Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363264353a3a2f34382d3438203d3e203136393039.roa
File: 326131343a373538343a363264353a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier: rMwiMhuMGOGXjgoA1KyPn5HOnnx9dCQPn71ZcABiFI0=
Subject key identifier: A1:2A:56:37:87:E9:78:03:5D:5C:68:31:42:C3:75:83:E2:9B:33:4A
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 6470629A55BB8612148629FF0AF31A2FBA777F33
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363264353a3a2f34382d3438203d3e203136393039.roa
Signing time: Sun 18 May 2025 00:18:02 +0000
ROA not before: Sun 18 May 2025 00:13:02 +0000
ROA not after: Sun 17 May 2026 00:18:02 +0000
asID: 16909
IP address blocks: 2a14:7584:62d5::/48 maxlen: 48
Validation: Failed, certificate revoked on Mon 19 May 2025 20:36:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
64:70:62:9a:55:bb:86:12:14:86:29:ff:0a:f3:1a:2f:ba:77:7f:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: May 18 00:13:02 2025 GMT
Not After : May 17 00:18:02 2026 GMT
Subject: CN=A12A563787E978035D5C683142C37583E29B334A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:af:55:e9:52:75:37:f8:bc:7d:95:ef:09:b0:
56:19:77:b5:3d:93:bd:1f:fe:9a:a2:1c:18:e6:31:
26:b2:23:04:80:eb:16:16:93:e3:d1:f8:29:79:c6:
d9:c9:09:dd:a9:a4:7c:19:34:d1:58:dd:c3:bd:bb:
ac:c1:5a:e7:99:f0:59:d2:ec:2e:1f:b7:20:51:4c:
7d:ba:25:bb:11:e2:c2:b0:3b:e3:40:6c:21:4a:3a:
8b:1a:13:8d:62:49:cf:63:91:5e:c7:10:94:3f:3c:
01:16:5d:2d:6a:f7:40:68:92:a9:84:cc:1c:b8:ee:
79:3f:b1:9c:a6:ad:dd:c2:ea:59:a4:ad:67:df:0d:
01:db:f6:f8:a4:0c:fb:5f:79:84:3c:36:1a:73:ab:
e8:b9:55:5d:a2:f0:26:b6:64:2a:47:4f:c4:c1:8a:
ec:3b:8c:91:86:f7:07:4a:0a:6e:07:7c:fe:0e:b9:
0a:56:be:98:63:db:a0:20:72:a2:dd:7f:af:76:8a:
56:56:55:7c:ca:c5:08:0e:2b:f5:e8:ef:9c:e9:93:
40:4c:d1:5a:6f:66:0b:94:12:7f:4f:01:a5:9d:47:
e5:a0:3f:81:52:ec:1d:70:3a:75:a7:5b:e9:d1:41:
1e:da:e8:e1:73:f7:53:d4:d6:e2:ca:15:72:0f:d0:
d9:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:2A:56:37:87:E9:78:03:5D:5C:68:31:42:C3:75:83:E2:9B:33:4A
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363264353a3a2f34382d3438203d3e203136393039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:62d5::/48
Signature Algorithm: sha256WithRSAEncryption
3e:db:39:8d:fe:95:d6:da:3a:bb:b5:1a:2e:05:da:db:66:46:
e6:cc:be:3b:94:aa:0f:78:97:ec:87:60:c8:b1:98:12:0e:3e:
2e:f0:7a:ea:b2:9e:0c:1a:89:8d:28:ef:11:b4:69:70:75:81:
9d:5b:ab:60:cb:40:10:32:39:64:d8:ca:ea:b5:8d:cb:04:be:
63:bb:b9:61:08:54:d2:6f:a1:8d:ad:63:35:d4:3b:8c:ba:fd:
f7:02:90:66:3c:35:35:35:fd:0d:69:20:16:f5:5d:f3:39:eb:
13:f2:6f:ba:78:3b:c5:5f:cd:34:88:12:a1:ef:8e:3e:b4:3e:
1e:0f:a0:0f:a1:13:d8:b8:65:0b:ea:b7:0e:72:5a:75:2d:b6:
4d:3c:0e:61:c1:73:c6:30:da:d3:51:f1:bb:fc:ca:32:79:93:
d0:c8:c3:23:58:05:1a:72:e9:a3:ba:6a:17:de:10:aa:2f:93:
8d:18:dc:94:23:21:32:1f:76:0a:bd:a8:9c:9d:ac:9d:59:cc:
52:16:fd:2a:12:fd:eb:9c:b8:17:e6:99:8b:45:47:a7:e8:3a:
8e:cf:f2:a1:a8:29:a3:93:c2:ed:e5:84:a3:d8:d1:90:35:c2:
ee:fb:1f:c2:f3:ee:eb:0e:34:fe:f8:66:d7:a2:62:ae:ec:5c:
ba:b5:b0:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 07:25:59 2025 by rpki-client