Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363262613a3a2f34382d3438203d3e203136393039.roa
File: 326131343a373538343a363262613a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier: U66YKzOn89xjnJiDP3o1txmcWCmjBrTjjmb5yMb7XNc=
Subject key identifier: B3:AD:29:D3:6E:0C:E2:7B:26:30:FA:1C:8D:D4:27:37:15:BD:91:4D
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 7825569157C21625B1DE4C638ACDB669676151A3
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363262613a3a2f34382d3438203d3e203136393039.roa
Signing time: Sat 17 May 2025 05:18:02 +0000
ROA not before: Sat 17 May 2025 05:13:02 +0000
ROA not after: Sat 16 May 2026 05:18:02 +0000
asID: 16909
IP address blocks: 2a14:7584:62ba::/48 maxlen: 48
Validation: Failed, certificate revoked on Sun 18 May 2025 23:12:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
78:25:56:91:57:c2:16:25:b1:de:4c:63:8a:cd:b6:69:67:61:51:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: May 17 05:13:02 2025 GMT
Not After : May 16 05:18:02 2026 GMT
Subject: CN=B3AD29D36E0CE27B2630FA1C8DD4273715BD914D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:ba:ba:fc:f7:51:d1:62:c0:88:bb:ef:06:2d:
a9:6b:e2:8d:99:3f:e5:ac:53:be:6d:65:97:5e:7f:
54:b7:44:3a:74:13:24:d7:e5:06:9d:1e:65:f5:72:
b5:b6:92:8e:da:3b:c6:51:47:e1:3e:15:8b:7e:16:
a9:69:b3:b8:25:df:73:ad:49:a1:ed:e4:e7:8f:c5:
68:b8:76:b1:dc:88:e7:e9:eb:76:b9:e5:59:0a:b8:
2f:ef:65:09:62:3e:30:bd:7d:85:76:57:ff:15:41:
ac:30:2b:34:6e:06:8f:cd:5c:75:d6:6b:ad:fa:6e:
03:a9:71:bc:92:1b:9a:0a:9f:4f:45:76:7b:62:d4:
b3:b7:5d:7c:34:e6:6e:1d:67:b6:1a:29:1e:c2:40:
5e:90:31:a1:ee:d7:bc:83:d7:66:b0:c4:86:bc:36:
0b:cf:f2:c5:a5:37:91:00:e9:a9:81:92:6f:cb:9f:
13:48:c7:b8:a9:59:39:93:28:8d:40:42:64:08:d4:
c7:53:05:0f:ef:89:74:2d:b0:03:32:e3:85:a5:ef:
12:3a:8c:e6:3a:1d:04:ae:f5:94:d1:4a:d8:56:d2:
1f:b8:21:f6:22:73:01:3a:55:42:5a:ad:64:f2:1f:
eb:86:36:c2:4c:a8:26:be:a6:ef:98:46:b4:54:7c:
11:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:AD:29:D3:6E:0C:E2:7B:26:30:FA:1C:8D:D4:27:37:15:BD:91:4D
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363262613a3a2f34382d3438203d3e203136393039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:62ba::/48
Signature Algorithm: sha256WithRSAEncryption
2a:f1:5f:d5:cd:51:f7:e4:70:51:d6:53:96:54:3f:c2:f7:98:
83:5e:2e:d7:1e:6d:a1:31:64:e3:10:9d:75:b7:cf:bd:3c:47:
34:12:82:df:47:43:8e:fe:a1:e2:69:91:47:72:ed:65:e1:68:
6b:95:b9:81:6f:ef:83:d9:e9:f6:11:c4:7e:1a:85:e2:6c:8e:
a8:9c:1a:88:d1:b6:34:c8:69:25:d5:55:a5:3e:f2:d7:21:13:
2f:95:62:99:6e:6d:8e:18:c0:1b:b7:b8:ab:fb:07:cd:c7:cf:
a9:0a:72:5b:63:70:34:37:b5:66:44:b9:c6:75:90:c0:04:03:
f7:37:bf:76:9b:48:01:2f:d7:02:9b:f3:52:7f:4a:97:9b:09:
41:f5:27:0a:d8:68:ed:fb:0f:81:b2:a8:af:4a:72:6e:ab:31:
e8:c8:6b:b1:ca:42:09:d5:5c:b7:84:37:a7:1f:be:6f:23:c6:
1c:43:95:df:4b:bd:bc:d2:51:71:f4:3a:41:1d:ab:0b:50:61:
70:54:76:6c:a8:ea:43:bc:97:09:ec:ce:44:e9:ea:24:77:ab:
bc:5a:b1:99:b4:81:55:cb:54:0f:85:cf:b7:2f:ac:07:4d:2f:
d7:a9:7b:d8:e5:7c:c7:39:e7:d3:82:bc:19:9c:ea:2e:ba:76:
90:29:0b:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 07:28:58 2025 by rpki-client