Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363230633a3a2f34382d3438203d3e203136393039.roa
File: 326131343a373538343a363230633a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier: ++QHuiAT/c4ga9l/SdKQZrZFQJJeyd5ojHtULqqA5l0=
Subject key identifier: E6:DC:18:4E:DA:B7:01:AF:F4:23:BF:08:1E:CD:B6:78:EF:34:0B:63
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 0166FBD8A1BD867453DE7F5D05D4970B288D50F9
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363230633a3a2f34382d3438203d3e203136393039.roa
Signing time: Mon 12 May 2025 16:18:04 +0000
ROA not before: Mon 12 May 2025 16:13:04 +0000
ROA not after: Mon 11 May 2026 16:18:04 +0000
asID: 16909
IP address blocks: 2a14:7584:620c::/48 maxlen: 48
Validation: Failed, certificate revoked on Mon 12 May 2025 21:30:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:66:fb:d8:a1:bd:86:74:53:de:7f:5d:05:d4:97:0b:28:8d:50:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: May 12 16:13:04 2025 GMT
Not After : May 11 16:18:04 2026 GMT
Subject: CN=E6DC184EDAB701AFF423BF081ECDB678EF340B63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:47:20:20:fe:7c:9a:91:26:53:8d:53:6f:f0:
17:bf:ef:4d:26:09:29:8a:c0:a9:8c:ff:63:3a:d9:
7e:99:c7:be:79:7b:f1:12:c7:74:b1:0f:a8:dc:f0:
20:57:52:92:ba:6c:fd:4e:b0:e2:6a:1c:56:8e:06:
8a:f6:db:b4:a0:d6:94:5f:8f:d0:25:b3:ae:99:6f:
f1:ad:ef:a1:f7:e7:6d:10:f9:fb:dd:81:4f:88:bf:
2a:1b:6d:90:b1:2e:4b:af:d5:82:6f:0f:7b:d4:fe:
d8:06:df:b8:85:66:f5:58:bc:b7:4b:ac:11:18:6c:
77:1a:c9:54:39:da:a0:6f:cb:2a:d4:a5:04:6b:2b:
22:a7:94:bc:7d:61:83:d6:6c:d3:4e:51:e9:76:05:
a1:fd:54:b6:81:69:b4:73:e0:1e:97:56:6b:55:83:
6b:00:ed:12:8b:09:01:29:d9:b0:96:33:ff:7d:a1:
2a:55:38:14:97:fd:f0:df:01:7f:b7:25:e3:61:f7:
f2:d3:1d:4e:b7:f1:ef:22:b3:43:c8:71:c8:3d:45:
5c:58:fe:46:00:a9:f6:7e:64:64:55:94:61:4b:d6:
87:29:83:c7:18:af:d6:7f:ca:33:02:5b:83:a9:4e:
92:8f:fd:40:00:42:a1:7c:1d:f0:cf:06:43:14:f1:
3f:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:DC:18:4E:DA:B7:01:AF:F4:23:BF:08:1E:CD:B6:78:EF:34:0B:63
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363230633a3a2f34382d3438203d3e203136393039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:620c::/48
Signature Algorithm: sha256WithRSAEncryption
6c:6b:bd:3b:79:89:e7:90:09:99:1b:66:ae:61:72:fb:c2:43:
5b:39:55:62:bc:94:d1:29:0e:72:7c:3c:99:73:02:bb:87:35:
e1:f7:bc:77:c9:68:06:fe:6a:d0:8f:0c:83:9a:31:e9:12:bb:
43:e6:96:e4:ad:10:b0:a0:4d:4d:3e:ea:2c:f4:00:d9:fb:09:
3b:b1:45:d3:4f:a0:fc:7c:c1:7e:7d:a7:61:ce:68:83:da:ed:
65:a8:0a:83:f8:77:8c:4a:fa:5f:ca:9e:af:b4:56:ed:09:7c:
52:07:d3:36:46:67:ce:b5:c5:8c:b9:ed:8f:cd:87:39:3a:37:
44:e3:59:7c:3d:0d:69:06:0d:36:a3:21:69:8b:f9:2e:6c:65:
ca:eb:5e:cd:8b:11:a4:73:f5:8f:72:22:10:a3:41:0b:34:d9:
97:b1:a9:b5:e6:46:99:3c:63:11:d1:76:b9:36:fc:dc:7c:3d:
04:9f:45:e7:c2:06:84:12:e8:a3:f1:28:39:96:ca:ab:de:29:
a4:e6:60:09:57:c8:c7:c8:99:2d:ac:89:01:30:b9:b1:07:6e:
91:75:c4:5e:3b:fd:99:69:f1:a1:ff:9f:02:b5:eb:67:4b:e9:
84:20:4f:c1:68:b8:4d:bd:72:af:72:71:df:4c:99:e3:20:58:
74:78:a3:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 07:25:58 2025 by rpki-client