Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363238613a3a2f34382d3438203d3e203136393039.roa
File: 326131343a373538343a363238613a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier: MCM+vfqI8T/okDKZwpsormk/RVC6nGoCHxn201kxYts=
Subject key identifier: EC:BC:BD:27:1F:F6:0D:1D:E4:2D:EB:05:7B:69:0F:BE:CE:91:03:5F
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 3F9167B6D33169FB5E79CC977D690A7C9F63554E
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363238613a3a2f34382d3438203d3e203136393039.roa
Signing time: Thu 15 May 2025 00:48:01 +0000
ROA not before: Thu 15 May 2025 00:43:01 +0000
ROA not after: Thu 14 May 2026 00:48:01 +0000
asID: 16909
IP address blocks: 2a14:7584:628a::/48 maxlen: 48
Validation: Failed, certificate revoked on Sat 17 May 2025 05:18:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3f:91:67:b6:d3:31:69:fb:5e:79:cc:97:7d:69:0a:7c:9f:63:55:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: May 15 00:43:01 2025 GMT
Not After : May 14 00:48:01 2026 GMT
Subject: CN=ECBCBD271FF60D1DE42DEB057B690FBECE91035F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:62:8e:04:7e:c5:ee:28:9c:16:56:de:b1:fd:
3d:ad:f2:02:15:4c:c1:73:8f:13:c1:a0:29:05:45:
02:e4:78:b9:d6:f5:5c:7e:c5:83:54:dd:a8:e2:69:
0b:47:a7:7b:19:70:16:d9:0b:52:29:97:23:7a:a6:
24:2c:3c:b9:b3:44:26:6f:75:7f:ee:0b:79:9b:dd:
2b:43:a5:bc:99:cf:60:a8:8a:05:8d:a7:d0:e1:3a:
fe:1c:57:62:dd:5f:21:a7:bc:37:57:a8:87:02:82:
26:af:6b:34:c7:19:ff:92:86:82:b2:2f:4d:99:29:
41:dd:f0:60:39:a6:37:6e:c4:41:b6:8f:b9:30:64:
c8:17:3b:a5:4e:c6:25:fe:c2:44:63:6b:a1:0b:fd:
62:17:e7:49:88:8d:9d:b0:92:cd:2a:e0:3d:6d:3e:
9e:53:3e:dc:4c:1c:e0:8b:8b:ad:14:40:85:a2:74:
5a:a8:52:5f:60:cb:b8:04:4f:41:dd:2e:80:84:9c:
fe:b9:99:ab:ea:d7:ce:aa:10:15:01:98:bb:c1:66:
da:df:8c:f3:18:b1:07:a2:50:a0:a4:37:c7:28:c0:
b7:2e:a2:09:00:0a:9f:a0:5a:39:f0:62:26:98:0f:
f0:0e:65:e1:f4:55:88:71:45:f1:96:db:06:be:c5:
1e:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:BC:BD:27:1F:F6:0D:1D:E4:2D:EB:05:7B:69:0F:BE:CE:91:03:5F
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363238613a3a2f34382d3438203d3e203136393039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:628a::/48
Signature Algorithm: sha256WithRSAEncryption
09:b4:ed:9e:8b:11:45:f2:e8:53:70:9d:d6:57:0f:aa:2d:72:
54:33:d1:5e:45:a5:85:7d:24:92:c1:63:4d:e8:ed:1d:75:7c:
38:a5:c2:27:54:06:24:61:f0:8b:4a:8f:45:43:27:77:77:eb:
b4:3d:74:cf:16:f6:47:67:aa:ea:64:bc:4f:4a:46:68:93:a2:
55:76:28:39:c4:f4:68:97:45:73:b6:bf:b9:33:63:7c:6f:0a:
9e:e5:05:77:ef:1c:46:83:d2:94:d0:ae:c2:9b:8e:26:0e:64:
da:e9:7b:d1:7b:cf:a0:a1:62:39:07:d0:1a:b9:f9:a4:95:36:
e9:60:aa:55:64:98:28:00:57:cd:14:85:f5:3a:df:08:82:f9:
74:bf:85:dd:f9:85:94:97:c4:bf:a2:83:c5:33:c3:30:1c:f8:
bc:64:70:d8:1c:b2:9c:09:79:e3:e2:f3:e8:49:ba:49:79:71:
a1:48:33:7b:99:d3:31:a5:a5:f4:22:8c:36:af:a2:f7:6a:b5:
a4:12:e2:65:37:3d:de:e7:e3:78:48:ab:f0:2c:e1:07:c0:42:
d8:98:a5:02:1c:dd:03:e2:bd:51:3e:87:88:6a:d6:5b:4a:1d:
90:41:2d:e7:42:0f:e3:38:6c:8d:c1:06:cd:ae:22:6c:6f:bd:
af:f3:a5:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 07:19:28 2025 by rpki-client