Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a366638343a3a2f34382d3438203d3e203136393039.roa
File: 326131343a373538343a366638343a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier: mAmdJNOM5esKR1iirdDP/59kS+3K3+WFWIUBBKVxXv0=
Subject key identifier: A3:CB:DB:42:D3:21:58:A4:76:CD:50:55:DF:B1:03:D2:56:C0:91:23
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 7A7E0C6D334677A1866F5FC5296A92AAD0A56F04
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a366638343a3a2f34382d3438203d3e203136393039.roa
Signing time: Mon 26 May 2025 20:18:02 +0000
ROA not before: Mon 26 May 2025 20:13:02 +0000
ROA not after: Mon 25 May 2026 20:18:02 +0000
asID: 16909
IP address blocks: 2a14:7584:6f84::/48 maxlen: 48
Validation: Failed, certificate revoked on Thu 29 May 2025 13:24:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7a:7e:0c:6d:33:46:77:a1:86:6f:5f:c5:29:6a:92:aa:d0:a5:6f:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: May 26 20:13:02 2025 GMT
Not After : May 25 20:18:02 2026 GMT
Subject: CN=A3CBDB42D32158A476CD5055DFB103D256C09123
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:19:1b:5e:e6:ad:b1:4f:84:52:19:29:c6:4c:
23:da:ad:3a:60:05:23:ab:b9:de:61:c7:44:a1:21:
1a:83:70:5b:3b:9f:0b:45:fb:99:ec:8e:f8:c0:3e:
18:22:c5:46:ec:e7:0d:15:f3:a7:e4:9b:0f:c9:99:
f3:5c:89:cd:50:51:97:27:14:6e:cf:c3:c2:b4:fd:
2d:19:9d:72:d0:51:d3:75:cb:33:ed:6d:a7:01:fd:
7e:2a:53:9f:9e:62:80:3b:20:5d:9d:b1:08:a6:e8:
21:d6:3f:96:d1:e5:00:8a:da:3b:a4:8d:a8:b7:f5:
d6:82:67:98:63:71:8a:98:6f:27:fa:75:7b:57:c7:
76:18:d9:89:9a:e2:3f:f4:b7:84:69:6d:45:a7:80:
d5:42:09:80:06:2e:64:f3:ba:0d:8d:2f:2e:da:01:
15:c8:53:be:e0:c8:82:ef:f4:af:0d:28:0a:18:be:
ae:fa:a8:a9:97:7c:33:64:e3:98:3a:4c:20:a8:e5:
34:03:e4:78:e4:48:cd:15:99:36:41:4b:da:41:6e:
80:8d:ed:35:3e:93:59:58:23:76:12:98:76:a7:26:
b0:42:3b:36:de:20:6b:34:05:6e:72:43:5b:07:75:
9e:a1:07:d3:67:b3:52:65:44:f7:66:4f:8c:f3:fc:
24:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:CB:DB:42:D3:21:58:A4:76:CD:50:55:DF:B1:03:D2:56:C0:91:23
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a366638343a3a2f34382d3438203d3e203136393039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:6f84::/48
Signature Algorithm: sha256WithRSAEncryption
55:91:43:71:95:d7:ea:0b:0b:18:54:5a:c1:17:f7:5c:db:54:
b7:13:52:5c:52:e6:98:5b:a3:15:24:70:a6:41:d5:46:2a:d7:
a1:7b:c8:e8:73:31:30:33:d6:79:fc:b8:ad:cc:45:0a:e0:f8:
5f:ae:c0:16:f0:7f:1e:46:83:e0:9b:c2:93:b5:13:a5:23:13:
4f:8f:64:e0:81:ab:f0:e3:77:a0:26:06:0e:0b:ac:bd:65:51:
8f:eb:7a:f8:5d:83:32:bf:0a:9f:77:b3:09:35:45:eb:20:68:
df:35:9d:3a:21:c7:b1:1e:ba:f7:5a:ff:31:d7:86:c9:75:0b:
c8:03:40:79:aa:9c:1f:9b:77:28:f4:10:c4:c5:79:ea:06:c1:
23:5a:01:32:de:73:3d:be:68:0a:00:0c:0d:35:7a:8e:7c:7f:
a9:e0:ed:4d:55:fb:66:d7:72:2c:a7:36:f9:8e:72:5e:86:c7:
5c:43:18:80:b8:0e:1b:44:e6:2a:c4:ff:f7:d9:f5:24:5c:d7:
0e:1d:2d:11:75:5b:5a:be:9e:0c:66:4d:39:4f:4f:9a:93:67:
af:82:df:cc:97:dd:da:d4:c0:d1:a4:13:c8:e7:fc:1a:58:4d:
db:04:de:46:4d:c6:ca:50:93:59:8a:ba:9d:10:c4:df:ec:c3:
e9:84:27:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 25 01:02:51 2025 by rpki-client