Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363330613a3a2f34382d3438203d3e203136393039.roa
File: 326131343a373538343a363330613a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier: huH73RzBIcKJSBjq0DO1aVWs/SItbkbBQ27qOTnANrM=
Subject key identifier: 7E:1B:4C:26:B6:38:53:48:13:DD:18:CF:EF:88:A0:E0:C2:EF:5B:A9
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 27119DDA676673E0DFF25291F02486801FA760D0
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363330613a3a2f34382d3438203d3e203136393039.roa
Signing time: Mon 19 May 2025 20:42:01 +0000
ROA not before: Mon 19 May 2025 20:37:01 +0000
ROA not after: Mon 18 May 2026 20:42:01 +0000
asID: 16909
IP address blocks: 2a14:7584:630a::/48 maxlen: 48
Validation: Failed, certificate revoked on Thu 22 May 2025 06:42:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
27:11:9d:da:67:66:73:e0:df:f2:52:91:f0:24:86:80:1f:a7:60:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: May 19 20:37:01 2025 GMT
Not After : May 18 20:42:01 2026 GMT
Subject: CN=7E1B4C26B638534813DD18CFEF88A0E0C2EF5BA9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:c4:81:b8:ae:a2:40:75:29:2b:9d:56:d0:87:
46:b4:4d:1e:22:98:c6:e9:f0:d9:97:a0:08:41:98:
49:cb:1d:d9:f2:0f:00:61:50:5b:ea:4a:a2:13:1f:
dc:fb:82:02:9e:d1:24:c0:0d:61:ca:91:9d:6d:48:
9e:1b:a1:0c:b5:c0:37:28:f7:8f:c5:e7:1d:c4:ff:
fb:86:31:41:5f:54:f1:28:2d:af:48:36:42:f5:18:
4b:b0:ec:ed:f9:6a:5d:b9:30:c1:66:65:d6:95:24:
40:10:67:56:a6:75:f3:95:db:dc:a0:a7:c5:18:8f:
a1:7e:da:45:da:2a:2f:0f:88:cd:b7:9f:86:30:08:
b5:c0:61:61:13:f8:61:84:23:5d:b4:45:aa:74:f7:
e8:86:80:e0:eb:bf:a4:70:35:63:e9:b9:1e:ce:50:
11:65:be:9e:86:cc:8f:e4:0c:f7:22:8b:62:21:b8:
12:1c:3f:c4:6d:7a:3c:47:22:85:e1:17:d6:96:ff:
05:65:92:bf:d7:20:1c:40:7c:be:a7:18:2d:aa:89:
6a:bc:76:b6:b5:b0:63:74:2a:21:08:b9:a8:04:12:
20:87:55:f1:2e:c8:c2:ac:a7:9a:27:f4:20:fa:7f:
4c:8d:94:d8:19:8d:08:87:d5:f6:37:dd:ad:22:20:
f4:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:1B:4C:26:B6:38:53:48:13:DD:18:CF:EF:88:A0:E0:C2:EF:5B:A9
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363330613a3a2f34382d3438203d3e203136393039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:630a::/48
Signature Algorithm: sha256WithRSAEncryption
92:1c:84:cc:7f:33:0e:f0:e6:1e:a7:c1:5a:24:e5:3f:fd:8c:
0c:b1:83:44:bf:97:80:95:88:8c:4d:c7:87:d1:65:55:33:90:
6e:68:94:da:24:4b:2e:d1:aa:66:6f:dd:1a:92:10:84:5a:f7:
79:55:d6:cb:58:9f:d1:dd:c0:1f:4d:0e:c0:78:bc:52:1c:f8:
94:13:c9:45:a2:19:33:ab:fd:da:88:fc:d8:97:c2:f1:0f:f5:
1b:1f:39:ce:88:c3:dc:6b:e2:d8:ac:6e:11:4d:45:04:47:48:
99:cd:4e:6e:eb:24:de:0e:09:93:a5:4e:23:92:a7:88:36:bf:
bd:ce:3a:6d:05:2e:74:91:58:bd:c5:f6:ad:18:e4:4e:49:77:
01:0c:a9:a5:c2:e4:59:89:75:17:b9:b4:f5:e9:ab:c3:b3:c4:
51:39:12:1d:3d:26:1c:bf:e3:4d:28:ef:7c:b6:ee:3f:20:11:
7d:0e:ce:4d:87:68:d3:98:9e:d9:47:fa:61:c5:45:ea:8e:ec:
05:fa:35:97:4b:f8:77:6a:4d:c7:07:b6:43:90:a1:12:87:27:
3a:12:b8:97:1e:9b:54:c4:19:9c:7b:1d:51:20:d2:91:10:38:
af:a9:1d:dc:84:ff:2f:0f:1a:ce:c5:fc:37:ab:e2:ee:0e:67:
95:c9:b3:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 23 23:56:11 2025 by rpki-client