Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363264613a3a2f34382d3438203d3e203136393039.roa
File: 326131343a373538343a363264613a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier: UFc3dVrvinQCC+FoyeLrn4NG3XAV7XTJX8flHZPNWfA=
Subject key identifier: 6F:02:D8:F2:A5:59:2B:00:0F:96:57:E7:0E:51:8D:F5:F7:D7:AB:9F
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 6647FCE4AFF122E89F6CF83C2AECF0A50E78BD2D
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363264613a3a2f34382d3438203d3e203136393039.roa
Signing time: Sun 18 May 2025 02:18:02 +0000
ROA not before: Sun 18 May 2025 02:13:02 +0000
ROA not after: Sun 17 May 2026 02:18:02 +0000
asID: 16909
IP address blocks: 2a14:7584:62da::/48 maxlen: 48
Validation: Failed, certificate revoked on Mon 19 May 2025 20:48:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
66:47:fc:e4:af:f1:22:e8:9f:6c:f8:3c:2a:ec:f0:a5:0e:78:bd:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: May 18 02:13:02 2025 GMT
Not After : May 17 02:18:02 2026 GMT
Subject: CN=6F02D8F2A5592B000F9657E70E518DF5F7D7AB9F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:d3:0b:82:cf:3a:c9:75:cd:6d:1f:2d:dd:cf:
33:54:79:da:1a:0c:ab:82:ce:f8:dd:18:90:67:c3:
08:86:d2:d3:f5:b9:10:0b:56:bc:e0:47:9c:4e:03:
e9:83:9e:f9:e3:34:79:89:06:59:25:a5:b3:0a:b1:
c5:ce:9c:f6:c2:a8:20:34:d4:44:f6:f5:e0:8e:60:
ba:69:2f:73:af:5a:54:d1:e7:6c:8b:71:09:fc:07:
12:7a:14:01:f1:51:53:ca:04:5f:e6:78:74:e4:e5:
4d:d4:bf:a8:1f:f4:9b:86:75:2c:2b:8a:0c:44:8f:
50:7f:e9:32:70:d8:b9:62:dc:f0:36:f2:04:20:7f:
5d:5d:aa:9e:b0:2c:36:11:8e:43:81:ba:41:3f:fe:
57:eb:ef:6d:76:70:ee:a3:95:49:21:e3:98:88:cb:
6b:cc:45:ba:08:d1:d9:6d:91:36:cf:4e:b1:33:be:
75:eb:c6:69:30:a7:be:3e:2f:db:17:6f:8c:14:5c:
7b:f3:ec:23:6b:4a:55:f9:c9:87:06:82:35:ca:c0:
08:f9:c0:af:a5:56:f9:8d:45:f1:5d:8c:90:78:e2:
dd:5f:42:8b:d7:f4:41:6c:99:d4:69:ca:75:36:b2:
30:68:27:ae:89:6d:fe:b4:38:76:62:56:d9:c5:ff:
ac:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:02:D8:F2:A5:59:2B:00:0F:96:57:E7:0E:51:8D:F5:F7:D7:AB:9F
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363264613a3a2f34382d3438203d3e203136393039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:62da::/48
Signature Algorithm: sha256WithRSAEncryption
07:1b:a5:f9:be:0f:3e:5b:93:14:dc:c3:ce:c3:50:fd:47:23:
98:29:0b:db:6b:23:26:c2:a5:35:0f:12:93:6a:fc:b0:e3:3c:
43:c7:28:89:ea:68:6f:02:2f:d7:28:22:97:29:62:21:05:3b:
10:a9:80:f8:a0:75:b0:b2:42:0c:d8:dc:3c:fc:58:28:86:ab:
14:8e:cc:24:d4:11:63:b4:e8:ee:b6:b5:6e:fa:12:e8:15:20:
62:94:70:ac:ee:56:90:07:89:48:43:2d:ba:9c:43:70:c0:58:
48:dd:07:96:81:05:31:7a:d4:b2:70:2c:a1:23:e8:1f:9f:30:
99:d3:0b:fc:9a:4f:ef:75:38:a3:05:d4:02:5e:d5:d5:d9:a9:
db:cf:fe:61:71:77:be:5d:02:6a:a6:94:51:6d:1c:3a:d2:d0:
48:94:d3:72:97:5d:0d:78:d3:29:e3:30:b4:49:0f:47:4b:32:
cd:1d:bf:b0:a2:ce:d5:15:a6:a7:40:ad:59:f5:c4:3c:20:28:
de:cf:23:61:b7:90:53:97:3a:36:24:74:8f:f4:ea:2a:35:88:
c4:09:da:4c:3a:08:56:d3:94:97:70:1d:e8:cd:bd:30:90:2b:
0c:3f:d7:6f:5a:ca:8a:84:d4:77:46:6e:22:fd:78:3c:d4:56:
9a:fe:f4:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 06:22:01 2025 by rpki-client