Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363263653a3a2f34382d3438203d3e203136393039.roa
File: 326131343a373538343a363263653a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier: kkJsVV5zaWODsX9f28Rg/rOzrfAdJk0dlHHztSmErWM=
Subject key identifier: 06:82:E9:6E:93:78:78:B4:DD:20:52:B1:56:99:A0:1F:3D:7D:55:A0
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 0B65C016FFEBE99BFDA103B3DD4B4C04AC5FC0F0
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363263653a3a2f34382d3438203d3e203136393039.roa
Signing time: Sat 17 May 2025 23:48:02 +0000
ROA not before: Sat 17 May 2025 23:43:02 +0000
ROA not after: Sat 16 May 2026 23:48:02 +0000
asID: 16909
IP address blocks: 2a14:7584:62ce::/48 maxlen: 48
Validation: Failed, certificate revoked on Sun 18 May 2025 20:24:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0b:65:c0:16:ff:eb:e9:9b:fd:a1:03:b3:dd:4b:4c:04:ac:5f:c0:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: May 17 23:43:02 2025 GMT
Not After : May 16 23:48:02 2026 GMT
Subject: CN=0682E96E937878B4DD2052B15699A01F3D7D55A0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:8d:c9:ae:e7:21:95:9f:3c:d8:f7:30:df:2a:
81:58:24:d4:84:a8:62:6f:e9:d5:f2:be:70:5e:df:
b5:b6:ec:08:29:db:60:7d:53:70:73:b1:02:9b:9a:
c6:16:df:31:20:0f:05:45:45:67:d0:f1:57:5b:f9:
2c:57:af:3f:e6:ce:a4:d0:56:9d:b6:39:4e:9f:f7:
f0:8d:e8:9b:4f:5e:ca:3e:24:31:eb:a3:04:9b:ca:
c9:00:d9:44:f1:b2:b9:a3:09:8b:0b:87:74:33:be:
ab:88:ca:18:22:62:61:d8:36:82:65:13:c7:b4:c4:
8f:e1:08:32:35:e3:47:d9:87:35:33:0b:5c:8d:9f:
10:e8:15:dd:12:9e:a7:21:f1:8e:a2:8b:b7:99:a2:
cf:cf:b0:38:1e:5b:1e:2e:3e:34:02:48:18:5e:46:
e6:7e:94:51:9f:a4:53:b9:da:71:50:38:42:c0:69:
41:e7:db:a5:f8:17:cf:95:12:63:cd:17:28:31:e6:
71:9a:a0:29:30:6c:bb:af:6f:84:09:d3:22:e2:22:
b7:fd:cf:18:10:54:11:18:73:69:91:0c:2b:6e:29:
18:28:5d:00:dc:f2:ff:b8:45:d1:e7:b2:d4:b4:83:
ca:c8:09:20:a4:d5:39:39:84:00:40:11:a6:9e:8b:
84:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:82:E9:6E:93:78:78:B4:DD:20:52:B1:56:99:A0:1F:3D:7D:55:A0
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363263653a3a2f34382d3438203d3e203136393039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:62ce::/48
Signature Algorithm: sha256WithRSAEncryption
31:8d:00:3a:fb:af:ca:e1:57:01:a5:8b:e8:69:43:b7:8f:ef:
f8:ff:24:c6:67:ee:8e:54:2c:8d:9f:3c:4f:41:d1:e7:67:ac:
28:c4:b5:48:2c:9d:2e:ae:c8:f8:8d:82:ef:78:9e:f0:23:7c:
80:cf:c0:88:fc:ad:b1:65:02:fe:e4:92:36:04:7d:9f:ad:88:
4d:d5:1e:1d:7a:19:74:54:e0:14:ec:7f:3f:a6:ed:45:94:87:
af:1d:dc:ea:5d:f2:86:00:61:c9:bc:6a:1d:95:fd:7d:b5:9c:
45:9d:61:17:5a:45:d0:03:1b:70:f4:1e:2b:b0:33:b2:7f:5e:
52:0a:13:14:89:22:2c:46:d6:ff:c4:76:f6:a7:72:31:b2:46:
48:82:d9:af:98:d1:e3:64:ac:9a:6a:d6:79:ee:ba:88:7d:48:
bd:c2:5c:68:68:60:a6:57:f1:d5:e1:9f:c1:f5:6e:ff:cd:d5:
60:a5:cd:25:1d:3e:04:59:a7:23:9a:ee:89:fc:66:96:86:0e:
86:3c:42:bd:f1:46:ad:16:e9:c3:60:b8:cc:dd:ac:bd:6c:5c:
0a:13:e7:ee:c7:90:fa:c1:f1:fd:d0:6a:e6:6c:80:74:4d:ff:
18:73:3b:6b:43:43:5d:63:1b:b4:7a:33:7d:67:25:16:58:b9:
a9:43:c1:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 25 01:02:15 2025 by rpki-client