Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363264393a3a2f34382d3438203d3e203136393039.roa
File: 326131343a373538343a363264393a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier: pVGZ28hbkUN2pRLjxv3DKJHhLQ/0XdyqHwMKwyo2RBQ=
Subject key identifier: 1B:F6:6C:ED:F8:88:41:28:59:CE:AA:71:03:8D:28:0E:0E:5E:07:AB
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 29C9E3F980AD6C43268BDDCD44E46343295951EE
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363264393a3a2f34382d3438203d3e203136393039.roa
Signing time: Sun 18 May 2025 02:18:02 +0000
ROA not before: Sun 18 May 2025 02:13:02 +0000
ROA not after: Sun 17 May 2026 02:18:02 +0000
asID: 16909
IP address blocks: 2a14:7584:62d9::/48 maxlen: 48
Validation: Failed, certificate revoked on Tue 20 May 2025 01:30:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
29:c9:e3:f9:80:ad:6c:43:26:8b:dd:cd:44:e4:63:43:29:59:51:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: May 18 02:13:02 2025 GMT
Not After : May 17 02:18:02 2026 GMT
Subject: CN=1BF66CEDF888412859CEAA71038D280E0E5E07AB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:26:a8:35:cb:cb:5e:bb:5d:5b:9a:72:3f:12:
81:ea:79:f5:2c:2d:fe:8b:9a:9a:de:fe:76:f2:d1:
d9:62:93:2c:a1:e0:a9:39:7d:4b:33:c1:b5:3c:43:
04:6b:a3:e9:e4:8e:cd:0d:3f:4b:1c:ba:5a:70:56:
8a:cc:b5:26:3b:5f:d4:d9:29:4a:77:ee:13:6a:fd:
c3:7d:cf:e4:ca:8c:fc:67:00:60:0f:c9:05:ae:dc:
51:bf:d6:3d:9a:2c:3b:68:a4:19:bd:21:3e:1d:d3:
90:96:6e:0e:a8:24:50:38:82:9c:ff:c2:df:70:57:
87:24:f1:7b:80:3f:35:db:c5:41:78:90:85:0e:04:
2a:7f:b8:f3:6a:24:80:45:cf:e0:86:96:bc:2f:ab:
ed:22:e0:ed:35:b4:eb:b1:44:c6:26:1d:d0:14:43:
f1:4e:c4:17:31:d0:29:41:06:38:c4:8d:81:58:cc:
78:8e:81:dd:5a:05:67:78:62:7a:26:45:17:1f:89:
5f:cc:a8:ab:de:b7:cd:63:b2:4b:80:90:2b:68:69:
cd:5d:fc:ec:f3:73:b0:3a:52:b2:13:19:72:a9:28:
1b:fc:60:57:08:83:7f:20:68:11:17:34:4a:23:36:
45:23:9d:2e:a7:15:8a:0d:6e:fb:10:5f:76:80:45:
bf:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:F6:6C:ED:F8:88:41:28:59:CE:AA:71:03:8D:28:0E:0E:5E:07:AB
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363264393a3a2f34382d3438203d3e203136393039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:62d9::/48
Signature Algorithm: sha256WithRSAEncryption
ac:4d:63:84:f6:91:a5:36:64:94:b6:d3:b7:83:cd:79:18:d0:
24:bc:3f:d3:a6:d6:c7:4c:b7:24:6a:85:78:f1:f5:31:cd:3c:
64:00:b1:b1:1f:bc:15:a9:ac:7f:c1:da:7b:eb:81:57:dd:53:
03:c5:d3:cf:37:22:6d:d3:c8:ed:45:07:81:57:fa:e4:86:fb:
7c:0c:62:d9:e3:ba:67:3a:43:b1:fd:15:60:42:34:c2:1b:7d:
94:8b:3f:de:d5:cb:14:73:14:f5:b7:20:92:2d:fc:d0:b4:3c:
48:66:19:c9:d7:e1:fe:30:73:9d:de:ea:41:ce:5c:ec:79:a9:
75:28:a8:23:bd:da:6e:49:d8:54:22:5c:21:95:7f:fa:67:16:
12:b4:bd:f1:9d:60:fd:f4:cb:50:8a:60:3b:2d:a5:5c:37:fe:
e8:0c:8a:ef:26:ec:e6:64:2e:df:a0:f2:7b:ad:1a:35:a1:72:
b4:73:13:29:5b:41:e0:8c:34:b1:3e:4a:61:ae:51:40:6f:c3:
09:82:2d:b6:66:fc:f3:0a:dc:eb:44:7d:e5:bf:5d:b5:c2:6a:
64:2a:64:80:c2:c3:59:56:b6:d8:65:3c:92:5c:f1:3d:c7:d0:
25:8a:93:8c:cb:91:fc:54:0a:58:a4:bb:f9:eb:81:bc:1d:84:
83:98:b0:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 06:38:35 2025 by rpki-client