Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363263323a3a2f34382d3438203d3e203136393039.roa
File: 326131343a373538343a363263323a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier: 8mqaEVkLeuYeI44yoUr6EZJ4xtbDkcoBX61ogGse/bI=
Subject key identifier: 14:3B:EB:3F:15:81:F1:0A:66:DC:AA:2B:37:41:60:80:2C:E1:D7:C7
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 32CEC1A72A8A2166863A27ADCDEA86DA6301A1DB
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363263323a3a2f34382d3438203d3e203136393039.roa
Signing time: Sat 17 May 2025 12:24:02 +0000
ROA not before: Sat 17 May 2025 12:19:02 +0000
ROA not after: Sat 16 May 2026 12:24:02 +0000
asID: 16909
IP address blocks: 2a14:7584:62c2::/48 maxlen: 48
Validation: Failed, certificate revoked on Sun 18 May 2025 23:06:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
32:ce:c1:a7:2a:8a:21:66:86:3a:27:ad:cd:ea:86:da:63:01:a1:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: May 17 12:19:02 2025 GMT
Not After : May 16 12:24:02 2026 GMT
Subject: CN=143BEB3F1581F10A66DCAA2B374160802CE1D7C7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:04:35:60:e1:cd:9f:be:6a:09:c5:6b:2e:f3:
df:ee:f7:1a:f3:45:81:25:47:ac:5a:cf:8d:9c:e3:
90:e3:45:7b:18:e5:61:22:cd:3a:f1:30:3e:31:d3:
11:8c:f1:93:c9:9d:c0:46:53:df:ce:24:52:65:4f:
28:92:90:0e:c6:35:e9:25:89:41:b1:be:cb:e1:49:
08:75:ab:26:17:3b:ca:44:36:34:80:07:41:22:95:
9e:ce:32:93:73:42:28:f1:09:15:ab:f3:96:a3:db:
c2:7b:4b:2d:da:9d:68:89:c4:f7:ab:80:d7:7b:04:
4d:70:2d:7a:e1:23:93:43:42:2f:16:00:88:35:3c:
43:58:9c:7a:32:dc:6c:d3:0e:48:b6:50:9b:d6:5b:
00:70:33:0a:81:4e:c9:d7:06:4e:00:f9:f4:09:ba:
95:73:18:9d:d5:67:88:7d:77:aa:40:6b:9d:a2:b0:
15:e4:90:d4:ed:a8:97:93:76:4e:f1:80:6d:67:f3:
aa:e9:c9:62:00:ff:55:68:9d:8c:5c:24:99:20:87:
f2:f9:d2:44:16:0d:1b:7b:7f:00:c3:06:6d:58:7d:
2a:ed:d9:16:37:5e:f4:64:27:e4:d1:78:eb:12:c4:
b6:63:16:84:aa:38:91:3a:57:15:38:e1:35:a5:c6:
cb:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:3B:EB:3F:15:81:F1:0A:66:DC:AA:2B:37:41:60:80:2C:E1:D7:C7
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363263323a3a2f34382d3438203d3e203136393039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:62c2::/48
Signature Algorithm: sha256WithRSAEncryption
5f:24:60:b7:9d:0a:24:e8:21:66:65:c9:34:b4:9a:40:fd:72:
8e:e4:29:c2:a9:48:51:27:8a:5a:37:32:a3:c3:b1:b7:77:1f:
eb:84:86:68:93:ae:17:e2:a0:d0:ee:e0:3b:bd:38:92:b2:6e:
58:31:1f:31:cd:8d:88:dc:20:8e:6b:6d:66:b4:2c:8a:4b:c1:
78:07:d3:e6:ba:0d:4a:0f:74:84:d4:8b:34:3a:f3:2f:66:8c:
fc:85:41:c3:8b:0c:69:46:a0:b7:b1:f9:79:45:e3:c0:2f:2d:
68:33:e7:d1:9b:7e:11:ba:d2:bc:34:bc:64:0e:99:95:91:f3:
cc:81:9f:9e:c6:53:ab:8d:1a:b5:97:f5:b2:50:81:e7:ca:6d:
3f:8c:ff:32:44:59:4d:03:65:5e:39:2b:9f:58:c9:85:d4:51:
0f:21:7d:99:f6:ec:44:ed:d9:11:1b:07:05:33:c7:b6:c5:6f:
88:6c:3c:b6:83:b8:02:75:6f:dd:9b:81:21:c2:49:ed:48:f0:
f3:26:bd:de:70:8d:10:93:d6:a8:cd:e6:c2:8c:c7:f2:4d:39:
a6:d7:ec:ec:e8:84:91:b5:e6:2f:2f:27:86:fb:28:a6:1d:5b:
1a:11:4a:4c:78:21:45:46:e1:28:14:55:f5:4f:84:21:cb:87:
d2:e7:37:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 06:20:42 2025 by rpki-client