Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363232323a3a2f34382d3438203d3e203136393039.roa
File: 326131343a373538343a363232323a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier: zZa0oIANtE8QlVhfCCDMREDqjwsAOoURsDpjQfL10g8=
Subject key identifier: F3:F6:EC:88:B5:D6:8E:CD:C4:6E:FF:69:73:48:72:F0:A9:18:B9:23
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 182612D37693679CCCD47A596050A9C94EB3DA09
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363232323a3a2f34382d3438203d3e203136393039.roa
Signing time: Mon 12 May 2025 16:18:09 +0000
ROA not before: Mon 12 May 2025 16:13:09 +0000
ROA not after: Mon 11 May 2026 16:18:09 +0000
asID: 16909
IP address blocks: 2a14:7584:6222::/48 maxlen: 48
Validation: Failed, certificate revoked on Tue 13 May 2025 21:30:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
18:26:12:d3:76:93:67:9c:cc:d4:7a:59:60:50:a9:c9:4e:b3:da:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: May 12 16:13:09 2025 GMT
Not After : May 11 16:18:09 2026 GMT
Subject: CN=F3F6EC88B5D68ECDC46EFF69734872F0A918B923
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:7a:b2:2e:9f:99:13:ca:5f:40:da:fa:32:cc:
8e:2e:c5:cd:40:c9:3b:37:f8:49:a3:50:c3:b7:5f:
67:71:6d:b3:01:9f:65:d9:0f:73:7e:ab:ab:52:83:
a3:68:5f:e0:44:0e:02:81:a8:95:31:fb:db:32:7d:
87:7f:d0:99:0a:99:47:f6:52:2d:a3:a1:98:05:64:
ca:c0:93:15:0a:15:0e:8e:c6:7b:a1:70:65:7b:d4:
d1:7c:ae:4c:84:c8:23:ee:73:a4:c1:5e:ef:c4:27:
4b:52:ea:af:aa:99:be:3a:53:39:4b:e6:0b:8f:33:
f9:c9:dc:ee:20:a9:b0:14:6c:47:22:2c:04:1e:2a:
f6:81:46:d4:fa:e8:c0:18:5d:b2:00:f0:50:6b:a1:
8d:a0:b2:ab:91:6f:bd:f6:15:1f:27:ce:d7:d4:5a:
e7:01:b5:03:23:d0:a8:51:af:1b:76:dc:10:0e:59:
57:2b:c0:2d:7d:4f:a9:9f:8f:c8:27:45:44:57:61:
87:11:f7:51:5d:3f:fd:94:16:56:19:82:23:b6:a1:
0e:53:0c:9f:07:14:71:a6:e7:c0:fc:a7:bf:98:63:
ac:49:60:9b:42:da:dc:e5:8d:4a:40:a9:67:01:7f:
60:4a:a7:7f:77:51:1c:ae:10:86:73:84:c3:89:df:
e1:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:F6:EC:88:B5:D6:8E:CD:C4:6E:FF:69:73:48:72:F0:A9:18:B9:23
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363232323a3a2f34382d3438203d3e203136393039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:6222::/48
Signature Algorithm: sha256WithRSAEncryption
5e:91:55:0e:a3:74:18:15:c7:8c:39:ba:62:18:d8:56:1f:0e:
0b:e5:88:9b:d0:ab:1c:d2:7f:10:42:53:99:e4:3e:63:60:29:
e9:c3:cf:a3:83:c5:61:5b:a1:8e:ad:e8:c5:37:4e:99:0d:aa:
cc:da:7e:7c:e4:66:38:75:7b:83:0b:ea:66:be:c8:d5:a1:d3:
0c:61:89:b0:d2:65:73:a1:96:24:bc:64:8c:7d:71:ea:11:a2:
10:ef:e7:85:4b:a4:3c:12:02:4e:70:f2:1b:56:a2:3c:84:7a:
16:c1:fa:da:a3:f2:bf:3b:74:fe:18:66:55:8a:9e:97:98:9a:
1e:83:c2:c4:03:bd:04:2a:66:70:01:06:7a:45:d6:87:31:35:
55:8f:86:96:e1:dd:28:ee:16:5e:29:e8:3a:af:5d:21:94:37:
de:4c:cf:e6:b9:c2:9d:e5:06:b3:c5:c3:0c:99:c3:19:08:4e:
80:24:70:a1:ae:05:7a:58:c5:fc:81:34:74:e8:a5:fc:83:1c:
ff:d2:d5:0c:45:e5:66:1f:70:c5:96:96:b7:96:16:7f:56:db:
cf:50:ec:af:ae:e1:77:6d:af:9c:fd:92:89:d5:45:e2:4f:b7:
4f:3f:5b:8c:e0:f5:4c:8a:14:b1:b3:10:e0:ef:c0:74:8c:78:
f9:f5:29:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 06:17:25 2025 by rpki-client