Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363232393a3a2f34382d3438203d3e203136393039.roa
File: 326131343a373538343a363232393a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier: h6/3NAnlIP3a3iWBf9aQpS5HR+6AfvjEXlBgnHAgZxU=
Subject key identifier: 60:CB:9A:5A:3F:1E:84:45:67:47:FB:4A:6E:98:D4:71:C9:E8:EA:8B
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 2F93436FD03F1D40B93996653E394D008F4C8307
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363232393a3a2f34382d3438203d3e203136393039.roa
Signing time: Mon 12 May 2025 16:18:06 +0000
ROA not before: Mon 12 May 2025 16:13:06 +0000
ROA not after: Mon 11 May 2026 16:18:06 +0000
asID: 16909
IP address blocks: 2a14:7584:6229::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 14 May 2025 11:24:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2f:93:43:6f:d0:3f:1d:40:b9:39:96:65:3e:39:4d:00:8f:4c:83:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: May 12 16:13:06 2025 GMT
Not After : May 11 16:18:06 2026 GMT
Subject: CN=60CB9A5A3F1E84456747FB4A6E98D471C9E8EA8B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:cf:05:06:10:1a:90:1b:92:49:7b:7e:0c:99:
58:75:22:d6:16:81:07:dc:9f:0f:a6:56:df:58:0e:
51:5a:3d:c2:82:f9:9d:43:0f:dc:b8:d6:d5:ed:37:
53:d7:14:f0:33:51:47:65:9d:dc:8a:44:4b:22:7b:
89:45:de:ea:b4:75:15:f1:e2:48:06:b7:f9:34:89:
d2:fe:8e:f5:ba:75:74:b8:dd:8a:20:0c:da:65:12:
b7:2e:fd:db:a5:34:74:bc:72:8a:99:47:10:fe:23:
fa:39:19:71:33:ab:d8:02:ce:fb:4e:83:09:33:4a:
7b:da:24:cb:ac:4f:bd:f7:ef:13:d1:53:55:66:28:
b8:c4:d2:10:8c:4b:9d:2f:94:bf:e1:bf:49:68:17:
ec:98:24:69:32:39:ae:79:2f:ae:e5:57:a9:63:8d:
ba:6e:61:31:5a:e9:ee:f0:0f:e4:70:34:a4:29:75:
df:6f:9c:9c:5b:ab:9f:a8:0e:b8:f5:1b:ef:ac:8a:
48:63:fb:63:d4:47:17:b5:23:fb:a5:23:dd:b0:8c:
95:6e:eb:30:eb:ec:19:36:d3:8a:33:a6:66:1b:43:
89:ad:6f:10:10:f0:c4:a6:ca:00:f8:2d:bd:d8:25:
d0:4a:77:07:c9:25:a1:88:8f:aa:1c:f4:89:72:9a:
4d:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:CB:9A:5A:3F:1E:84:45:67:47:FB:4A:6E:98:D4:71:C9:E8:EA:8B
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363232393a3a2f34382d3438203d3e203136393039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:6229::/48
Signature Algorithm: sha256WithRSAEncryption
3e:3b:61:23:bf:c5:96:fc:0d:d8:74:ca:04:eb:16:c8:2f:98:
df:05:c7:1a:81:94:9e:62:d9:d8:0a:61:52:f1:11:26:fc:8c:
ec:61:3c:61:01:96:8f:72:b1:0a:45:cf:81:8b:0d:aa:21:e0:
56:de:e4:93:6f:e6:5a:a1:17:ec:0a:b7:08:ae:5f:04:c0:53:
1c:70:f8:c8:f7:26:24:32:88:8f:74:e4:56:73:aa:bb:2c:23:
d6:51:5f:4d:1b:de:8e:98:37:14:c6:44:38:17:93:f2:fe:83:
1e:8e:0a:40:84:2d:56:51:0b:db:9b:22:27:f6:73:51:52:50:
7e:dd:c2:b8:e2:92:ce:5d:df:27:82:32:6a:11:1e:34:d4:e0:
2d:dc:03:62:f4:c5:20:3d:b4:e5:83:2f:2b:d8:c2:cf:2a:5a:
3e:1a:2f:ee:d8:bd:0a:0a:6d:e3:7b:5d:9a:c6:e9:e7:5f:ab:
2f:ea:61:21:d2:68:a5:a9:78:b9:1e:34:7d:6f:9f:bb:90:18:
3a:a5:49:91:27:f1:1f:b1:16:8e:a9:7e:14:09:b2:e7:bd:f9:
c3:9e:81:f1:f3:ee:2e:37:50:f3:09:8c:b6:f7:d6:a1:6a:e4:
b4:6f:52:a3:a0:29:c3:cd:90:67:ff:51:f1:8f:06:f2:96:09:
1c:1b:52:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 02:59:58 2025 by rpki-client