Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363265323a3a2f34382d3438203d3e203136393039.roa
File: 326131343a373538343a363265323a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier: 3qj5VcYDCs3BdNI3bmVZz+WozsUZ3/yhfYnl+kvyRMY=
Subject key identifier: FB:69:FC:96:15:12:E5:44:47:C4:70:03:03:3B:CC:9B:6D:49:CE:2F
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 25F76845516CB53D5D349CA37DD6A080EC15B67C
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363265323a3a2f34382d3438203d3e203136393039.roa
Signing time: Sun 18 May 2025 11:18:02 +0000
ROA not before: Sun 18 May 2025 11:13:02 +0000
ROA not after: Sun 17 May 2026 11:18:02 +0000
asID: 16909
IP address blocks: 2a14:7584:62e2::/48 maxlen: 48
Validation: Failed, certificate revoked on Mon 19 May 2025 20:54:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
25:f7:68:45:51:6c:b5:3d:5d:34:9c:a3:7d:d6:a0:80:ec:15:b6:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: May 18 11:13:02 2025 GMT
Not After : May 17 11:18:02 2026 GMT
Subject: CN=FB69FC961512E54447C47003033BCC9B6D49CE2F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:84:00:e3:02:45:12:c4:2d:0e:89:4e:a4:3b:
47:0d:d9:47:86:aa:d5:c2:a5:77:67:85:fe:c7:64:
a5:20:c7:9d:95:1d:67:e8:f5:f3:0f:fc:7b:ec:c7:
b1:52:d9:f2:62:a9:6b:51:c7:ea:a4:2f:2c:f5:3b:
0c:3c:ff:7c:5e:4e:02:0f:3d:d8:82:b7:21:cc:7c:
35:ef:65:bc:4f:ef:c0:ef:4a:36:7c:47:19:dd:7c:
04:5d:3d:84:c8:fd:f9:6e:55:9b:b4:61:06:ea:3f:
e4:4e:3c:11:c7:e3:de:ac:58:52:e1:5b:9e:56:a0:
77:b7:77:98:56:24:f1:af:d8:c5:e9:e1:3d:90:d8:
38:b3:7a:57:c6:bc:44:17:54:61:24:4b:22:2e:7e:
ab:ce:38:df:5e:c8:6d:b1:47:d9:5b:a7:26:a7:75:
97:45:69:c2:93:ac:6f:86:13:5a:f0:ce:1b:84:b2:
1e:ab:3b:df:65:d9:72:14:fa:c9:4b:24:4d:af:28:
41:8f:da:2b:9a:07:ba:29:43:81:3f:cb:92:41:20:
20:2e:c9:9a:dc:f5:ce:d2:28:e0:d6:a9:5d:0e:dd:
99:3f:7d:25:3d:f9:e1:77:6d:29:9a:e8:e8:54:8e:
83:e9:91:ed:1b:e1:42:f2:30:7e:76:09:83:59:3c:
9e:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:69:FC:96:15:12:E5:44:47:C4:70:03:03:3B:CC:9B:6D:49:CE:2F
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363265323a3a2f34382d3438203d3e203136393039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:62e2::/48
Signature Algorithm: sha256WithRSAEncryption
6a:8a:5f:29:f9:4c:f4:c0:07:23:46:b4:09:e8:6c:72:23:c0:
18:e0:f7:a9:d9:91:b2:5c:b6:07:c8:cd:9d:03:55:a2:32:c5:
b2:f6:0b:d3:d4:a3:3b:03:11:b1:cf:af:2c:07:96:ec:f7:eb:
05:12:0b:b7:10:1c:11:f8:48:77:81:0e:be:65:52:c7:d0:72:
3b:28:6c:70:93:03:36:ad:b1:42:ea:04:f7:2e:58:5d:ab:c6:
06:f0:a1:61:a2:ee:8f:82:bd:1d:7f:b7:b7:65:53:60:66:0c:
2a:e8:43:92:48:b7:ee:24:fb:3e:a3:2b:5c:e7:ca:49:5d:0e:
04:88:70:39:be:cc:ed:47:b8:0f:83:bf:5b:a7:6d:ae:fc:2e:
4f:34:ca:58:d2:14:30:1e:40:c1:d3:b0:92:4c:96:49:04:2c:
62:34:43:21:b3:9e:d3:f7:43:87:0d:cb:f2:7f:fd:78:76:4c:
d0:96:b9:17:e2:0f:c4:6e:43:33:09:0a:19:62:94:d3:65:c2:
44:7b:9f:9c:ca:64:77:89:d4:f6:96:9a:03:04:93:b4:0d:18:
e4:7c:e4:34:f6:99:88:8b:be:a3:fc:d7:02:b0:62:d1:13:0c:
8b:39:0d:81:1a:60:c1:0b:01:82:36:e5:19:38:c0:ad:91:93:
7a:b6:2a:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 23 23:54:59 2025 by rpki-client