Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363633333a3a2f34382d3438203d3e203136393039.roa
File: 326131343a373538343a363633333a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier: AXXhdlFQCM921D1SRBj7CnXnLfx5iXvefotjg8/xxzc=
Subject key identifier: 07:F2:2F:61:1B:A8:6A:38:FC:56:B9:DD:62:99:A8:2A:8E:25:A7:CC
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 4FB64AE5B55E708B57F7F20CC2639A6A0172688E
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363633333a3a2f34382d3438203d3e203136393039.roa
Signing time: Sat 24 May 2025 18:12:01 +0000
ROA not before: Sat 24 May 2025 18:07:01 +0000
ROA not after: Sat 23 May 2026 18:12:01 +0000
asID: 16909
IP address blocks: 2a14:7584:6633::/48 maxlen: 48
Validation: Failed, certificate revoked on Sun 25 May 2025 06:13:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4f:b6:4a:e5:b5:5e:70:8b:57:f7:f2:0c:c2:63:9a:6a:01:72:68:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: May 24 18:07:01 2025 GMT
Not After : May 23 18:12:01 2026 GMT
Subject: CN=07F22F611BA86A38FC56B9DD6299A82A8E25A7CC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:1e:91:d1:bc:d7:c7:69:a0:2c:7b:b0:bc:72:
6a:70:5b:a3:cb:ec:cf:a7:05:61:ba:ff:bf:e9:8e:
c2:3f:dd:ff:b1:b4:3b:48:02:71:87:43:f3:04:ee:
99:0d:9c:97:9e:5f:30:0d:7d:2b:3c:15:11:fa:6d:
84:ed:08:9e:e2:ff:a9:8a:b2:db:30:72:f3:07:67:
62:7c:2a:eb:1b:89:f1:29:2e:b5:45:f9:25:69:14:
e5:b1:15:c0:5f:21:8b:94:9a:3c:31:58:08:ab:27:
f4:9d:0e:7e:f1:2d:d1:f4:75:e6:ab:6b:fa:bd:e5:
3d:81:8e:be:8f:65:13:e9:01:ab:33:e5:56:ba:52:
73:05:64:8a:05:61:8f:5e:f9:5d:db:eb:44:8a:36:
d4:d1:82:3a:23:fb:e1:ed:f7:df:8a:88:1b:af:28:
61:1d:0a:68:23:73:93:b3:c6:4b:8b:69:a7:3a:35:
21:db:c2:b6:fb:de:70:83:3d:25:ed:7f:79:ca:97:
09:f6:fc:29:e1:b9:a3:6c:3c:6c:54:88:3b:3d:cc:
fb:9b:57:20:55:31:a5:7e:8a:70:82:56:13:13:df:
3e:5b:df:30:be:7a:6f:31:61:b2:31:f1:19:2b:d3:
83:92:bb:79:1f:14:12:b6:0b:d8:b5:63:1c:9f:a5:
3f:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:F2:2F:61:1B:A8:6A:38:FC:56:B9:DD:62:99:A8:2A:8E:25:A7:CC
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363633333a3a2f34382d3438203d3e203136393039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:6633::/48
Signature Algorithm: sha256WithRSAEncryption
a5:0c:4d:bf:cf:30:f0:18:3d:90:e5:93:7c:bc:a1:8d:f7:e8:
6d:63:35:ae:05:6c:62:e5:5c:e3:60:b2:0f:18:74:43:96:78:
5c:76:17:57:33:02:dc:51:35:5b:39:50:89:1d:31:92:68:a1:
cb:79:1e:92:50:d8:54:83:5e:95:57:aa:69:26:73:4a:b4:b5:
16:1d:63:82:f9:49:57:f3:48:19:15:39:ed:38:de:e3:04:f9:
ca:65:23:27:2c:9d:ea:90:df:5e:bd:cf:9c:75:50:da:81:ec:
85:dc:13:75:2b:ab:04:d7:6a:f7:8f:99:c2:d0:e3:6a:a8:62:
a7:61:f2:b6:20:c1:45:0e:5f:23:73:39:04:db:1e:26:03:33:
91:28:42:34:49:d4:2c:a6:e4:45:14:ee:5f:fa:06:9a:16:66:
46:bd:8a:4e:4e:78:f6:ef:84:f9:88:b7:e5:84:87:49:79:e5:
3e:07:39:a3:fd:bf:65:3c:cc:10:64:a6:a1:d9:e5:bf:90:70:
37:bd:3e:5b:57:b2:b6:ae:bc:54:f2:eb:5e:d4:fb:26:19:f5:
c7:f4:fd:2e:b8:5b:50:c7:f3:2f:ea:ba:37:fe:b8:ee:77:99:
59:f9:73:fb:32:19:47:35:f3:cb:c2:e0:63:f3:a0:f0:ad:84:
0e:01:c8:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 25 01:04:04 2025 by rpki-client