Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363235653a3a2f34382d3438203d3e203136393039.roa
File: 326131343a373538343a363235653a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier: 5vgvVp+1R71dqdhhzKxZOIl+0rv48kcvGEyB2R87FPw=
Subject key identifier: A6:ED:D6:0B:EB:49:5E:94:4D:5A:B0:B4:6B:1F:7F:11:4B:CC:29:8C
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 10ED1FF04CEC6CD7DB8E5DB0F206B2AB2F089796
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363235653a3a2f34382d3438203d3e203136393039.roa
Signing time: Mon 12 May 2025 16:18:03 +0000
ROA not before: Mon 12 May 2025 16:13:03 +0000
ROA not after: Mon 11 May 2026 16:18:03 +0000
asID: 16909
IP address blocks: 2a14:7584:625e::/48 maxlen: 48
Validation: Failed, certificate revoked on Thu 15 May 2025 00:42:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
10:ed:1f:f0:4c:ec:6c:d7:db:8e:5d:b0:f2:06:b2:ab:2f:08:97:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: May 12 16:13:03 2025 GMT
Not After : May 11 16:18:03 2026 GMT
Subject: CN=A6EDD60BEB495E944D5AB0B46B1F7F114BCC298C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:2b:62:8c:71:95:34:9b:d3:c0:39:76:ae:3a:
99:86:59:08:c2:64:56:8b:9a:74:1c:bc:71:03:8a:
2b:50:9b:8a:23:32:23:27:8f:a5:38:07:5f:29:de:
86:28:4e:89:e2:02:6b:4d:ce:3f:dc:82:c6:13:53:
1e:81:41:1f:50:7e:67:5b:bc:b9:38:34:99:62:f8:
9e:cd:91:26:d1:7f:3a:86:fd:21:9a:66:a0:85:4a:
9e:5e:e3:dd:18:41:3f:c5:8b:1e:30:73:49:3e:4f:
de:ab:c5:d4:75:43:06:d0:44:d6:20:36:65:f3:98:
3f:f2:62:a1:77:f8:37:af:41:97:d8:fe:32:73:61:
d5:58:35:07:8a:13:4f:5c:f1:ea:9d:16:94:9f:c5:
8a:8f:8f:08:91:53:91:56:79:58:62:61:53:67:7f:
0e:a6:bc:e8:9e:53:86:08:1f:ed:3b:88:b0:8a:ea:
87:d4:e2:46:26:5b:e0:fd:e0:bf:1d:54:33:56:72:
e6:f9:b0:2c:e7:0d:53:05:f0:ad:73:6d:1b:c0:15:
79:90:79:71:e2:69:76:a2:c7:b6:eb:a4:22:e8:64:
05:1b:2d:dd:be:f3:af:e7:58:34:a2:2e:18:0e:21:
66:a6:df:3f:30:4f:1d:91:c0:6c:bd:0e:e4:5f:ff:
a7:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:ED:D6:0B:EB:49:5E:94:4D:5A:B0:B4:6B:1F:7F:11:4B:CC:29:8C
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363235653a3a2f34382d3438203d3e203136393039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:625e::/48
Signature Algorithm: sha256WithRSAEncryption
88:55:9b:2c:e4:21:ab:d0:47:3e:b0:40:0b:47:b8:ba:11:b3:
e0:ec:23:f7:99:1f:7e:a2:c6:8c:f0:09:50:70:ae:fb:d8:55:
45:04:23:25:3a:09:f0:d8:74:c7:db:70:5f:4e:b7:35:38:b0:
4c:1a:9e:bf:a9:1c:a6:f2:6d:cc:4b:a6:f5:0a:d3:93:74:47:
04:48:a0:ce:2d:03:2c:23:9f:b4:f1:c1:4b:9e:0b:87:98:d8:
20:f1:2c:a8:8f:5a:fa:19:de:e2:b6:d4:95:57:1d:d5:e5:bc:
fc:60:35:6d:c6:3d:f9:fe:65:cd:27:29:76:c2:02:5b:58:77:
36:06:c8:db:02:46:3e:ec:65:8d:17:3c:76:c3:f5:00:26:07:
24:06:a2:c2:27:04:db:84:fc:c4:81:64:27:5e:21:dd:f7:50:
8c:de:0c:6c:11:c1:e6:d8:19:e2:53:28:67:8a:2b:12:22:dc:
51:55:d7:b8:15:85:0a:8b:49:89:0e:98:46:56:c5:95:83:08:
4b:df:07:c5:5d:38:fc:a4:cd:c7:a9:76:23:02:f9:05:14:c3:
dd:41:03:53:71:89:a1:4a:f4:ae:d4:57:ce:39:e0:68:94:7c:
34:06:21:83:d2:26:5c:9b:20:19:ac:28:de:e3:b0:ee:36:a9:
d2:68:74:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 07:33:48 2025 by rpki-client