Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363238373a3a2f34382d3438203d3e203136393039.roa
File: 326131343a373538343a363238373a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier: fWwA6dwEpmMqQh3qJDQ4LZONj+5ljwVrJHA0bqBsNuY=
Subject key identifier: F4:E7:4B:E1:E0:1B:96:D3:4F:8F:13:A5:9D:FB:01:F7:EC:97:BE:9A
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 2F7DCDC4E927E5E4BA9ED08DDE2A02C1CE809CBD
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363238373a3a2f34382d3438203d3e203136393039.roa
Signing time: Thu 15 May 2025 00:42:02 +0000
ROA not before: Thu 15 May 2025 00:37:02 +0000
ROA not after: Thu 14 May 2026 00:42:02 +0000
asID: 16909
IP address blocks: 2a14:7584:6287::/48 maxlen: 48
Validation: Failed, certificate revoked on Sat 17 May 2025 05:12:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2f:7d:cd:c4:e9:27:e5:e4:ba:9e:d0:8d:de:2a:02:c1:ce:80:9c:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: May 15 00:37:02 2025 GMT
Not After : May 14 00:42:02 2026 GMT
Subject: CN=F4E74BE1E01B96D34F8F13A59DFB01F7EC97BE9A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:c1:6b:bc:6b:00:6a:ea:09:69:fe:6a:60:35:
85:2c:33:0e:b1:01:4b:4d:ae:32:02:94:61:ef:a3:
72:a7:8c:49:6e:4d:56:54:a9:8a:a1:84:0a:2c:b3:
ff:b1:ee:d8:fc:e1:c5:83:cb:08:12:67:db:83:2e:
e5:e5:97:ea:a8:1c:f2:02:24:53:d5:dc:34:12:10:
09:07:a9:18:65:b0:e5:00:67:41:f3:02:43:f4:ac:
b5:0c:d3:69:36:b5:aa:de:14:26:3d:77:c6:aa:7b:
67:3b:73:c1:fe:a1:7f:54:7a:8a:80:ab:65:fc:cb:
b9:cc:fb:d2:37:cf:8b:85:25:7f:6e:3e:09:b1:84:
ea:e6:b3:ef:fa:05:1f:ce:ea:3c:75:9a:72:39:39:
2e:63:60:33:ac:31:cf:fd:f4:e3:b2:d8:c6:8f:eb:
db:c9:34:77:a8:3b:94:6a:7d:63:66:59:f8:ed:03:
1f:6c:26:f2:22:ca:9f:55:5f:44:80:38:8c:45:69:
55:c6:e6:ac:53:5b:6c:6b:95:d3:02:e2:93:75:a9:
0c:72:89:e4:14:17:60:6c:16:93:4b:8d:1f:71:fb:
66:84:d0:47:ad:a4:ab:0e:fa:d9:3a:8f:b0:37:de:
f6:63:1a:14:05:b3:d2:e0:0f:c7:1c:c9:8a:63:d7:
df:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:E7:4B:E1:E0:1B:96:D3:4F:8F:13:A5:9D:FB:01:F7:EC:97:BE:9A
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363238373a3a2f34382d3438203d3e203136393039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:6287::/48
Signature Algorithm: sha256WithRSAEncryption
14:91:19:a0:d5:e0:d7:57:59:ef:60:b4:ec:a3:67:c7:91:69:
47:66:bf:d7:7d:a6:71:e6:50:fd:07:fb:51:b2:bc:e6:f3:c8:
12:94:ff:1e:e1:fd:59:f6:93:1b:46:95:ba:27:35:59:fd:e9:
00:8c:08:19:7f:b9:27:77:e8:1e:cc:64:7b:f8:e7:30:6c:ad:
42:38:ae:a9:0b:d5:ae:bf:69:a9:3e:df:88:29:97:31:81:8b:
b0:f8:8b:ca:18:b0:ca:95:54:16:8e:b2:bf:cb:f2:25:85:33:
bd:81:2b:00:ef:6a:04:a5:18:bb:f4:18:be:14:2e:82:d8:f5:
11:52:b7:2f:e2:fc:c4:dc:19:95:ce:d1:f4:2c:b8:f6:dd:77:
e0:02:17:83:c5:9d:3c:21:b3:e3:e6:f9:54:5d:4f:86:75:f7:
dc:6a:d2:cf:e6:69:70:bc:96:d5:67:ad:66:f0:f3:9e:d5:34:
7a:05:8f:98:e0:52:5a:bf:12:95:3f:bd:52:d0:bb:7a:f1:5d:
92:4b:5b:4b:f8:c4:77:29:c6:a0:d2:46:f1:ef:51:1d:db:55:
82:1b:6f:43:b1:07:80:51:c6:11:b0:43:5e:24:d9:93:97:14:
5f:f4:ac:19:06:0d:b1:ef:b9:39:99:00:29:f2:43:dc:9d:a2:
b1:7d:9b:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 06:41:46 2025 by rpki-client