Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363263643a3a2f34382d3438203d3e203136393039.roa
File: 326131343a373538343a363263643a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier: +uZmYjdO4oj3rUfv5ySxuOrFbuG07tWhrsShiqmMlc8=
Subject key identifier: 26:72:60:F6:ED:A8:70:3B:16:04:89:ED:DC:7E:5F:88:E1:1B:7D:9D
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 6B2B839060BB7436B1815990B59A2684997D3B6D
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363263643a3a2f34382d3438203d3e203136393039.roa
Signing time: Sat 17 May 2025 23:30:02 +0000
ROA not before: Sat 17 May 2025 23:25:02 +0000
ROA not after: Sat 16 May 2026 23:30:02 +0000
asID: 16909
IP address blocks: 2a14:7584:62cd::/48 maxlen: 48
Validation: Failed, certificate revoked on Mon 19 May 2025 12:06:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6b:2b:83:90:60:bb:74:36:b1:81:59:90:b5:9a:26:84:99:7d:3b:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: May 17 23:25:02 2025 GMT
Not After : May 16 23:30:02 2026 GMT
Subject: CN=267260F6EDA8703B160489EDDC7E5F88E11B7D9D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:b3:7b:0f:ca:5f:59:38:5a:7d:d1:62:3e:49:
74:f3:7c:2e:f4:35:43:59:b6:45:5f:e5:2d:2e:b6:
e9:c6:f3:cd:4b:fe:24:71:82:b7:5c:a4:fe:94:73:
71:d1:54:64:98:18:6a:e3:c0:79:67:e5:81:41:b2:
60:5a:2f:bb:16:18:40:04:85:9e:0d:59:e7:48:49:
41:a1:d6:19:bf:3d:1a:ca:67:62:a8:b3:89:35:ab:
52:20:7b:43:78:ee:c3:09:37:f9:f9:67:f6:21:1a:
32:0e:bb:1e:18:57:18:84:73:83:06:53:da:aa:8a:
e3:d0:fa:ee:ed:64:6a:64:b0:fd:2c:ad:cf:c1:d7:
16:ca:c7:7c:2a:7b:ff:a3:29:e3:8d:1f:3c:e1:36:
4b:ba:d4:86:6d:fd:db:9f:74:10:62:c0:40:93:ed:
a6:bb:76:88:f8:e9:5a:31:71:53:a2:ee:83:99:99:
73:23:c1:12:7e:36:d5:54:66:8e:b0:84:55:66:a6:
37:c7:cd:95:dd:ee:15:59:1e:3c:55:c1:a5:1b:4d:
6b:93:75:7f:f5:c9:0e:3b:56:55:56:82:9a:43:9b:
63:f5:55:f0:95:77:84:7c:9b:ce:f6:da:eb:10:be:
02:e6:d6:54:4e:ae:bc:8d:80:05:f6:72:a2:2f:b3:
33:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:72:60:F6:ED:A8:70:3B:16:04:89:ED:DC:7E:5F:88:E1:1B:7D:9D
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363263643a3a2f34382d3438203d3e203136393039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:62cd::/48
Signature Algorithm: sha256WithRSAEncryption
2e:5d:e9:e7:13:a9:af:d4:be:02:a1:c3:30:41:fe:86:4f:dd:
5a:ac:85:5f:81:29:40:98:dc:09:94:fa:f8:c6:64:24:3a:57:
b7:f4:51:dd:65:b4:eb:b2:fe:ab:3f:b9:4c:4b:79:fe:a1:4d:
a1:de:26:e8:7a:ff:e8:2d:22:09:cf:c6:2a:07:5c:e0:a3:09:
28:0e:d9:de:bf:33:96:38:04:cc:95:8b:50:2c:66:30:23:8f:
37:c2:c1:42:b8:8f:14:b7:ee:5d:9b:75:f0:53:34:c2:da:1d:
43:de:ea:de:12:fc:42:1e:01:e8:57:08:21:d3:bf:25:e2:68:
39:8a:71:37:b6:db:4a:7b:a8:04:49:ee:be:94:69:52:10:6f:
6c:a1:c7:ce:6c:37:2a:c0:f4:3e:41:91:21:4a:dd:ee:27:65:
1a:b0:74:9a:5d:cd:fa:bb:de:cd:e6:ce:9b:46:ba:2e:36:3f:
9f:b4:39:72:9c:4a:b7:72:bd:23:9a:5c:6b:3f:28:a1:c7:25:
87:43:fb:1d:1a:f2:5a:54:eb:45:78:37:92:1e:7d:34:fc:59:
87:0e:cf:fc:bd:21:7a:97:ce:70:d9:b8:8e:99:1a:4a:51:28:
86:33:75:67:89:57:f9:94:ac:5b:49:1a:76:33:43:d6:54:ed:
56:05:a0:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 18:41:37 2025 by rpki-client