Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363236663a3a2f34382d3438203d3e203136393039.roa
File: 326131343a373538343a363236663a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier: LVlO6w2B4Pe2NsX7ZSgS1m+IGiW4c1LZLwmnmPVS1kI=
Subject key identifier: 18:D4:C9:AA:22:24:12:B4:0F:74:F3:28:54:30:7B:FA:EE:89:AD:B0
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 32B975490F3763BE6BA4DC98351C4005656541B0
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363236663a3a2f34382d3438203d3e203136393039.roa
Signing time: Tue 13 May 2025 15:54:01 +0000
ROA not before: Tue 13 May 2025 15:49:01 +0000
ROA not after: Tue 12 May 2026 15:54:01 +0000
asID: 16909
IP address blocks: 2a14:7584:626f::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 14 May 2025 21:36:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
32:b9:75:49:0f:37:63:be:6b:a4:dc:98:35:1c:40:05:65:65:41:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: May 13 15:49:01 2025 GMT
Not After : May 12 15:54:01 2026 GMT
Subject: CN=18D4C9AA222412B40F74F32854307BFAEE89ADB0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:a6:ac:35:76:41:8d:0c:6d:0e:ad:e3:d6:3c:
87:3c:a7:57:1b:56:86:82:b3:fb:76:db:72:c6:3b:
91:55:83:13:4c:96:08:5a:7d:4c:dd:a3:d7:c5:10:
38:d7:c8:9a:a7:27:4c:f1:41:c6:1d:05:5b:d0:59:
6e:87:60:98:a4:66:b2:75:4f:4f:4b:0a:2b:06:04:
fb:97:d9:cc:22:3f:4b:3b:69:b4:19:c6:f9:87:f9:
3e:2d:aa:6c:6e:fe:f8:62:cb:1e:5a:4f:59:a1:ac:
c9:1f:74:30:e0:5f:59:87:5d:b2:e1:19:46:39:6f:
09:56:b9:a7:74:50:3d:00:15:25:d0:39:02:90:cb:
f4:78:3b:4f:6c:43:64:bc:2d:36:2a:a7:50:51:61:
b0:68:c4:4b:2c:96:00:16:cb:4c:47:ea:50:d5:9d:
09:8c:eb:1e:b4:cb:79:4b:49:0b:20:b3:25:85:4b:
14:56:8a:e8:94:ea:9f:bc:4e:b6:1e:2a:52:0d:6b:
ca:24:bc:ac:6a:85:b3:f4:0d:a4:d3:1a:d2:c2:c6:
39:dd:cf:4b:38:81:e5:7d:ab:7e:ff:df:de:b9:6c:
a1:33:0a:bc:06:29:09:ea:5e:0a:d9:a6:1f:97:69:
e3:0b:61:f6:a4:ea:b4:ab:53:a0:19:e6:a2:b9:93:
16:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:D4:C9:AA:22:24:12:B4:0F:74:F3:28:54:30:7B:FA:EE:89:AD:B0
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363236663a3a2f34382d3438203d3e203136393039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:626f::/48
Signature Algorithm: sha256WithRSAEncryption
4e:b8:4a:5c:06:71:61:eb:fd:57:2e:83:33:8b:02:33:ee:69:
42:f6:a7:56:55:52:b8:4d:80:5f:47:ec:82:0c:94:d2:ce:b3:
05:61:fd:f4:e8:eb:70:be:1a:c7:f6:a6:b1:25:6a:16:94:3b:
1a:0b:30:31:96:c0:bc:a9:25:a0:ab:2f:18:cc:8b:92:f0:6a:
2e:25:fe:24:3b:9c:92:fb:ca:9f:51:9b:69:c2:6d:f4:cd:66:
45:5d:2e:ee:84:aa:1a:0a:f3:16:8f:e1:45:d7:ef:27:54:95:
11:98:ce:cf:54:94:17:06:4a:76:41:a1:be:1b:0c:09:ff:85:
0d:17:2f:c6:6f:7a:9e:bb:bb:c4:f6:16:fc:62:61:5e:24:ac:
ca:49:22:58:b7:3f:61:9e:5f:57:d2:da:64:2e:da:ee:e5:d4:
2e:a8:09:65:69:b0:93:d8:42:7b:6c:9c:32:57:6c:9e:4e:72:
b4:f0:b8:f2:e7:a8:14:63:55:a0:32:8a:8f:11:b2:3c:ac:74:
3a:d3:13:ef:a8:92:62:7a:58:83:6b:7f:2b:d3:98:33:eb:67:
74:e5:21:e7:9c:ae:52:49:f0:78:e5:2e:ae:5c:94:23:8e:0b:
97:e6:32:fa:b1:93:f8:10:70:90:df:03:60:19:a5:f7:86:4b:
13:7a:23:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 02:49:33 2025 by rpki-client