Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a366431613a3a2f34382d3438203d3e203136393039.roa
File: 326131343a373538343a366431613a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier: FNEf8cQ+S2UOqVEszUfwBKEEAAsfN1yUtqa+KFqAP+E=
Subject key identifier: 0D:9B:2C:81:5A:FE:6E:CF:0A:97:31:C3:CF:2D:88:67:57:DE:2C:BB
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 643890002D34F6CB7F96E8F62E75F43E0146FDB1
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a366431613a3a2f34382d3438203d3e203136393039.roa
Signing time: Sun 25 May 2025 03:06:02 +0000
ROA not before: Sun 25 May 2025 03:01:02 +0000
ROA not after: Sun 24 May 2026 03:06:02 +0000
asID: 16909
IP address blocks: 2a14:7584:6d1a::/48 maxlen: 48
Validation: Failed, certificate revoked on Sun 25 May 2025 13:54:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
64:38:90:00:2d:34:f6:cb:7f:96:e8:f6:2e:75:f4:3e:01:46:fd:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: May 25 03:01:02 2025 GMT
Not After : May 24 03:06:02 2026 GMT
Subject: CN=0D9B2C815AFE6ECF0A9731C3CF2D886757DE2CBB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:07:63:de:56:31:3f:80:f7:bb:99:ec:48:49:
53:a9:ea:7c:d5:5f:b2:ca:72:c6:8f:a4:f0:03:d0:
2b:ae:a5:0c:49:2f:32:89:30:24:a2:5a:f5:84:2e:
28:1b:03:d3:96:e7:21:3d:1c:4d:2a:e8:fb:ab:65:
71:1e:0c:cd:e0:56:e3:d6:40:02:28:6f:c0:43:ee:
d2:41:33:22:ce:04:3f:88:5c:0d:b5:bf:fd:6b:f9:
51:e5:c3:8c:d5:97:fb:91:d2:56:08:60:d5:b6:c3:
43:cb:80:7f:69:38:ed:21:e9:86:ee:a0:d4:92:f9:
51:cd:17:04:10:1e:86:83:da:03:87:ee:5f:1b:fa:
72:27:ea:65:c3:09:77:92:a7:cf:7e:ad:40:b1:7d:
ca:b6:0e:25:93:05:70:64:e0:59:f6:45:4f:c7:3f:
a7:07:3a:df:48:02:8b:8a:ae:a1:7d:da:e0:96:29:
d5:a9:f6:7e:4c:b1:d0:df:73:42:e6:10:2e:0f:90:
61:a0:e6:f1:87:c2:a9:be:39:e3:84:f7:2e:e0:d9:
9f:db:ec:12:99:0f:6a:0b:34:ba:93:71:20:d3:07:
cc:c8:da:1e:1a:20:ce:2f:19:ba:6e:8e:ff:35:c5:
fa:25:a0:3e:97:16:81:4b:c5:c1:8b:b2:b1:a9:a3:
f5:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:9B:2C:81:5A:FE:6E:CF:0A:97:31:C3:CF:2D:88:67:57:DE:2C:BB
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a366431613a3a2f34382d3438203d3e203136393039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:6d1a::/48
Signature Algorithm: sha256WithRSAEncryption
85:8d:81:14:8e:e5:17:28:96:a6:93:95:01:21:b7:10:2a:3c:
0a:6f:52:e6:46:3c:5f:b9:54:92:c9:98:85:26:5f:06:62:5d:
ba:85:53:49:3b:91:25:19:2a:e1:9d:4f:39:1d:60:5a:54:0b:
b8:fa:a1:f8:98:5e:25:cf:78:f5:89:39:48:43:09:cc:70:91:
4e:d9:75:ba:40:74:e9:83:a0:cd:49:6b:ac:86:03:c3:f8:09:
60:ca:90:ab:96:96:0b:00:aa:d2:ad:d9:04:e0:cd:e9:4d:cc:
82:63:46:18:c1:c3:93:1f:29:9b:e6:44:73:7a:ce:2c:c6:f4:
e7:ab:2d:36:dd:32:1b:1a:57:d2:96:0d:09:02:bd:67:b2:89:
2b:f9:56:41:99:4f:14:8c:8e:a7:7f:b1:bd:e1:84:a7:6a:df:
10:2f:3c:a4:ec:9c:e8:c7:f5:c3:78:bd:cd:ed:67:d5:f5:59:
52:06:0b:44:3a:6a:64:57:40:2d:02:f6:5d:c1:1f:88:49:7a:
36:10:c6:07:cf:df:63:7a:7b:4d:b4:b2:82:7b:03:9f:a3:8f:
fe:ed:fd:d1:81:87:0f:2b:ef:2b:ac:7c:7a:4a:6d:af:7c:01:
8b:9b:68:32:57:d8:b0:33:de:da:0e:e6:12:c1:4b:59:db:36:
03:de:54:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 23 23:53:30 2025 by rpki-client