Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363262663a3a2f34382d3438203d3e203136393039.roa
File: 326131343a373538343a363262663a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier: WILADfRFrL/46BSp7yVK5ezhczBnmFImzpM9Y+oAao0=
Subject key identifier: FE:74:C6:0F:55:A8:EB:0F:A1:07:EE:A8:06:0B:7D:89:9D:B8:F2:F5
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: F72EF8F1F9238908FC31845650E266CBD29257
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363262663a3a2f34382d3438203d3e203136393039.roa
Signing time: Sat 17 May 2025 09:54:01 +0000
ROA not before: Sat 17 May 2025 09:49:01 +0000
ROA not after: Sat 16 May 2026 09:54:01 +0000
asID: 16909
IP address blocks: 2a14:7584:62bf::/48 maxlen: 48
Validation: Failed, certificate revoked on Sun 18 May 2025 23:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
f7:2e:f8:f1:f9:23:89:08:fc:31:84:56:50:e2:66:cb:d2:92:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: May 17 09:49:01 2025 GMT
Not After : May 16 09:54:01 2026 GMT
Subject: CN=FE74C60F55A8EB0FA107EEA8060B7D899DB8F2F5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:84:3a:a1:c2:34:62:c2:b4:34:5b:40:4a:4d:
bf:41:74:56:6b:73:5d:6b:b0:81:cb:56:41:fc:81:
20:7b:21:0c:aa:0f:b8:c5:f7:37:f5:ad:56:2f:f7:
74:f1:97:65:9d:41:e8:f0:49:cf:1c:8d:5c:5a:45:
5e:09:a5:eb:16:ff:a4:aa:94:2e:74:27:5b:24:ff:
30:c1:c4:62:87:dc:f6:42:24:4e:a6:f3:8e:9f:e6:
09:f4:b0:6a:8a:ae:46:34:79:88:6a:f2:47:b0:d0:
13:02:cc:ea:e2:90:81:c2:f7:fc:15:f5:58:bd:4d:
37:a7:31:35:da:ed:d7:b8:9c:3d:af:81:8b:ff:ce:
7b:7b:17:56:c1:97:e3:a7:08:93:68:e4:fd:82:7e:
dc:49:b8:93:fb:4b:4c:9f:fe:52:f9:06:89:de:e5:
b0:33:fd:0b:31:72:2b:83:2b:9d:ca:b9:cf:01:38:
11:cd:d5:a9:05:3f:45:59:bd:ab:40:b9:b3:df:2d:
11:30:33:87:83:46:37:b6:62:2e:77:62:7d:91:81:
98:81:fa:aa:21:90:37:37:ab:0f:3c:16:38:ab:a8:
be:9c:a2:5e:de:67:a3:34:fd:32:6d:96:ce:05:51:
ce:c4:75:f2:1d:b7:d7:aa:90:3e:8f:71:67:10:ad:
6d:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:74:C6:0F:55:A8:EB:0F:A1:07:EE:A8:06:0B:7D:89:9D:B8:F2:F5
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363262663a3a2f34382d3438203d3e203136393039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:62bf::/48
Signature Algorithm: sha256WithRSAEncryption
a9:d1:54:4a:e6:39:7a:c0:e4:4d:3a:7c:b9:4d:73:56:6a:45:
b4:5e:0c:4f:fe:b9:a0:bc:f1:d5:2f:82:81:c4:ee:c5:8f:c4:
af:53:6c:b3:38:11:bb:09:2f:c8:27:05:ca:14:ac:b9:22:7e:
15:ed:a3:a0:d5:fe:47:4b:08:82:75:c6:4b:5d:fe:83:56:8a:
25:76:b5:2f:53:2b:70:01:7b:b7:e8:29:11:37:b7:91:94:ff:
e2:47:ff:fd:2c:93:5c:fe:c7:df:76:bd:e4:0a:2a:7b:dd:29:
cc:2c:43:49:57:2b:4a:ca:94:79:85:97:79:0d:24:39:ea:33:
e9:2f:4f:82:ed:71:9a:a3:ff:89:ff:3b:dc:ab:c3:63:52:56:
47:f9:70:67:d8:3d:61:1f:2c:06:22:1f:3e:ae:37:f1:92:a8:
d9:18:0e:a5:c4:68:49:b7:44:da:b6:f1:7a:6e:9e:1b:76:af:
44:b1:b4:d6:18:de:e9:4f:e7:29:12:7e:b7:b8:20:33:ad:1f:
54:4b:a2:a2:d0:fe:37:84:cd:88:a9:9a:95:88:e4:5a:13:ad:
6b:86:0e:91:b5:1f:08:1c:b5:bd:40:22:87:d7:de:05:7d:63:
32:e9:29:27:4f:74:91:1f:af:58:15:4e:93:46:93:40:3a:59:
69:3c:09:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 07:45:13 2025 by rpki-client