Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363231323a3a2f34382d3438203d3e203136393039.roa
File: 326131343a373538343a363231323a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier: FK4AGbPOZcslXqPB0ygTfiC4ozfRY/uYog78zw3xPyo=
Subject key identifier: DE:F5:2A:D9:F2:3B:91:12:6B:63:62:1D:8E:4C:D8:15:5C:17:EB:4C
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 29C6AD7907F26698884C72BC257F456056206123
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363231323a3a2f34382d3438203d3e203136393039.roa
Signing time: Mon 12 May 2025 16:18:04 +0000
ROA not before: Mon 12 May 2025 16:13:04 +0000
ROA not after: Mon 11 May 2026 16:18:04 +0000
asID: 16909
IP address blocks: 2a14:7584:6212::/48 maxlen: 48
Validation: Failed, certificate revoked on Tue 13 May 2025 11:36:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
29:c6:ad:79:07:f2:66:98:88:4c:72:bc:25:7f:45:60:56:20:61:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: May 12 16:13:04 2025 GMT
Not After : May 11 16:18:04 2026 GMT
Subject: CN=DEF52AD9F23B91126B63621D8E4CD8155C17EB4C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:15:bd:c6:73:cb:79:1c:2d:ad:1b:65:5a:ac:
9d:8c:0b:e3:df:ae:58:3d:e1:84:ad:ff:07:fb:9d:
c8:54:f5:32:19:4a:c0:6d:f8:6e:e9:85:ad:f8:6e:
41:ba:9a:8c:77:6e:b1:88:4f:f9:90:42:21:5c:10:
f2:1e:20:f2:3e:03:9b:76:6f:21:d4:78:3a:ab:dc:
1a:a7:aa:75:e6:cf:67:9e:b8:04:14:5b:1f:4e:d1:
e3:fc:13:f5:ea:71:a1:38:60:e8:d5:22:13:f8:c0:
f7:d3:33:90:f0:fa:6d:8a:5e:ad:b9:e8:0f:e1:11:
ad:dc:4a:33:77:a6:58:56:ee:21:82:98:af:f6:aa:
9b:cd:47:5f:a6:69:b0:ec:41:28:ad:e8:4f:8d:bc:
20:16:52:ab:25:2a:00:c2:15:03:eb:4f:32:fe:b0:
98:3e:2b:ea:78:16:67:43:32:42:d4:73:10:27:3d:
a0:78:89:22:9e:4c:ec:0e:2d:b3:26:f2:9f:66:a4:
a9:47:45:07:b7:8a:db:6e:b6:c2:43:50:5d:ad:8f:
3e:bd:1a:0b:b2:84:ae:bd:55:08:6a:8a:3f:e7:17:
b0:0c:90:fc:1b:22:b9:ec:0c:26:b6:8f:7a:93:88:
cc:2d:c6:1a:0e:cd:36:74:77:4e:e0:8c:51:1d:ff:
0e:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:F5:2A:D9:F2:3B:91:12:6B:63:62:1D:8E:4C:D8:15:5C:17:EB:4C
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363231323a3a2f34382d3438203d3e203136393039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:6212::/48
Signature Algorithm: sha256WithRSAEncryption
66:54:79:e6:06:a3:3d:be:07:dc:c8:f5:95:03:84:c5:b2:d9:
5f:74:cf:3d:34:fc:9f:a7:1e:b0:4c:ae:88:56:15:b1:28:fd:
8e:dd:74:d0:e4:77:39:9e:16:6e:b7:02:d1:ed:ce:8d:1d:97:
11:fa:c0:58:a3:52:41:fb:ae:03:1c:52:7f:02:7b:ee:84:21:
af:e3:dc:db:f7:4e:02:ef:dd:60:70:57:57:17:15:97:c5:9a:
8e:5f:14:12:e6:02:28:5c:d2:ee:90:95:e7:3f:50:0a:16:5b:
14:0b:75:e9:dd:50:a9:0c:f0:4f:5c:76:87:7a:ce:6d:d7:21:
19:c8:2c:bb:10:04:0d:f5:a6:6a:7e:3d:19:95:58:35:cc:2a:
e9:9b:e1:ec:5f:65:70:b4:12:59:5c:bb:ff:ec:37:c3:bf:37:
b4:a6:63:52:0e:51:71:50:57:12:3f:58:26:6c:2b:55:7c:89:
1a:33:97:9c:1b:b8:aa:c2:c2:d5:ac:a4:c6:f6:e2:3b:60:0c:
e8:fa:9e:14:f7:dc:eb:52:10:3e:7a:23:20:7c:2c:94:96:03:
56:75:fb:09:1a:2b:16:5f:e1:a6:39:32:a2:42:0d:3e:b7:61:
3a:c3:2f:4b:1f:cd:65:37:3f:73:ad:f8:6b:8b:b8:c8:de:1d:
54:eb:10:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 07:18:18 2025 by rpki-client