Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363735353a3a2f34382d3438203d3e203136393039.roa
File: 326131343a373538343a363735353a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier: e/PEwZy2PzH89UDMxgyHUTwsV5j4irghsBXEWQIK7S0=
Subject key identifier: 00:25:DC:0C:D9:38:DA:A4:4E:A1:4E:9A:50:63:0C:80:63:0F:9E:B0
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 289C30C51CE2E7A6F654C578D4A9C9CAE7D3C4AC
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363735353a3a2f34382d3438203d3e203136393039.roa
Signing time: Tue 27 May 2025 22:30:02 +0000
ROA not before: Tue 27 May 2025 22:25:02 +0000
ROA not after: Tue 26 May 2026 22:30:02 +0000
asID: 16909
IP address blocks: 2a14:7584:6755::/48 maxlen: 48
Validation: Failed, certificate revoked on Sat 31 May 2025 13:54:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
28:9c:30:c5:1c:e2:e7:a6:f6:54:c5:78:d4:a9:c9:ca:e7:d3:c4:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: May 27 22:25:02 2025 GMT
Not After : May 26 22:30:02 2026 GMT
Subject: CN=0025DC0CD938DAA44EA14E9A50630C80630F9EB0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:9f:7d:1a:35:cb:c5:2c:3d:2c:62:10:28:4a:
ad:e8:f9:ef:82:1b:cc:99:46:ac:9a:e7:d6:71:1a:
59:6a:47:71:f9:9f:06:2f:47:ea:e5:87:9b:9e:e1:
0c:7c:53:86:26:ed:91:d5:e4:3a:96:b3:9f:40:30:
b9:0e:5f:e5:e7:e3:23:18:f9:79:14:03:47:d3:b8:
6b:99:77:5b:66:20:cc:1a:fd:a5:cb:6d:7f:8d:03:
d9:d0:09:6b:5b:f8:56:16:33:0d:92:f0:09:9e:d9:
7e:eb:92:7e:d3:5d:00:9c:ef:fb:46:59:86:62:14:
cb:32:69:26:17:0e:64:e6:5c:16:c3:c9:88:d3:5a:
10:26:e7:9c:f3:08:24:25:ac:f0:bc:01:20:5a:49:
4e:8e:5e:78:77:cf:9a:f9:28:2c:f1:41:55:95:ee:
bf:cf:2e:64:17:b5:54:fa:27:08:63:6a:71:af:fa:
b2:89:96:29:a6:78:8b:1f:a4:90:29:28:11:b0:fc:
96:49:75:1f:cc:96:89:25:f3:c3:fd:08:91:28:d3:
e7:df:d8:33:09:cc:28:0e:7e:8a:af:c8:11:e3:c1:
14:98:e0:db:5c:0a:cc:35:9f:30:75:7e:4b:37:10:
07:1f:02:e6:0c:a0:c0:4b:5a:ca:f9:e6:58:c8:16:
27:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:25:DC:0C:D9:38:DA:A4:4E:A1:4E:9A:50:63:0C:80:63:0F:9E:B0
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363735353a3a2f34382d3438203d3e203136393039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:6755::/48
Signature Algorithm: sha256WithRSAEncryption
a6:ac:86:89:cc:a7:a5:2e:7a:46:6e:1f:7e:1b:cb:4b:ed:40:
b4:39:2e:51:c4:0e:d5:80:52:83:ba:d8:3e:72:7a:32:66:9e:
5a:f5:70:7c:c6:19:a0:92:d3:a6:a1:87:42:48:e4:78:a3:8c:
b1:04:54:aa:93:d0:6c:16:06:35:63:2e:a0:8d:13:a6:6a:a0:
20:37:be:be:6a:69:43:e6:64:92:b2:a7:68:6b:8b:a0:31:70:
f7:fc:12:82:f4:a7:91:45:ef:78:64:f1:e9:80:8a:15:73:4d:
0f:99:fe:bc:f3:1c:14:3f:bd:c4:5b:30:bf:11:69:cb:43:fa:
7b:5b:e1:aa:fb:f1:02:86:65:d1:3d:fc:aa:65:45:97:29:25:
8c:d2:38:98:48:f4:84:3c:3f:c9:12:84:83:de:9a:3d:57:49:
b4:9b:f1:f9:10:76:58:8a:78:b4:b9:60:7d:e6:bb:80:d3:fe:
28:84:0e:eb:78:1b:7e:61:55:62:f7:28:e4:21:f5:0c:dd:0f:
11:a5:5e:8b:b6:26:c6:35:82:e3:26:86:74:79:5b:60:15:7e:
bc:cc:0a:71:56:14:6c:53:cc:d9:fc:51:33:87:4e:7c:ac:25:
91:1b:e9:c6:13:96:e8:b9:c6:4c:a4:6c:04:49:d0:32:03:4f:
1d:0a:77:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 25 01:01:59 2025 by rpki-client