Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363264363a3a2f34382d3438203d3e203136393039.roa
File: 326131343a373538343a363264363a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier: ZzRm0WNFaXI4eOvj3Q2omPCb8B2h5UZt5gCeMED05Sk=
Subject key identifier: 01:7D:E6:BA:4A:14:AC:7B:9E:3B:9B:A3:29:12:DF:77:1C:17:8D:58
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 3EAFAA8AAC8F627B7E5DF4129DB6BCCECF1D3CE6
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363264363a3a2f34382d3438203d3e203136393039.roa
Signing time: Sun 18 May 2025 00:18:02 +0000
ROA not before: Sun 18 May 2025 00:13:02 +0000
ROA not after: Sun 17 May 2026 00:18:02 +0000
asID: 16909
IP address blocks: 2a14:7584:62d6::/48 maxlen: 48
Validation: Failed, certificate revoked on Mon 19 May 2025 20:36:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3e:af:aa:8a:ac:8f:62:7b:7e:5d:f4:12:9d:b6:bc:ce:cf:1d:3c:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: May 18 00:13:02 2025 GMT
Not After : May 17 00:18:02 2026 GMT
Subject: CN=017DE6BA4A14AC7B9E3B9BA32912DF771C178D58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:a5:f5:32:ec:a2:12:d1:7f:fd:79:ff:67:89:
fd:46:1e:ad:7f:00:66:19:8c:b2:24:30:5d:17:7d:
67:27:74:8c:05:0d:f9:e8:f2:03:cc:a4:a5:19:97:
47:f7:52:1a:53:55:51:e5:42:ee:25:30:a3:e9:fa:
f2:1d:b7:e7:09:c6:5b:fd:64:35:bc:83:24:09:ec:
75:a3:23:af:be:9f:be:df:42:72:e0:27:b9:a6:e1:
b2:12:28:5d:ea:bd:a4:65:ca:f6:6b:68:66:f9:09:
e3:a0:1b:48:21:85:af:bb:e4:3a:ee:37:d6:61:ae:
4b:ac:44:b4:55:80:dd:29:67:1e:03:9e:f4:76:a5:
96:fb:f2:b5:da:d4:f2:26:a7:2f:10:8b:c4:be:cd:
92:cd:82:9f:78:4b:0a:2c:20:2b:ea:3b:62:ba:ad:
f1:23:7b:31:5d:6b:db:c8:5d:ba:53:60:19:a1:81:
2b:e9:93:38:47:77:25:70:b5:04:b7:7d:e7:eb:3a:
be:b2:a1:3a:35:1b:94:b5:c7:0b:2a:6c:ae:ae:bb:
3d:9b:d0:43:55:d2:48:07:b3:05:9e:1a:b6:47:65:
94:ae:6e:ae:9a:e7:3d:7e:ba:2e:cb:3c:10:b4:29:
f5:f4:c6:32:36:35:6f:01:3a:e9:47:da:24:e0:4a:
4e:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:7D:E6:BA:4A:14:AC:7B:9E:3B:9B:A3:29:12:DF:77:1C:17:8D:58
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363264363a3a2f34382d3438203d3e203136393039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:62d6::/48
Signature Algorithm: sha256WithRSAEncryption
66:d6:89:be:41:5c:d8:56:94:41:4e:97:02:2a:0e:55:ee:78:
3a:9d:1c:a4:01:24:89:15:f4:08:17:c0:c4:f8:7d:52:de:96:
ba:4f:99:db:a5:38:e8:0b:bd:4f:bf:90:21:b6:96:f9:04:99:
42:a9:8e:d6:29:09:b4:f0:b3:48:24:80:c8:0d:bf:b7:7e:8a:
17:a9:ea:cc:6d:a8:da:3d:76:d1:7e:94:38:d0:1a:38:01:66:
47:4b:bd:df:83:58:de:ac:61:9d:77:83:62:a4:27:a2:ff:e0:
6f:89:6f:a6:73:af:a7:34:5b:5b:f4:d1:a4:bc:86:cd:51:f5:
0c:9a:bf:35:09:13:3b:40:9f:2a:2c:13:e9:ee:19:6c:8d:68:
d6:b1:d2:80:c4:cd:86:d3:19:1b:05:1d:6e:fc:3f:9f:bc:87:
1b:0d:a1:ef:25:3a:1e:b4:d3:0b:0f:b9:1b:db:da:dc:32:7c:
79:40:26:32:e7:6c:37:17:e2:60:69:5a:fb:d3:3f:90:9f:33:
fb:7b:32:a1:11:f7:65:c8:de:b2:e0:da:c8:b7:c0:4c:ed:6d:
5b:cb:b0:04:6b:38:46:5c:54:61:f7:9d:d0:6f:f3:7c:65:fe:
0e:29:d9:08:02:1a:05:99:87:24:ea:0f:af:6a:b2:a9:c1:42:
d5:d4:a6:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 06:39:29 2025 by rpki-client