Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363262373a3a2f34382d3438203d3e203136393039.roa
File: 326131343a373538343a363262373a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier: /tl+zto93andZHhrsuHoMsnoRgPqYJQeZ+cctiHzObk=
Subject key identifier: A1:E9:D6:63:F8:3C:C9:F8:A5:33:03:6D:ED:51:78:D6:67:B8:6E:F6
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 5614956C1656FA0010AD959F322332D6CF4188E3
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363262373a3a2f34382d3438203d3e203136393039.roa
Signing time: Sat 17 May 2025 02:36:02 +0000
ROA not before: Sat 17 May 2025 02:31:02 +0000
ROA not after: Sat 16 May 2026 02:36:02 +0000
asID: 16909
IP address blocks: 2a14:7584:62b7::/48 maxlen: 48
Validation: Failed, certificate revoked on Sun 18 May 2025 22:48:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
56:14:95:6c:16:56:fa:00:10:ad:95:9f:32:23:32:d6:cf:41:88:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: May 17 02:31:02 2025 GMT
Not After : May 16 02:36:02 2026 GMT
Subject: CN=A1E9D663F83CC9F8A533036DED5178D667B86EF6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:5b:fc:80:a8:06:26:45:26:dd:a0:2a:b7:92:
da:c9:36:4e:af:7d:1a:91:37:91:7d:70:11:7a:b3:
ea:e9:dd:61:cd:f7:63:49:73:ed:3d:5a:96:fc:72:
53:52:30:98:c6:d6:db:a0:67:87:b7:84:49:f6:52:
41:d6:5b:29:8d:d1:15:6b:c1:d9:7b:90:55:69:b7:
c4:d4:2b:a9:67:25:72:03:21:a2:b2:bb:10:b4:19:
31:fa:1f:b0:b5:b8:64:fc:61:9f:0a:14:77:16:28:
4e:d4:ba:f4:2a:85:ee:3e:e0:50:a0:f3:60:04:7c:
0a:7e:6d:18:ca:9f:4b:35:19:6f:ce:bb:95:dc:0f:
cc:0f:9c:27:98:cd:f5:bb:1c:b9:31:75:2d:35:87:
41:ce:91:55:7a:a2:f2:4c:69:a3:90:f3:44:7c:1a:
a1:5a:6c:9d:97:ce:08:ab:ad:de:7a:98:fa:2f:d9:
76:99:a0:5d:13:4b:24:17:4d:23:06:b6:a0:88:bd:
06:6e:98:44:57:07:13:09:27:d5:14:16:bc:b1:65:
82:db:23:7a:e9:96:d1:45:6b:bb:7f:0d:86:09:1f:
1a:db:00:28:8c:c0:ca:5b:ac:a3:3c:48:9b:3b:f4:
43:2c:d8:79:b9:07:62:2f:57:f7:02:87:2e:f1:dc:
2e:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:E9:D6:63:F8:3C:C9:F8:A5:33:03:6D:ED:51:78:D6:67:B8:6E:F6
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363262373a3a2f34382d3438203d3e203136393039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:62b7::/48
Signature Algorithm: sha256WithRSAEncryption
20:4f:55:8a:05:61:5b:cf:ef:38:62:79:f7:aa:d4:74:79:26:
23:bd:db:2a:a1:88:e5:c1:f0:ce:2c:7d:38:d0:04:0a:ac:da:
c9:03:9f:39:0d:e9:1f:60:e7:55:55:d8:68:ec:2b:24:e5:da:
52:03:e4:9d:c0:6a:e3:78:1c:9c:9c:ba:3a:3c:14:ee:74:8a:
4d:fb:8b:4a:ce:46:3f:b1:d4:d4:a2:eb:4d:53:16:4b:83:30:
94:f7:47:bf:ce:61:3f:61:d0:9a:73:66:5a:d3:46:b4:3c:f2:
be:15:fc:ae:61:42:89:46:d7:d2:ab:23:bb:0a:eb:6d:53:67:
2d:e5:17:9c:16:95:ce:14:29:7f:d9:b6:56:3d:4e:45:77:58:
b8:27:ad:d2:2f:f3:91:74:1d:50:52:9f:ff:f1:3a:4c:96:ee:
c0:b3:51:73:0b:a0:1f:87:15:4b:f7:0c:5d:ec:a1:a2:cd:b0:
4a:69:fc:4b:2e:08:05:3e:d5:25:6b:2f:62:f2:ad:15:12:63:
3c:22:d0:34:ec:a5:8c:57:f8:5b:f6:b8:5f:5b:91:1b:ac:67:
fe:44:40:a2:76:12:32:74:4a:11:0a:ae:9b:2a:44:51:b1:eb:
8f:5d:9a:91:5b:d1:78:de:a0:62:d7:b2:26:21:24:61:49:db:
02:b4:c1:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 14:38:41 2025 by rpki-client