Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363239333a3a2f34382d3438203d3e203136393039.roa
File: 326131343a373538343a363239333a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier: v/e50NGYJBopjvhaYE4ZNv/hlpb6414x76n0L8rpaLI=
Subject key identifier: 25:62:E1:78:0E:52:60:81:F7:22:B7:6F:FC:04:97:1C:BC:36:7D:FE
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 6B81FADEC499BF7D058D987B77B540C4571A2CDE
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363239333a3a2f34382d3438203d3e203136393039.roa
Signing time: Thu 15 May 2025 14:42:01 +0000
ROA not before: Thu 15 May 2025 14:37:01 +0000
ROA not after: Thu 14 May 2026 14:42:01 +0000
asID: 16909
IP address blocks: 2a14:7584:6293::/48 maxlen: 48
Validation: Failed, certificate revoked on Sat 17 May 2025 15:30:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6b:81:fa:de:c4:99:bf:7d:05:8d:98:7b:77:b5:40:c4:57:1a:2c:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: May 15 14:37:01 2025 GMT
Not After : May 14 14:42:01 2026 GMT
Subject: CN=2562E1780E526081F722B76FFC04971CBC367DFE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:1c:14:65:94:61:c4:a1:d2:48:dd:af:fd:6f:
e7:1c:51:bb:18:f2:4c:b5:59:be:7f:fc:ed:c0:5d:
81:47:c4:30:4e:7e:e8:e1:71:ee:f0:51:c1:63:bf:
8a:6b:4e:b0:29:1c:b3:a3:36:b2:68:4c:03:09:59:
8d:39:5c:f7:6c:7c:8a:19:41:52:3a:0d:a3:4f:e6:
83:75:30:82:3f:27:91:c3:40:9d:66:88:e8:dd:c9:
51:d1:19:46:a0:49:95:cf:eb:88:95:93:0e:ab:2a:
a2:af:f9:6e:6d:5c:93:c9:f0:de:cc:e5:85:93:78:
54:fc:d1:1b:a3:74:7b:bd:cd:ec:ec:51:78:75:ad:
16:3c:bb:22:bc:3f:8e:39:4d:da:58:67:b2:60:1d:
e7:11:e3:e4:bd:e8:39:f1:ac:6d:8e:1f:74:6b:d6:
df:dc:8b:9a:f6:79:04:fc:c6:c7:5d:a7:93:5e:84:
fb:de:32:21:90:0b:34:a8:20:58:a8:af:89:0a:f8:
fb:71:2b:0c:0d:ef:95:6b:95:1d:b3:01:7f:56:4b:
4e:ae:11:d3:d1:2c:6a:42:79:87:36:10:15:6b:4f:
5e:cf:a3:69:e2:b0:7c:dc:00:e5:94:7e:ef:02:d6:
88:59:55:ab:1c:a1:45:a7:0d:89:f7:86:2d:e8:a0:
77:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:62:E1:78:0E:52:60:81:F7:22:B7:6F:FC:04:97:1C:BC:36:7D:FE
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363239333a3a2f34382d3438203d3e203136393039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:6293::/48
Signature Algorithm: sha256WithRSAEncryption
25:2d:3e:4d:55:0a:cb:eb:32:4a:3d:dd:b1:49:ee:01:66:a1:
c0:1a:02:ee:75:92:5e:81:50:55:9c:1c:33:b3:10:72:a6:7c:
a8:35:37:0c:d6:b0:20:b2:81:44:79:c8:ee:20:7d:c3:56:6d:
57:9e:90:f9:9c:d9:c7:65:07:2b:71:e9:7d:4b:d2:31:eb:77:
ed:2f:db:dd:15:25:ba:c2:37:47:c2:ac:7e:8a:8e:11:57:a5:
ab:25:34:88:81:e4:3f:ce:32:c6:c6:ea:44:f9:7e:03:38:74:
6a:1a:7a:cd:4b:b0:e8:5c:0c:98:fb:ba:37:02:2f:25:2c:07:
c3:8b:ed:77:72:8a:b0:39:1a:88:ad:c1:cb:80:7f:dc:dd:4f:
df:a4:5c:3d:b2:36:62:b7:bb:5d:22:83:c1:60:9b:d7:3a:7b:
1c:8b:27:4b:22:18:0a:6d:9e:d7:b6:4a:be:e6:d2:18:f1:4f:
01:fe:39:91:59:18:15:48:2a:97:ac:81:b5:d7:18:9b:95:99:
2b:87:2e:14:54:64:34:3b:12:95:53:55:64:21:f0:d9:14:3f:
dc:d8:50:18:cb:7b:07:e3:28:5e:b7:bb:30:af:05:d0:f7:42:
cb:22:36:d2:41:d2:4f:91:1c:a5:07:6e:e0:26:86:ae:b1:ed:
e5:29:19:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 06:33:48 2025 by rpki-client