Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363230393a3a2f34382d3438203d3e203136393039.roa
File: 326131343a373538343a363230393a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier: PQucpsXV/ilf+974jQGxAa9HMJunw0bENQOgpb3dvS8=
Subject key identifier: 40:D9:80:37:E9:C4:2A:C3:8A:3B:73:1B:4A:D0:34:53:18:09:B3:65
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 71DD0ABEF2896CE152616F8226D167B8DC8F7783
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363230393a3a2f34382d3438203d3e203136393039.roa
Signing time: Mon 12 May 2025 16:18:08 +0000
ROA not before: Mon 12 May 2025 16:13:08 +0000
ROA not after: Mon 11 May 2026 16:18:08 +0000
asID: 16909
IP address blocks: 2a14:7584:6209::/48 maxlen: 48
Validation: Failed, certificate revoked on Sat 31 May 2025 17:16:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
71:dd:0a:be:f2:89:6c:e1:52:61:6f:82:26:d1:67:b8:dc:8f:77:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: May 12 16:13:08 2025 GMT
Not After : May 11 16:18:08 2026 GMT
Subject: CN=40D98037E9C42AC38A3B731B4AD034531809B365
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:e4:82:b3:fb:9a:85:7a:53:ea:23:79:a6:67:
28:a3:6d:3e:55:06:f8:a4:9a:bd:85:14:36:0c:6f:
6a:7a:9e:72:2a:fb:51:49:2d:97:fc:a9:3a:60:65:
14:fe:d7:11:2e:7e:13:55:8e:77:2f:f3:58:40:4e:
5b:99:56:e9:73:bd:b1:f7:37:68:95:98:7b:4b:c8:
a6:d6:7a:fc:8e:dc:96:fa:52:80:fe:82:56:d0:4a:
43:e6:bf:63:cd:67:6a:53:a1:f3:10:af:e8:1b:87:
e6:65:c0:be:15:4c:06:c5:58:00:d9:af:47:f0:3b:
9b:1e:87:58:13:8a:59:15:f6:81:e0:42:d1:dc:75:
e6:43:48:b3:70:59:95:e7:2f:2f:01:11:cd:17:5e:
85:59:8b:ac:65:49:15:07:48:fa:d0:6c:de:8b:bd:
0f:2c:45:99:71:d2:36:25:a0:45:54:25:e6:b3:c5:
66:b8:fd:ae:b8:ae:c1:e3:d2:ef:c5:6b:5d:4a:0a:
20:8c:df:09:ba:da:c3:ca:01:2d:c7:64:3a:fe:e1:
ad:0c:0d:1a:90:9c:0e:d1:6e:b6:6e:c7:b7:fc:b8:
a9:99:12:f4:1f:07:87:87:00:84:b8:26:88:ce:8e:
29:00:7c:cd:c3:ee:aa:10:03:73:e5:84:20:38:6b:
15:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:D9:80:37:E9:C4:2A:C3:8A:3B:73:1B:4A:D0:34:53:18:09:B3:65
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363230393a3a2f34382d3438203d3e203136393039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:6209::/48
Signature Algorithm: sha256WithRSAEncryption
84:f1:17:44:49:0d:46:22:5e:ca:2f:e2:b9:34:0a:39:87:97:
22:c1:d8:52:75:c8:00:bb:cb:e7:7c:d9:de:bc:fd:7d:79:55:
ab:12:9a:41:0a:c5:02:e6:fe:2c:1e:81:13:60:c2:0d:95:e8:
b2:f5:79:3c:db:9b:64:d2:da:ad:9a:74:bc:6a:af:47:f1:51:
92:12:cd:4f:d9:13:ca:7c:f9:58:9b:5c:2c:cd:20:43:c5:0d:
9b:71:e1:2a:3a:9e:7f:b8:80:7d:5f:11:8e:69:1f:a7:6b:5d:
f1:f2:65:f7:c3:de:af:0a:3d:53:a6:6c:04:02:63:74:de:06:
18:e1:62:80:b2:3e:a0:ec:1a:a5:e6:79:1c:71:d1:41:1d:db:
29:8e:59:82:c9:24:f1:a6:1c:d3:cc:87:ab:9d:87:f6:70:af:
3f:3f:4e:c7:a3:37:d4:f8:d6:aa:2f:f7:dc:45:13:58:66:1a:
2b:16:94:bf:bb:e7:8d:c7:37:dd:3d:41:be:d0:bf:ca:83:25:
25:bf:3d:a5:70:66:25:05:ca:7c:d6:cc:98:47:90:f7:b2:58:
70:aa:7b:53:4c:06:30:5f:74:1f:e4:10:9f:a7:b8:7c:53:31:
a9:ed:7a:21:e3:9c:fa:b3:1c:0a:ec:fa:f5:fa:d9:89:ef:e8:
77:74:45:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 13:22:50 2025 by rpki-client