Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363261663a3a2f34382d3438203d3e203136393039.roa
File: 326131343a373538343a363261663a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier: hDN+WlBK0lsX28gBjh2vIkLQ5gvBAJY8+b5Syz2FX9E=
Subject key identifier: 19:63:3D:41:D8:B6:ED:86:39:00:7B:21:27:54:C6:18:8F:B1:FF:32
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 03A686C66A0EFD89C06FF81D5D3C409A0FD8EBC2
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363261663a3a2f34382d3438203d3e203136393039.roa
Signing time: Sat 17 May 2025 00:24:02 +0000
ROA not before: Sat 17 May 2025 00:19:02 +0000
ROA not after: Sat 16 May 2026 00:24:02 +0000
asID: 16909
IP address blocks: 2a14:7584:62af::/48 maxlen: 48
Validation: Failed, certificate revoked on Sun 18 May 2025 11:12:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
03:a6:86:c6:6a:0e:fd:89:c0:6f:f8:1d:5d:3c:40:9a:0f:d8:eb:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: May 17 00:19:02 2025 GMT
Not After : May 16 00:24:02 2026 GMT
Subject: CN=19633D41D8B6ED8639007B212754C6188FB1FF32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:3a:14:6d:2f:61:22:38:f4:52:cc:9b:ef:05:
85:4f:16:09:09:1b:72:73:cf:1b:43:19:d8:5d:47:
6e:20:93:ae:fc:b2:0a:7e:bd:24:f6:5c:ce:8e:51:
d3:cb:69:66:4e:e6:df:88:74:7b:ee:32:0b:f9:a4:
31:9b:cd:48:01:bc:00:18:f2:b5:15:89:85:a6:bf:
86:42:b4:ac:22:52:7c:e0:a9:b0:36:75:e0:39:6a:
c0:d5:f5:fb:12:b8:f4:83:e3:cd:0e:f2:52:70:3b:
1f:39:cb:c1:36:00:4e:ba:74:f3:43:0d:d6:09:5f:
19:0f:3c:37:7d:51:c3:3e:e1:63:c8:6a:d1:72:e2:
85:72:9b:53:0e:b2:ad:c8:8e:11:5e:02:06:ac:bf:
37:8b:7d:28:86:12:27:de:4e:2d:7d:f6:de:f6:30:
b0:fd:5e:50:ef:24:b3:2a:bb:6e:71:db:63:2e:01:
64:d4:13:83:18:98:0f:df:62:c4:6c:60:d5:07:97:
3b:7d:14:8c:a0:19:b2:df:9c:88:fc:d2:67:5e:c3:
ba:f4:4e:a3:83:d8:65:3f:18:a1:32:51:f3:18:4e:
76:ff:bd:b0:53:1a:80:86:4f:af:6d:4f:4d:10:19:
26:af:b5:2f:26:26:33:8c:e0:49:c1:0b:45:86:74:
7f:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:63:3D:41:D8:B6:ED:86:39:00:7B:21:27:54:C6:18:8F:B1:FF:32
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363261663a3a2f34382d3438203d3e203136393039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:62af::/48
Signature Algorithm: sha256WithRSAEncryption
4b:cd:c0:27:5d:1b:38:4e:d6:33:bc:4c:9c:4d:d4:02:86:bb:
fc:a1:42:24:6f:1f:55:8f:57:2b:77:aa:87:ea:95:71:47:e1:
05:3a:83:38:84:66:d6:41:92:03:d1:67:b4:12:23:2c:f9:c8:
64:40:75:4e:36:a6:30:b7:56:a0:a5:f7:6f:71:e5:f1:be:1d:
17:a0:81:2d:2a:c7:13:ba:05:ac:78:e3:3d:40:a9:b2:c3:cb:
c9:d9:e8:23:ab:64:53:93:3d:70:0e:51:6a:6c:c0:49:63:93:
80:51:72:86:62:14:18:70:e9:4b:5b:ba:fa:8c:b0:db:90:7f:
f5:70:ae:ae:68:a8:03:31:ef:0d:3c:d0:76:4b:bf:f0:75:1e:
2f:af:ae:ff:03:e4:a3:54:e9:93:61:78:de:2e:ac:2f:8c:90:
1a:28:84:58:30:a8:7e:1f:ee:46:f8:1e:5a:e5:cd:55:ab:a2:
64:5e:1a:59:9b:c4:13:9b:d4:ad:e6:15:6a:3a:b5:99:11:af:
41:b2:b8:f7:0c:30:38:60:c7:22:53:81:44:2e:12:94:b9:5f:
cf:9c:40:74:6e:aa:d5:10:a8:66:2e:56:76:45:28:d3:7c:88:
07:5e:4e:26:eb:9e:d5:81:25:14:5c:c9:9c:49:da:7f:e5:41:
2e:ef:78:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 02:44:07 2025 by rpki-client