Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a366164313a3a2f34382d3438203d3e203136393039.roa
File: 326131343a373538343a366164313a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier: /LgVQpTrozrhjtUxFDaGO40eSgBQISyeKgJmDP7WII8=
Subject key identifier: AF:35:9F:3F:C5:31:79:5E:0D:E5:C8:64:0B:3D:A8:68:FE:E1:AA:F4
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 4B9EA641D04DA2719D808CC88B91BEED4DC5C6C1
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a366164313a3a2f34382d3438203d3e203136393039.roa
Signing time: Sun 25 May 2025 02:54:02 +0000
ROA not before: Sun 25 May 2025 02:49:02 +0000
ROA not after: Sun 24 May 2026 02:54:02 +0000
asID: 16909
IP address blocks: 2a14:7584:6ad1::/48 maxlen: 48
Validation: Failed, certificate revoked on Thu 29 May 2025 16:13:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4b:9e:a6:41:d0:4d:a2:71:9d:80:8c:c8:8b:91:be:ed:4d:c5:c6:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: May 25 02:49:02 2025 GMT
Not After : May 24 02:54:02 2026 GMT
Subject: CN=AF359F3FC531795E0DE5C8640B3DA868FEE1AAF4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:c6:13:b6:36:4a:11:82:2c:6a:d7:61:c6:eb:
ff:49:32:c5:51:b0:6a:85:7c:19:f5:4f:32:f7:0e:
2c:c2:0b:da:ab:9c:47:3c:da:8b:a1:47:02:fe:1d:
a5:78:32:08:69:41:34:3f:d5:44:8a:b4:59:bd:a6:
fd:82:c8:d5:fe:08:09:42:95:be:fa:68:99:dd:eb:
c9:1d:6a:8f:07:60:81:37:74:b4:64:f4:54:1f:e6:
ae:76:07:e6:d2:8b:c5:8f:af:f5:b2:a4:8c:81:45:
58:51:74:ae:ca:99:22:36:c7:59:3f:23:fd:d3:6f:
62:e1:02:28:d7:8d:d0:3f:92:fb:07:c5:9e:a0:5d:
4a:60:27:f5:d5:c1:94:dd:a8:e6:65:05:8e:c4:0b:
8e:c0:a9:34:3b:e9:d6:2b:c9:1f:d8:ca:f5:f0:9b:
d7:ed:0c:17:e2:0a:81:d8:70:21:a6:9e:5d:3f:35:
70:89:a6:6c:bd:db:7b:d6:e7:8e:46:0b:e7:49:58:
5e:9b:e7:6a:b4:97:1e:ca:b5:ae:98:b4:f3:2a:4f:
38:80:da:c5:35:15:d1:22:21:3d:10:c5:0b:53:39:
92:db:83:96:15:83:b8:d6:28:87:37:c1:19:f3:90:
2f:e3:d3:a5:d1:3b:a2:44:81:c6:08:74:7f:55:4e:
ed:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:35:9F:3F:C5:31:79:5E:0D:E5:C8:64:0B:3D:A8:68:FE:E1:AA:F4
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a366164313a3a2f34382d3438203d3e203136393039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:6ad1::/48
Signature Algorithm: sha256WithRSAEncryption
4c:17:64:35:a0:b8:cc:e5:5b:cc:db:40:84:08:9c:fd:0c:5e:
ec:ee:ff:05:93:09:4c:d7:39:c1:ec:ee:65:20:69:61:69:66:
e1:4b:84:07:17:e6:a4:53:05:e2:08:eb:d1:e9:6c:5d:b8:ab:
45:3b:4f:00:a1:74:6e:4b:6c:f3:fa:6c:ce:36:9c:9b:8a:25:
98:26:c0:d0:56:5e:4b:e9:39:4d:44:17:fc:6d:76:45:62:94:
e7:ec:fd:9f:5a:d7:c4:33:ed:41:a7:64:0a:91:15:a2:d1:ec:
c0:05:3f:79:dd:08:3b:41:32:dd:76:61:20:cb:09:32:7b:c0:
48:b2:e7:d7:40:48:a5:38:8c:19:73:1c:0a:6c:e5:00:58:86:
76:f3:de:67:04:f8:44:2b:8c:5a:f0:9e:3f:3f:3f:bf:58:b9:
b3:31:c3:39:97:cb:a6:26:62:db:d1:7d:84:33:46:6c:6b:97:
f8:55:fa:71:44:90:36:6d:b5:1f:06:4f:b0:40:eb:7e:95:21:
f9:39:a2:1f:09:18:b6:21:34:ac:a4:5d:ec:a9:ae:44:94:88:
8a:72:bc:3b:31:03:af:88:60:f3:ee:e8:32:19:45:5d:67:73:
8c:10:4c:da:48:eb:46:38:9b:9f:8e:c8:23:9b:ff:88:05:3e:
bd:de:7d:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 11:33:08 2025 by rpki-client