Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363636343a3a2f34382d3438203d3e203136393039.roa
File: 326131343a373538343a363636343a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier: U+7GrHhKEPCD0H0sV0iM3YxaVbcvdmFTVlg+a0Hhpy8=
Subject key identifier: A7:E7:FC:4F:04:86:A8:BA:8E:69:52:0B:1E:39:64:71:EC:42:1E:2A
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 154D3CAC951662FA9A39EC5C4A71E6293ED1A924
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363636343a3a2f34382d3438203d3e203136393039.roa
Signing time: Sat 31 May 2025 14:13:45 +0000
ROA not before: Sat 31 May 2025 14:08:45 +0000
ROA not after: Sat 30 May 2026 14:13:45 +0000
asID: 16909
IP address blocks: 2a14:7584:6664::/48 maxlen: 48
Validation: Failed, certificate revoked on Sat 31 May 2025 17:16:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
15:4d:3c:ac:95:16:62:fa:9a:39:ec:5c:4a:71:e6:29:3e:d1:a9:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: May 31 14:08:45 2025 GMT
Not After : May 30 14:13:45 2026 GMT
Subject: CN=A7E7FC4F0486A8BA8E69520B1E396471EC421E2A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:12:08:a8:6a:54:a5:59:44:59:86:5d:bd:b8:
46:7b:db:8e:a2:3d:1c:6b:45:a2:98:d1:35:89:9a:
7d:ae:86:64:d0:ac:e9:75:0d:d1:6d:21:27:0e:77:
00:a9:f4:39:59:aa:b8:77:42:f4:c8:4f:19:64:62:
cd:4a:e3:19:40:8c:b8:61:7b:ff:d1:12:bb:ad:d3:
c3:b5:c5:b6:81:87:58:35:83:6f:00:49:14:a0:d0:
11:04:90:b0:e6:7c:7f:f1:9e:37:de:29:89:08:75:
88:72:0f:c7:55:7f:be:4f:d7:15:23:70:30:20:16:
57:0c:4b:38:7c:bd:0f:77:6b:71:d3:96:10:2c:f4:
7c:27:b9:40:64:bc:90:59:44:07:2a:5b:cb:ac:72:
d5:84:04:54:25:7b:6a:b2:19:9b:74:f7:4d:07:b9:
75:61:3e:ea:04:1d:ab:e6:7e:49:73:cd:8a:dc:94:
df:73:3c:58:fa:71:31:21:07:2a:50:de:fa:d6:c7:
de:e7:f6:28:20:7b:bb:33:6b:4d:70:f7:51:43:58:
46:d8:e5:4a:58:f3:24:a4:8b:22:00:d7:f4:ae:e6:
9b:72:2d:5d:ad:83:db:5d:ba:aa:c0:5e:ae:aa:0f:
27:39:f7:9a:5f:b7:2e:02:f9:63:20:99:5d:0a:cb:
4b:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:E7:FC:4F:04:86:A8:BA:8E:69:52:0B:1E:39:64:71:EC:42:1E:2A
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363636343a3a2f34382d3438203d3e203136393039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:6664::/48
Signature Algorithm: sha256WithRSAEncryption
56:98:6d:89:41:71:66:a2:88:5e:e6:81:72:68:ff:86:26:6a:
5b:c5:42:e4:f0:8a:6d:e0:4a:66:a7:63:6d:9b:90:68:55:57:
0c:c3:93:e4:e8:13:f2:10:85:32:10:ab:ee:fd:ba:f8:24:b2:
30:30:ed:dd:f1:8c:a3:3d:92:c0:2e:9e:d6:72:f5:8e:34:64:
69:99:ad:14:e1:93:82:b1:2b:a6:63:aa:a3:ef:96:99:72:9f:
09:d2:d3:7d:80:24:47:ac:3d:4b:24:65:b5:4a:18:ae:0b:6c:
6d:62:73:f9:bf:b0:9c:46:03:35:32:b6:14:91:36:d0:4d:db:
91:aa:a7:63:df:18:d4:42:71:d6:c5:33:b4:ed:97:10:0b:45:
b4:49:2c:1b:27:43:01:0f:98:15:58:ff:5b:92:fa:d4:92:cd:
63:be:8c:bf:49:fd:66:6a:22:17:ce:44:15:87:f4:ca:a6:ba:
00:f1:01:c6:f3:24:fe:15:01:4a:19:03:53:7c:be:c7:8e:a9:
f0:ca:08:b3:28:8e:ee:57:75:4c:4c:ad:75:af:24:5a:52:cc:
34:9d:da:d6:a5:61:0e:c1:d0:97:a5:9b:f9:70:01:e0:8d:16:
23:64:37:4a:69:05:cb:66:c3:7d:20:39:a2:dc:ec:5d:20:a7:
0e:eb:ec:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 25 01:04:07 2025 by rpki-client