Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363264623a3a2f34382d3438203d3e203136393039.roa
File: 326131343a373538343a363264623a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier: nNBEMaG0g/JqM7ki0raLQhVUXez+N5Utf/Zs4jmM2/c=
Subject key identifier: 94:F4:61:7D:ED:6B:FE:CA:45:B6:C7:CA:E5:B0:73:BD:25:07:9F:58
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 39CBFB56EF352D03233F4A6BAFF8ABDF6E28F7C9
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363264623a3a2f34382d3438203d3e203136393039.roa
Signing time: Sun 18 May 2025 02:18:02 +0000
ROA not before: Sun 18 May 2025 02:13:02 +0000
ROA not after: Sun 17 May 2026 02:18:02 +0000
asID: 16909
IP address blocks: 2a14:7584:62db::/48 maxlen: 48
Validation: Failed, certificate revoked on Mon 19 May 2025 20:48:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
39:cb:fb:56:ef:35:2d:03:23:3f:4a:6b:af:f8:ab:df:6e:28:f7:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: May 18 02:13:02 2025 GMT
Not After : May 17 02:18:02 2026 GMT
Subject: CN=94F4617DED6BFECA45B6C7CAE5B073BD25079F58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:8a:06:58:8b:79:9f:33:1b:3f:19:cc:fe:d0:
6a:4b:73:95:e9:ea:a5:c2:06:47:8f:dc:45:a0:46:
6c:99:6a:ff:a2:31:d0:f5:78:ad:7d:4a:49:4b:0d:
1d:4e:4e:5f:61:74:c6:05:3a:fd:2e:5c:20:ad:c5:
3e:07:05:7f:ee:ca:26:d1:94:ae:c7:d2:9f:51:8e:
ad:d5:2c:95:0f:7f:bf:5e:02:2b:f9:f9:36:95:7c:
07:08:85:68:62:87:8f:ac:fa:d0:3a:be:98:09:74:
c1:99:8a:09:65:8d:46:8f:59:48:02:22:16:8c:f7:
3a:da:b8:da:4b:80:f4:21:80:38:d9:1a:e2:00:5a:
95:71:61:a1:6e:25:28:d5:ce:76:1b:e3:06:ab:e9:
a9:b5:04:59:c7:9a:23:b2:f1:02:e1:48:cd:69:72:
8f:f2:8d:78:a1:9e:2a:ea:b1:47:38:a8:2b:a3:e8:
d6:75:77:0b:27:2b:b6:cb:33:2e:82:8c:ab:01:e1:
22:29:72:6a:91:82:9f:99:e7:a3:f6:79:73:dd:07:
17:bc:9d:98:3d:98:28:0c:af:c3:74:06:c1:30:e3:
d2:ac:5f:c6:30:77:6b:b1:1e:45:9e:63:ee:2b:3f:
ec:0c:cc:e9:89:4c:76:33:c0:2d:a2:2a:ea:ea:53:
20:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:F4:61:7D:ED:6B:FE:CA:45:B6:C7:CA:E5:B0:73:BD:25:07:9F:58
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363264623a3a2f34382d3438203d3e203136393039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:62db::/48
Signature Algorithm: sha256WithRSAEncryption
38:53:e3:2a:d2:2c:e1:d5:00:b3:ec:12:66:94:ae:d6:bc:09:
c5:88:2e:d3:54:b4:dc:58:c5:52:36:ef:5e:00:ab:29:30:d7:
13:78:18:63:76:87:53:70:a6:5b:93:fb:e8:17:12:41:bd:50:
c0:55:47:61:96:f5:26:c1:ac:7f:6b:93:af:eb:d3:0d:c4:7e:
87:b4:3b:95:84:bd:2e:0a:c9:e1:a3:9d:a8:6b:97:e0:21:ae:
8d:cc:3a:d9:9d:33:f7:22:f9:bf:38:74:37:ee:96:8f:30:eb:
39:7e:cf:8b:ac:a1:70:1e:dc:b0:6a:9a:58:73:91:99:ed:da:
cd:4f:6e:8c:cd:1c:e5:4b:30:9c:7b:51:c4:5e:ee:ec:7b:de:
e8:fe:b0:99:bc:20:77:ed:a6:37:09:65:d9:0b:40:c9:4c:fc:
66:fd:ed:2a:36:0e:5f:2e:24:e4:ae:55:6f:b1:a4:4d:73:48:
9b:95:90:f1:5a:07:db:c7:9b:ca:ad:c4:fd:35:60:d9:89:ea:
ce:81:f8:2d:98:2d:45:03:a6:e6:fe:bb:87:d9:fe:f0:5c:c0:
0a:bc:bd:ce:3c:02:a2:d1:40:68:a6:02:47:da:f0:d0:a7:09:
3b:f9:ed:b5:44:95:f1:ec:f7:3f:76:0e:41:73:4e:48:8b:a9:
41:3f:8f:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 04:57:55 2025 by rpki-client