Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363264663a3a2f34382d3438203d3e203136393039.roa
File: 326131343a373538343a363264663a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier: JBOgNM3PGkGoejdIrJsjLVYCeI1QwhaG+BaPPeRZwJA=
Subject key identifier: A2:C3:A8:94:C5:DD:C5:41:6A:7F:D9:84:DC:80:50:55:F8:95:22:F1
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 69B0C9DDEC9467AA2141D341F4A0D4A205259822
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363264663a3a2f34382d3438203d3e203136393039.roa
Signing time: Sun 18 May 2025 11:18:02 +0000
ROA not before: Sun 18 May 2025 11:13:02 +0000
ROA not after: Sun 17 May 2026 11:18:02 +0000
asID: 16909
IP address blocks: 2a14:7584:62df::/48 maxlen: 48
Validation: Failed, certificate revoked on Tue 20 May 2025 01:36:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
69:b0:c9:dd:ec:94:67:aa:21:41:d3:41:f4:a0:d4:a2:05:25:98:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: May 18 11:13:02 2025 GMT
Not After : May 17 11:18:02 2026 GMT
Subject: CN=A2C3A894C5DDC5416A7FD984DC805055F89522F1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:16:d4:2d:26:b6:c6:61:66:3f:16:a8:02:23:
15:c0:d3:4e:86:d9:0c:d6:c1:33:88:29:04:9b:bc:
9e:09:96:b8:8f:62:e0:a8:a7:d1:78:bd:c8:e6:b8:
9a:3a:67:03:3c:b4:28:06:ad:c5:e6:fb:19:39:c0:
0e:28:08:54:87:9b:3a:43:b9:2c:c1:87:5d:2e:4a:
4d:e4:e7:9c:84:0c:70:e9:09:47:59:e2:f1:a2:73:
13:45:2b:3a:22:d6:7e:78:37:47:e7:a1:f4:24:66:
0b:6e:ae:0e:73:2b:00:39:65:7c:60:8e:c0:55:b3:
1f:5b:cc:d0:8a:23:8c:52:7a:fc:41:6d:95:aa:26:
fe:a5:e5:d8:07:a8:74:f4:0c:e4:16:97:25:0f:7b:
7a:da:9c:fd:ca:ac:aa:1c:be:1f:67:31:db:50:0a:
98:a2:3d:36:14:99:ae:4a:a8:3e:26:dc:55:93:82:
9f:29:45:21:86:b5:f3:b7:68:98:4e:c3:8e:33:02:
51:af:de:68:d8:bc:0d:ad:e7:93:9b:45:00:88:b1:
d5:8d:38:dd:a5:ef:fa:f2:db:44:d1:8e:65:13:be:
06:41:39:1b:fb:b9:91:87:41:b0:fe:4c:92:fb:38:
88:e4:7e:7d:8b:b1:5c:8e:3f:27:f6:47:b3:e5:d4:
6c:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:C3:A8:94:C5:DD:C5:41:6A:7F:D9:84:DC:80:50:55:F8:95:22:F1
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363264663a3a2f34382d3438203d3e203136393039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:62df::/48
Signature Algorithm: sha256WithRSAEncryption
3e:75:ce:eb:c3:f9:0f:93:f6:bb:83:53:72:59:f1:6a:c4:7d:
be:5f:e0:67:73:88:05:6d:80:74:4c:b9:2d:eb:77:3b:ea:25:
90:4d:b3:9c:7f:ae:7b:c1:9d:fa:18:79:ac:64:05:ce:40:79:
72:ab:f3:57:ef:37:05:db:37:16:8a:1c:e5:71:67:9b:12:a4:
a3:04:67:49:f6:ca:a7:e4:79:75:2f:90:71:74:5a:3b:34:12:
44:f8:25:17:a2:e2:6b:42:d0:46:f9:84:44:cb:2a:8b:d0:1a:
56:52:3d:f6:34:78:16:7c:53:9a:1f:19:7a:31:4f:99:2a:f3:
a9:17:39:7a:8e:53:37:c0:9f:ad:8d:75:69:ca:33:f7:e3:b5:
5a:98:16:64:6d:35:24:59:a6:69:9b:20:13:94:87:62:42:42:
fe:22:cc:32:56:bb:52:74:53:34:f4:80:c6:a1:25:fd:3e:c6:
75:2a:f4:a6:8b:51:65:74:ea:6b:03:3b:41:5b:96:5b:51:a3:
b6:b0:e7:0c:97:a1:12:70:7e:e2:67:c7:ca:30:16:1b:5d:4d:
1b:f2:12:b3:6d:df:34:9b:da:cf:94:f4:3f:cd:3c:26:fb:87:
92:66:df:57:8b:a5:d9:19:42:f7:d8:71:b8:fa:97:b1:d6:19:
7c:b5:56:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 23 23:54:21 2025 by rpki-client