Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363064323a3a2f34382d3438203d3e203136393039.roa
File: 326131343a373538343a363064323a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier: nEmbMR9bBPGI26LuQn5YFNZPTeqieMKhQp8oHs5s3Zc=
Subject key identifier: A6:77:68:84:BF:11:6E:90:6F:44:90:C6:D2:88:2A:DB:78:43:7C:BF
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 6F260FA602ABE4A4DBFFFC92A6D0037E7C113A56
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363064323a3a2f34382d3438203d3e203136393039.roa
Signing time: Sat 22 Mar 2025 15:22:53 +0000
ROA not before: Sat 22 Mar 2025 15:17:53 +0000
ROA not after: Sat 21 Mar 2026 15:22:53 +0000
asID: 16909
IP address blocks: 2a14:7584:60d2::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 02 Apr 2025 18:44:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6f:26:0f:a6:02:ab:e4:a4:db:ff:fc:92:a6:d0:03:7e:7c:11:3a:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: Mar 22 15:17:53 2025 GMT
Not After : Mar 21 15:22:53 2026 GMT
Subject: CN=A6776884BF116E906F4490C6D2882ADB78437CBF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:36:ce:31:db:be:b0:17:bb:ee:8a:66:68:fd:
12:73:40:3a:d5:44:2d:60:47:06:b8:46:6d:99:a6:
2c:c7:01:23:77:fd:5b:40:65:9b:86:73:af:3f:cb:
0d:29:4c:24:4c:9c:80:2e:89:9b:d2:fe:e0:d6:2b:
bd:55:5e:72:1e:d1:eb:20:61:80:7c:d3:81:cd:08:
8d:c6:b0:97:aa:aa:1e:5b:5b:ad:bb:c1:69:e0:bf:
60:84:44:06:dc:da:98:b4:4d:c4:24:fe:24:4a:7b:
7a:f0:87:9c:5f:c0:0b:90:df:12:a2:53:be:7f:3a:
59:b0:d1:df:16:7d:ec:c3:ef:d4:6e:11:6b:9d:74:
db:18:b8:f7:d4:d8:92:e7:9a:b1:9b:21:4f:a1:9c:
5f:46:78:d2:ec:77:15:f4:4d:44:da:59:cc:27:46:
4b:88:8f:b3:6e:d5:8e:a1:5e:93:ec:97:98:06:8c:
68:df:f7:b3:26:a5:e2:ba:7e:7d:6d:bf:85:f8:79:
18:86:0a:64:27:b4:39:10:ff:d9:af:0a:68:4c:04:
8a:91:1f:e8:a9:9f:2f:cf:17:15:2b:61:14:6b:b9:
bd:ed:5c:ca:b3:9d:79:d8:00:dd:94:41:39:4c:4b:
d0:b8:81:0f:a0:d4:d9:10:f4:91:2a:f8:e6:0a:2d:
b8:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:77:68:84:BF:11:6E:90:6F:44:90:C6:D2:88:2A:DB:78:43:7C:BF
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363064323a3a2f34382d3438203d3e203136393039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:60d2::/48
Signature Algorithm: sha256WithRSAEncryption
a8:23:a2:9a:65:f1:69:63:2c:df:c3:26:56:73:c2:b9:95:0c:
50:b5:3f:d4:5f:c4:b5:80:d5:10:c2:b8:a1:ab:98:23:7d:3b:
2c:b4:b5:af:72:1e:73:83:65:de:2c:ae:82:95:a4:93:6a:f9:
18:4d:75:8a:05:9b:e6:e4:1a:97:19:2b:6d:58:9a:2b:f9:4e:
83:f1:e5:ac:28:a1:8d:fe:15:d3:37:7e:70:4b:58:14:3a:d0:
b9:cd:24:62:da:72:21:2a:19:de:1a:86:e1:26:f2:19:34:0f:
c8:10:93:da:30:b7:ee:92:d8:c5:d3:cf:07:62:23:32:61:d6:
13:13:e6:e2:ca:ef:a3:25:81:66:af:e4:87:b5:6b:2b:cd:fd:
a1:40:20:a9:54:7c:37:6d:14:35:92:a6:8b:fd:65:a0:22:c4:
d6:e1:e8:b4:de:2f:8e:d1:38:82:49:c9:4e:70:7c:66:a1:54:
fd:53:68:a7:01:71:f3:f2:78:b1:17:50:a8:10:68:da:19:dd:
aa:8e:13:61:34:69:8b:7e:e1:96:4f:14:0f:8d:e4:37:c8:3f:
c7:ef:d3:9e:29:1d:f4:dd:d2:7e:1b:20:0a:cc:9d:27:8c:9b:
23:da:42:70:8f:18:cc:d6:92:fe:19:ff:dd:2d:65:a7:57:9a:
5e:74:50:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 00:45:53 2025 by rpki-client