Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363265333a3a2f34382d3438203d3e203136393039.roa
File: 326131343a373538343a363265333a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier: lv2av7jClvcIdA7wr3710t0OV2cH4OUIqsKOFDM8F4c=
Subject key identifier: 27:ED:84:88:7A:85:2B:80:B1:11:0F:66:2C:09:72:BC:C5:B1:DB:6C
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 1D179F40873F31E2F37BCF7438C3CCB9898BB5B1
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363265333a3a2f34382d3438203d3e203136393039.roa
Signing time: Sun 18 May 2025 11:18:02 +0000
ROA not before: Sun 18 May 2025 11:13:02 +0000
ROA not after: Sun 17 May 2026 11:18:02 +0000
asID: 16909
IP address blocks: 2a14:7584:62e3::/48 maxlen: 48
Validation: Failed, certificate revoked on Tue 20 May 2025 01:42:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1d:17:9f:40:87:3f:31:e2:f3:7b:cf:74:38:c3:cc:b9:89:8b:b5:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: May 18 11:13:02 2025 GMT
Not After : May 17 11:18:02 2026 GMT
Subject: CN=27ED84887A852B80B1110F662C0972BCC5B1DB6C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:ce:55:82:92:08:dc:70:83:08:bc:72:0b:c8:
e6:22:00:fd:4b:d4:05:84:aa:ad:d5:34:55:f6:c9:
7d:68:9d:0b:c1:0a:97:ee:1f:34:3f:6e:6d:1f:88:
68:18:41:33:55:97:ee:38:42:77:9c:0b:bd:d7:fa:
5b:99:a9:c5:c7:54:0e:f9:e8:8e:dc:34:75:2b:76:
c3:1a:43:ca:1d:d5:ca:4b:25:0c:84:24:34:bf:71:
ee:67:1b:e3:1b:07:65:6e:fe:6e:1b:58:ca:26:d7:
df:b5:d5:46:51:07:57:fe:85:7c:a9:c3:4f:80:22:
d5:ce:2c:c6:7b:e5:da:64:c4:5d:bf:c7:94:7e:7a:
bf:a9:0e:0e:e3:84:c7:05:cf:97:a3:cf:29:19:1e:
75:e9:82:cf:20:bd:c2:b6:3e:a4:15:8c:b8:02:d8:
05:dd:f0:85:a0:91:e6:5b:ef:31:8b:c5:f3:32:b5:
1e:f4:ae:91:d1:ff:1a:35:9e:84:36:75:7f:27:98:
55:1c:89:5f:19:4f:32:5e:5b:98:aa:4d:ae:8f:da:
15:61:ca:e3:16:af:2b:1a:05:e8:cf:8c:a1:f6:aa:
8f:66:04:55:ed:36:2b:27:18:38:c1:7f:27:6e:7d:
81:02:ca:e1:77:17:da:d3:cd:e0:82:ad:62:a8:48:
8f:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:ED:84:88:7A:85:2B:80:B1:11:0F:66:2C:09:72:BC:C5:B1:DB:6C
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363265333a3a2f34382d3438203d3e203136393039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:62e3::/48
Signature Algorithm: sha256WithRSAEncryption
71:37:db:73:d1:c6:da:8f:e2:dd:e7:76:dd:f0:61:aa:79:fc:
99:3e:72:93:02:c1:2b:d8:c8:58:7e:39:1a:47:64:e7:46:f9:
98:2c:67:fc:87:0b:11:53:41:0b:78:b4:06:b3:b0:e6:59:c2:
0f:76:ed:86:a9:b9:86:4f:31:5b:24:15:6d:ae:92:0a:a7:b4:
29:95:86:da:e6:2b:4a:86:94:9e:89:f6:02:07:91:bb:1b:07:
53:a3:48:e7:42:10:b7:3e:8b:87:a2:fa:88:50:3d:cd:1e:49:
41:10:c8:01:b2:fe:27:11:3f:e2:3e:33:10:1c:fb:38:e0:d5:
80:69:0f:25:2e:59:29:07:3e:8b:14:ab:0f:4d:ff:79:b5:90:
d6:75:22:f0:15:4e:d9:83:b3:59:36:56:01:35:77:20:9d:4e:
95:59:8e:89:80:9f:4a:6d:15:53:78:8e:fc:03:a9:9d:60:ff:
15:95:c2:c5:cc:e0:a3:97:4f:0f:e3:f2:d3:67:13:71:01:61:
6b:77:b5:3c:d9:2c:04:fd:e3:42:4c:16:43:a9:06:a8:2c:c3:
f1:8b:5c:54:ea:a9:b4:32:0d:c6:0c:b1:50:73:61:11:61:ce:
5e:60:f0:23:cc:c9:c9:68:9e:83:34:95:9e:e8:51:12:e2:87:
95:2f:cd:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 06:33:55 2025 by rpki-client