Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363238363a3a2f34382d3438203d3e203136393039.roa
File: 326131343a373538343a363238363a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier: IVf7O61IWUBTlFmKtKjcFUrsVHWxnvvGEFRyV98E2uw=
Subject key identifier: F0:DC:69:F0:A0:87:9B:CD:C7:E5:27:E2:BF:25:65:4F:EA:E2:99:73
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 1ED8229D78FDFD3C6CD782F3B2CB9D1CCD2689D0
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363238363a3a2f34382d3438203d3e203136393039.roa
Signing time: Thu 15 May 2025 00:42:02 +0000
ROA not before: Thu 15 May 2025 00:37:02 +0000
ROA not after: Thu 14 May 2026 00:42:02 +0000
asID: 16909
IP address blocks: 2a14:7584:6286::/48 maxlen: 48
Validation: Failed, certificate revoked on Sat 17 May 2025 05:06:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1e:d8:22:9d:78:fd:fd:3c:6c:d7:82:f3:b2:cb:9d:1c:cd:26:89:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: May 15 00:37:02 2025 GMT
Not After : May 14 00:42:02 2026 GMT
Subject: CN=F0DC69F0A0879BCDC7E527E2BF25654FEAE29973
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:83:12:82:e5:09:e3:28:44:2e:c3:be:1a:e1:
61:a7:5e:79:38:9c:fa:fc:cf:60:e1:ed:f4:f5:9a:
a6:c5:b1:d3:ed:96:04:c8:ed:5f:41:41:af:21:24:
cb:a2:89:ed:e8:ec:2a:c1:7f:64:dd:93:34:54:3b:
02:ed:99:b3:51:d0:98:33:32:37:53:cf:96:7d:bf:
f6:18:a8:06:5e:a4:4e:24:24:e5:15:27:6e:bf:62:
d6:6b:87:d2:3d:0f:47:45:f5:16:8d:bf:04:ba:da:
66:83:2d:e0:94:5a:d1:d7:93:91:35:bc:eb:22:cf:
e7:c0:ef:13:e8:48:a8:8a:f4:11:29:40:72:e0:81:
2d:c9:b8:61:35:47:52:4a:7c:82:0b:e7:82:52:fc:
e3:74:ed:84:69:b0:67:0f:cb:6a:37:ec:ae:11:77:
c4:50:bf:a3:78:dc:ab:51:07:d2:39:67:74:5e:f7:
c0:ea:1d:58:ff:ca:34:e6:db:cc:9e:49:b0:40:94:
3a:9d:08:01:a5:92:56:65:c2:0c:63:92:ec:fd:05:
76:82:55:78:df:09:3b:d7:ee:01:1c:a9:e1:18:0c:
17:6e:d3:be:81:ba:93:e7:00:af:fe:53:0f:d8:af:
f1:03:f2:58:a9:4f:6c:05:22:bc:01:32:69:fb:3a:
1a:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:DC:69:F0:A0:87:9B:CD:C7:E5:27:E2:BF:25:65:4F:EA:E2:99:73
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363238363a3a2f34382d3438203d3e203136393039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:6286::/48
Signature Algorithm: sha256WithRSAEncryption
43:59:dc:b0:dc:85:58:ce:f5:98:c0:d7:52:be:28:37:70:a9:
fd:f6:7e:a7:17:75:60:f4:1c:b5:d8:cc:ba:4f:24:40:4b:bb:
f1:d6:bd:37:35:8b:35:02:08:7c:ab:dd:d9:d6:d3:3d:f4:c7:
89:9e:48:2b:40:19:46:b5:0f:3b:50:d7:6c:e7:39:b5:2d:9e:
27:22:f3:cf:a5:ab:bb:75:59:04:7a:14:5a:bd:3f:2f:bd:2d:
a7:7c:18:26:cf:40:97:13:12:f0:28:7b:fa:70:6f:1f:fa:2e:
50:98:41:c3:14:36:31:8b:f2:7f:f6:25:ea:41:d5:fc:bf:36:
5d:f2:91:1b:1b:19:9b:6b:a7:1f:6a:5a:f7:72:f0:63:81:2d:
af:ca:56:ea:36:bf:22:7c:35:26:63:34:55:cc:0f:82:9e:21:
26:69:40:33:c5:29:29:0a:4a:3d:df:70:0e:5e:9a:82:33:47:
32:5e:52:cb:15:d6:1f:fa:e3:08:e8:4b:e9:dd:de:a4:69:61:
1c:67:60:d6:4f:62:69:a9:14:4e:25:3e:2c:dd:47:a1:46:7b:
cf:ad:a3:8c:62:ee:bd:78:cc:e8:b8:52:f1:75:85:db:55:60:
e5:2a:eb:5d:73:ad:85:88:ca:3a:06:0c:4a:9b:1c:be:d9:04:
62:0c:d7:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 16:38:27 2025 by rpki-client