Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363231333a3a2f34382d3438203d3e203136393039.roa
File: 326131343a373538343a363231333a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier: Ej6Y3hUd34y9/8lIkG2ml4afxe8x4V0jbOIKCr664Sg=
Subject key identifier: CE:B6:74:76:90:E6:4F:2C:B8:C9:15:0B:8F:E1:58:C7:D0:2C:05:B4
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 267A2F0B6256D8EDEDDF89433ABCD056269648FF
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363231333a3a2f34382d3438203d3e203136393039.roa
Signing time: Mon 12 May 2025 16:18:03 +0000
ROA not before: Mon 12 May 2025 16:13:03 +0000
ROA not after: Mon 11 May 2026 16:18:03 +0000
asID: 16909
IP address blocks: 2a14:7584:6213::/48 maxlen: 48
Validation: Failed, certificate revoked on Mon 12 May 2025 21:30:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
26:7a:2f:0b:62:56:d8:ed:ed:df:89:43:3a:bc:d0:56:26:96:48:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: May 12 16:13:03 2025 GMT
Not After : May 11 16:18:03 2026 GMT
Subject: CN=CEB6747690E64F2CB8C9150B8FE158C7D02C05B4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:4d:d6:ed:3a:79:91:34:85:33:27:7c:9d:11:
b0:2e:24:14:82:4a:50:15:87:f9:87:46:f0:aa:31:
42:b4:6d:da:f3:0f:ad:1d:0f:3a:a4:6e:d5:37:2e:
16:0f:fe:6a:94:ef:3c:b0:5c:26:4b:c5:fa:e8:b3:
09:f7:96:1e:7f:90:e1:37:6b:57:ab:f2:1f:70:60:
7e:97:75:f8:cd:53:7b:a8:7f:29:72:e6:6b:d8:01:
91:d9:82:90:9f:54:48:20:62:40:b2:a7:9c:7b:73:
67:8d:5e:19:05:e4:96:ad:ee:20:fa:c7:68:d3:1b:
ec:f7:e6:51:d1:e5:47:d5:74:ee:70:2d:4d:eb:e7:
47:5d:69:d9:c2:f2:60:bf:d5:0a:6b:54:ba:cb:58:
fc:17:d2:c1:6f:52:b8:ee:f1:4c:d9:f0:72:07:e9:
2c:bc:0c:93:1c:3e:09:96:14:bb:d0:83:a2:a3:87:
e3:11:25:d0:6a:56:56:d6:d0:aa:18:eb:a4:c8:57:
8c:58:22:b4:6a:41:51:e8:25:b0:dd:d3:a9:7d:d1:
e9:1c:cb:a5:1a:e1:30:70:10:91:f3:71:d3:2f:37:
94:c8:c4:04:e1:69:e4:d6:95:42:09:32:9f:8e:78:
45:80:09:55:af:75:e7:b6:31:38:e6:ce:f1:4d:ef:
d6:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:B6:74:76:90:E6:4F:2C:B8:C9:15:0B:8F:E1:58:C7:D0:2C:05:B4
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363231333a3a2f34382d3438203d3e203136393039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:6213::/48
Signature Algorithm: sha256WithRSAEncryption
6f:ce:0a:52:d5:13:4d:df:89:34:1f:c8:71:2b:9b:be:ca:25:
8d:8d:f0:a0:78:a8:4d:ed:a0:31:4b:53:94:a9:5d:c3:0d:cc:
78:7c:a7:e5:05:10:ef:1e:fd:b2:03:56:2a:ef:0f:e8:b5:b3:
b6:a6:f5:11:4b:ec:ec:a1:14:0e:b1:56:c1:f7:cd:b1:32:51:
6b:bd:37:01:a9:26:87:23:cb:4a:c2:5f:cf:81:98:83:fe:a7:
e3:cc:63:18:f1:ae:04:a0:38:74:84:2d:0f:94:a2:a8:ac:ca:
e4:d7:12:41:d3:08:27:15:fe:a5:56:58:91:79:b6:88:9f:a9:
33:3b:83:a7:53:3e:44:2a:c3:aa:80:ee:d1:9e:fc:c5:92:d3:
a5:ab:f6:64:32:67:1d:39:53:9f:83:82:05:91:b5:5b:1b:59:
bd:4d:4b:02:89:bb:8a:3f:60:be:c3:39:65:78:73:a8:64:b8:
a3:2a:83:fd:1d:27:84:b4:66:8e:2e:6c:8d:de:c5:58:32:90:
3a:bf:87:1c:38:ad:8e:50:7a:0e:4b:9f:ed:b2:01:cd:8d:1d:
0f:61:a3:fb:c0:9f:94:b6:4b:43:41:80:75:d9:29:a5:b4:89:
6e:f0:71:6e:cc:a4:dd:f2:74:3f:ba:6c:0d:80:cb:63:48:4f:
80:37:25:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 02:53:00 2025 by rpki-client