Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363264373a3a2f34382d3438203d3e203136393039.roa
File: 326131343a373538343a363264373a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier: V0UUObwQieUureu+4w6Jf+GWFcdM2l5Ks7QVO8oJB0Q=
Subject key identifier: 55:5C:81:05:91:32:12:20:BC:5D:FE:7E:11:C8:CD:E6:DD:65:DB:24
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: B27C0FF3AD8155C85095ACCC1697C25E03BBE6
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363264373a3a2f34382d3438203d3e203136393039.roa
Signing time: Sun 18 May 2025 00:18:02 +0000
ROA not before: Sun 18 May 2025 00:13:02 +0000
ROA not after: Sun 17 May 2026 00:18:02 +0000
asID: 16909
IP address blocks: 2a14:7584:62d7::/48 maxlen: 48
Validation: Failed, certificate revoked on Mon 19 May 2025 20:42:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
b2:7c:0f:f3:ad:81:55:c8:50:95:ac:cc:16:97:c2:5e:03:bb:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: May 18 00:13:02 2025 GMT
Not After : May 17 00:18:02 2026 GMT
Subject: CN=555C810591321220BC5DFE7E11C8CDE6DD65DB24
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:12:1b:35:1e:2c:be:ad:06:2b:c2:a1:cb:41:
37:a6:e6:e3:8a:57:f3:ac:31:a4:ff:67:b1:d1:d5:
18:ef:27:93:37:c8:63:7c:6e:7a:9f:5a:57:be:36:
28:c0:91:ce:1c:be:9a:ee:c2:7a:cf:cf:71:1e:83:
69:da:bb:43:35:b0:70:5a:19:87:b7:d5:0e:ef:c4:
51:02:76:a8:4f:9b:a2:ac:0e:31:26:c4:0b:2d:15:
9f:60:04:2f:1b:3a:51:49:59:b4:49:46:2f:47:3d:
ba:f2:36:db:9c:40:9a:ad:64:ac:6c:c0:3d:57:b8:
26:e6:28:26:3e:37:f3:28:dc:d9:a6:90:13:3e:42:
bb:0d:d6:56:ef:8a:7c:71:a9:84:7f:63:db:01:1c:
a5:28:14:98:4a:3f:27:05:f7:b9:aa:36:cd:9b:54:
72:5e:21:eb:41:58:8e:d4:ff:6f:a0:20:a8:f7:e8:
fa:15:7d:cd:9c:bb:8f:ff:e6:1f:91:aa:50:23:8c:
1e:39:7e:5b:76:f7:15:17:bc:ea:ca:0c:f7:8b:c7:
d1:8d:88:17:2e:01:4e:2c:2f:05:c4:6a:28:4c:5c:
09:9b:70:17:1a:27:f8:c9:60:12:83:ec:4d:12:a3:
bd:af:b4:64:e2:d5:ed:6a:b2:81:02:86:a7:2a:d2:
89:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:5C:81:05:91:32:12:20:BC:5D:FE:7E:11:C8:CD:E6:DD:65:DB:24
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363264373a3a2f34382d3438203d3e203136393039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:62d7::/48
Signature Algorithm: sha256WithRSAEncryption
1c:6d:88:41:46:9a:38:93:3d:58:30:fc:10:e6:15:a3:98:c7:
fe:b8:67:3f:19:d3:4b:90:b1:08:50:bf:31:eb:f9:93:c1:67:
db:1b:9f:0f:4e:b7:15:6c:4d:ce:91:a7:a0:38:f3:3e:0f:8f:
66:7e:47:0a:0f:1c:1e:72:11:b8:7b:d4:a8:75:6d:4f:1a:5e:
75:92:8b:bc:cf:d5:c8:46:ec:03:1c:2f:76:b5:3d:8e:9d:b6:
bb:12:1e:6f:13:4b:94:4c:e9:c6:c4:a7:df:e2:73:91:d2:40:
a1:40:1c:db:ed:6c:cf:66:43:44:0d:10:67:bd:5a:46:47:ff:
7f:ae:5a:11:56:fe:3d:91:96:e3:ff:d1:6a:ee:ab:6c:14:d3:
67:29:40:10:89:79:51:36:89:ca:7a:09:7c:94:1d:b4:e6:e8:
78:1d:0f:2b:72:fb:63:29:a2:6b:ed:db:1d:a1:c9:e8:14:22:
83:ff:e2:ec:d7:8e:a6:5e:fa:06:23:cd:63:57:1c:76:b3:5f:
04:19:34:93:ba:69:c5:af:90:b1:54:e3:ac:ef:c6:a7:b5:f3:
58:96:81:ae:da:c4:6e:83:4d:08:52:58:cc:67:12:46:be:54:
d9:0a:50:5a:b9:85:a0:5e:78:c7:18:1f:33:d3:44:66:a8:ef:
5d:12:11:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 07:33:04 2025 by rpki-client