:7a:1d:97:
6c:b6:b7:a9:12:de:e1:a0:43:3a:d7:32:88:d1:57:72:19:0d:
fa:29:9b:d5:22:ed:f0:37:82:5a:18:ae:45:f7:b6:7e:9b:45:
33:e9:17:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 25 01:01:14 2025 by rpki-client