Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363236323a3a2f34382d3438203d3e203136393039.roa
File: 326131343a373538343a363236323a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier: DR025tnLvJ/qxtv7ZYM876m7tGnwZmrJ1yq1MsnA7hg=
Subject key identifier: 7A:B0:D0:6C:44:D3:EE:F2:77:42:97:CA:24:68:41:E4:38:0E:F1:EF
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 12F168B874D7B1785C2118B992E435D55DB55679
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363236323a3a2f34382d3438203d3e203136393039.roa
Signing time: Mon 12 May 2025 16:18:05 +0000
ROA not before: Mon 12 May 2025 16:13:05 +0000
ROA not after: Mon 11 May 2026 16:18:05 +0000
asID: 16909
IP address blocks: 2a14:7584:6262::/48 maxlen: 48
Validation: Failed, certificate revoked on Thu 15 May 2025 10:42:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
12:f1:68:b8:74:d7:b1:78:5c:21:18:b9:92:e4:35:d5:5d:b5:56:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: May 12 16:13:05 2025 GMT
Not After : May 11 16:18:05 2026 GMT
Subject: CN=7AB0D06C44D3EEF2774297CA246841E4380EF1EF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:63:e7:8b:0f:c6:2a:c7:72:95:b4:81:9f:93:
f3:17:82:bb:90:4f:2a:47:9c:75:80:93:21:fc:68:
a2:40:1c:af:52:fc:d8:be:fa:06:dd:46:fe:7b:4d:
c2:09:25:5d:9e:5d:01:e0:27:96:76:41:8c:28:e1:
45:14:23:5c:e8:4b:2c:95:50:a7:1c:7b:b2:14:44:
ff:b3:0e:49:49:cf:c1:70:54:e7:0a:15:87:f4:fd:
a0:bf:f8:16:b5:49:6c:af:8d:1b:8e:c8:51:6c:16:
ce:91:a0:0b:39:fa:47:6a:86:d2:2b:c5:27:5c:65:
25:69:92:25:6c:47:fd:f1:f4:ac:20:27:ac:7a:28:
10:41:ff:57:3e:29:e8:23:ad:b6:3a:e8:55:83:e2:
c4:0a:22:e1:ae:88:13:14:70:65:a7:77:12:db:06:
fb:dd:b4:87:72:03:34:31:ec:f2:ed:e6:91:55:7c:
83:98:bd:f6:76:75:21:29:b4:95:a8:ad:ac:ad:83:
84:dd:38:cb:4a:e0:20:ee:0a:6a:b9:7d:1b:03:62:
8a:a7:3d:ef:69:7e:43:66:76:0f:41:99:91:03:0d:
eb:a6:41:cc:5e:e7:02:d1:00:36:3c:b3:6e:a2:66:
3c:18:fe:63:ed:a6:95:59:07:43:21:9e:da:40:ce:
b0:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:B0:D0:6C:44:D3:EE:F2:77:42:97:CA:24:68:41:E4:38:0E:F1:EF
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363236323a3a2f34382d3438203d3e203136393039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:6262::/48
Signature Algorithm: sha256WithRSAEncryption
3f:1d:7c:2b:89:13:d5:57:9e:db:70:19:16:6d:b1:3c:5f:ce:
94:e9:c0:03:1b:a6:f1:3a:5f:d6:63:ab:5c:47:86:35:1a:9f:
85:48:ec:e4:1d:4a:0e:68:03:2b:7b:a2:e7:4c:9a:9b:b7:03:
ac:97:85:5d:71:01:c2:31:fc:15:b0:ff:25:86:9e:c3:7f:e4:
41:05:32:2e:a2:5c:bc:15:e9:f4:d3:83:90:0a:1d:60:5f:8a:
1e:bf:14:9e:f6:2b:c4:0e:fb:e8:5c:e4:32:42:43:bf:ec:53:
b8:bd:19:32:67:37:cf:b6:5c:0b:57:8b:94:ea:1a:76:19:c8:
f6:8c:e6:1f:1c:83:b6:7d:19:2f:d8:bf:85:7c:02:90:05:ac:
d2:0e:fa:c4:00:1f:ca:a5:22:90:33:95:88:fb:92:cd:26:94:
cd:ab:c9:de:7d:33:94:22:f5:85:80:0c:2b:a0:29:c1:61:14:
98:f7:08:2a:29:48:c7:e5:06:a2:ec:c4:92:92:2a:66:44:59:
ef:58:b0:4e:75:bd:76:cf:ef:ec:ef:83:d6:24:d2:96:8a:8f:
bc:a3:37:1f:3f:d1:1b:ad:58:a5:72:08:fe:bc:ec:f1:74:63:
e5:ac:d3:e6:f3:4b:64:51:ce:ce:3d:b0:95:7d:ca:50:49:33:
5e:0f:f4:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 01:20:04 2025 by rpki-client