Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363263633a3a2f34382d3438203d3e203136393039.roa
File: 326131343a373538343a363263633a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier: DzE1DWSgiJnVHqoJjMXpYS1doCBihTcPj33wdtL4t7Y=
Subject key identifier: 7D:CE:24:5E:91:9B:8F:E0:D5:1D:0E:D7:7D:24:D3:57:76:D8:0E:9F
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 10801D1E486FAE8910DB5C98147C2A41F2A99B28
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363263633a3a2f34382d3438203d3e203136393039.roa
Signing time: Sat 17 May 2025 23:30:02 +0000
ROA not before: Sat 17 May 2025 23:25:02 +0000
ROA not after: Sat 16 May 2026 23:30:02 +0000
asID: 16909
IP address blocks: 2a14:7584:62cc::/48 maxlen: 48
Validation: Failed, certificate revoked on Mon 19 May 2025 10:12:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
10:80:1d:1e:48:6f:ae:89:10:db:5c:98:14:7c:2a:41:f2:a9:9b:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: May 17 23:25:02 2025 GMT
Not After : May 16 23:30:02 2026 GMT
Subject: CN=7DCE245E919B8FE0D51D0ED77D24D35776D80E9F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:33:e9:f7:25:bd:4c:34:80:ef:de:29:b2:ce:
d2:4a:d2:af:1e:2c:95:f6:1a:ec:93:a0:38:12:79:
12:f2:20:5f:58:4a:9c:e7:a3:62:b7:a6:c7:8c:d1:
fb:29:4b:92:b0:d8:6c:a9:f3:18:ba:76:da:6d:80:
5a:38:d6:63:a7:90:4b:36:0b:0e:17:1d:f3:33:8a:
1d:74:05:df:66:ac:58:03:6b:fb:54:c0:fe:6b:c6:
e8:86:06:59:39:8f:36:a9:ca:ed:7a:75:9d:92:c7:
81:30:8b:eb:e5:d5:56:2f:9d:7d:9e:ef:6f:97:b0:
cf:56:b7:96:17:7e:b2:9d:0d:5e:ff:59:c5:ef:f6:
d6:7f:5b:10:9b:81:5a:d5:14:34:e8:0d:59:75:85:
5f:48:37:8e:3a:a4:28:90:5d:63:d6:09:46:0b:ba:
62:33:5b:ea:04:42:ab:c6:26:57:3a:52:c3:81:d3:
e0:b8:4e:27:26:3b:ad:73:ec:19:0a:fe:be:b4:77:
c0:6e:ce:9e:3e:2b:e8:02:41:ed:c1:3a:8f:96:50:
31:b5:09:c4:81:30:3a:c9:21:92:f7:13:7c:4d:6d:
42:71:5a:98:6d:d6:06:e4:2c:4a:4e:7d:05:58:2d:
d4:d9:72:ad:14:18:5d:b0:4a:49:03:ab:33:7e:d7:
2c:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:CE:24:5E:91:9B:8F:E0:D5:1D:0E:D7:7D:24:D3:57:76:D8:0E:9F
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363263633a3a2f34382d3438203d3e203136393039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:62cc::/48
Signature Algorithm: sha256WithRSAEncryption
8d:57:f5:af:fd:9e:57:1b:0a:a9:4e:3e:e1:de:0c:a8:67:ce:
2b:93:11:ca:39:e5:0c:34:11:73:13:b3:1a:5c:15:00:b3:85:
5d:0d:ff:d3:9b:da:2f:d4:43:09:d6:52:f1:55:4a:44:f8:34:
62:cd:69:40:94:6a:cf:23:21:86:b2:40:ff:69:06:6b:7e:fd:
a2:49:0a:af:e1:16:33:05:05:ed:ff:98:bc:9b:18:1a:e1:ae:
26:96:d6:9d:34:bf:0a:35:1d:f7:d5:d6:31:00:6b:35:71:e7:
34:e7:94:8a:d4:ce:54:9d:15:27:04:25:cd:6d:fe:59:dd:09:
e8:de:af:e8:85:7f:ac:88:84:2c:91:ef:9d:18:17:b3:83:65:
91:06:37:3b:3f:ff:7c:47:1b:28:dd:b4:c0:c0:a3:f2:71:14:
2e:e8:cc:9f:91:aa:00:35:af:d1:a6:16:bb:d0:fa:7c:5e:3a:
31:3d:f0:62:40:ab:29:5d:91:e1:6b:4c:56:00:3f:ca:db:b5:
f4:e0:bc:fb:f0:f4:6b:a9:32:44:b6:18:19:13:71:a9:64:34:
c1:5f:d3:84:4a:13:2d:59:b0:a0:74:17:c7:d1:95:50:15:5a:
6d:de:ae:13:44:50:3c:99:81:71:4f:5e:86:5e:90:88:55:a8:
92:34:c0:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 11:15:45 2025 by rpki-client