Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363261313a3a2f34382d3438203d3e203136393039.roa
File: 326131343a373538343a363261313a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier: fpKqQchgVy4GqEmk/6uaJocQSTeCQ1AseRlXJXgWjws=
Subject key identifier: A1:FD:8C:F2:B9:0C:40:B6:EE:B3:89:16:9B:B1:73:E4:BE:2C:E5:78
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 712605EA91558B1C0BF2BEF074DA3EB141778B10
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363261313a3a2f34382d3438203d3e203136393039.roa
Signing time: Fri 16 May 2025 08:12:02 +0000
ROA not before: Fri 16 May 2025 08:07:02 +0000
ROA not after: Fri 15 May 2026 08:12:02 +0000
asID: 16909
IP address blocks: 2a14:7584:62a1::/48 maxlen: 48
Validation: Failed, certificate revoked on Sun 18 May 2025 00:18:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
71:26:05:ea:91:55:8b:1c:0b:f2:be:f0:74:da:3e:b1:41:77:8b:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: May 16 08:07:02 2025 GMT
Not After : May 15 08:12:02 2026 GMT
Subject: CN=A1FD8CF2B90C40B6EEB389169BB173E4BE2CE578
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:f2:1a:96:54:3c:c6:e6:c9:e8:84:7e:c7:f8:
9e:a6:72:3d:14:a3:07:fa:bc:df:a3:49:a5:c3:d3:
60:5c:fe:d4:f9:50:e2:49:3e:56:4f:bf:65:45:b7:
05:cf:d4:33:47:af:85:3d:a7:6f:df:b6:be:2f:b1:
96:51:ec:97:7c:f7:ab:65:e3:ca:e1:0a:0f:89:3f:
a4:75:b7:70:96:22:c8:00:57:95:44:18:66:38:47:
9f:8b:32:38:1a:f6:5b:96:fb:ae:30:0d:1d:c1:c1:
39:f2:8c:6e:38:24:94:37:1b:19:39:eb:8a:ef:48:
f0:52:44:0d:7a:14:6c:c6:3f:1d:35:30:f8:90:1a:
9a:dc:00:5d:ca:e3:7f:f0:bb:e5:12:10:80:dc:f8:
1a:78:3d:6e:d2:1a:a5:ca:02:fe:24:ec:6d:2c:8a:
62:49:66:36:15:e0:e3:76:3c:59:1c:47:1e:e6:64:
70:31:8a:d3:70:8e:94:ee:a1:8e:76:79:77:bd:c0:
c4:f0:6d:96:5f:0a:77:45:d2:ec:f8:1b:66:e7:59:
a4:e8:e1:0f:c3:d5:c7:1e:c8:dd:76:35:7e:a2:5a:
69:dc:ce:a2:a6:b0:3e:32:da:50:a1:ee:e2:73:64:
c1:8e:45:f5:03:8e:8c:fe:b9:3b:87:ce:e7:00:b8:
12:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:FD:8C:F2:B9:0C:40:B6:EE:B3:89:16:9B:B1:73:E4:BE:2C:E5:78
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363261313a3a2f34382d3438203d3e203136393039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:62a1::/48
Signature Algorithm: sha256WithRSAEncryption
0c:34:74:13:a7:1d:57:f1:df:9c:7f:3f:d3:ff:ca:da:a3:53:
6e:ef:92:9b:42:95:69:23:28:39:bc:2a:b4:71:41:da:0f:dc:
a5:2f:61:c1:8d:42:66:33:9e:54:3b:f9:d5:b5:25:72:e5:55:
57:50:61:59:ed:be:b3:29:a6:6d:48:89:b0:1c:76:7d:62:06:
56:ff:e5:bf:95:72:6d:d6:a0:4c:01:ca:75:60:28:ba:2a:80:
b2:c7:03:f0:e2:f4:af:a0:6a:41:d0:a5:ea:e5:cb:6c:c1:02:
7e:68:1e:f6:d5:96:eb:a6:18:de:6f:d0:62:59:39:3c:75:22:
25:83:ca:b9:37:82:9d:a2:95:d7:1f:de:48:8e:75:93:02:cc:
08:88:4e:4a:70:18:f6:6c:e3:b9:4c:f6:80:1f:3e:f4:54:b1:
8f:63:dd:3a:63:71:58:a2:71:60:21:82:9e:43:8b:1c:8a:89:
1e:5f:11:79:84:37:01:9f:d7:a1:7d:34:36:05:d3:e1:8e:af:
fe:74:8c:6e:e3:dd:ce:00:4f:8c:7b:18:12:ef:9a:dd:10:7d:
f0:18:d7:56:36:5e:c0:0b:cc:9b:2a:68:0f:89:8a:73:d6:4d:
c1:1d:8b:f6:b2:77:d2:b2:5d:e4:26:ac:fe:c9:39:7f:6b:3c:
a0:a4:fc:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 03:18:05 2025 by rpki-client