Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363265353a3a2f34382d3438203d3e203136393039.roa
File: 326131343a373538343a363265353a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier: AMTvEUUch3YDWGKMGq1ssXFUQOYLK5YIcnXBCPE80Zs=
Subject key identifier: 23:61:42:DB:D2:84:09:8E:C2:65:BE:7E:09:03:AB:76:65:52:8B:0F
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 6A4D971E94FDC54F9F96CCF66E8DC70FB029F27A
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363265353a3a2f34382d3438203d3e203136393039.roa
Signing time: Sun 18 May 2025 18:06:02 +0000
ROA not before: Sun 18 May 2025 18:01:02 +0000
ROA not after: Sun 17 May 2026 18:06:02 +0000
asID: 16909
IP address blocks: 2a14:7584:62e5::/48 maxlen: 48
Validation: Failed, certificate revoked on Mon 19 May 2025 06:48:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6a:4d:97:1e:94:fd:c5:4f:9f:96:cc:f6:6e:8d:c7:0f:b0:29:f2:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: May 18 18:01:02 2025 GMT
Not After : May 17 18:06:02 2026 GMT
Subject: CN=236142DBD284098EC265BE7E0903AB7665528B0F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:5b:21:35:9f:c1:3d:62:38:b0:92:b7:12:be:
46:32:90:6f:f2:83:3f:f2:b8:78:83:b2:24:21:f8:
ee:18:74:f2:53:70:14:a3:23:9a:43:27:f3:ba:2f:
58:b1:ed:e5:3e:91:00:4d:9f:43:38:c4:24:e9:26:
73:9c:6c:85:e1:61:46:56:8b:1c:fc:51:a0:a0:6d:
13:73:5d:a3:3a:3a:5a:cd:df:a6:7e:8d:51:2c:1f:
dc:67:36:7c:7b:8e:c9:bb:5c:a0:9a:f1:4e:d1:84:
95:b2:8d:81:19:b7:11:b2:ac:3d:2b:47:89:41:3a:
f1:ed:c1:9f:4e:4f:25:84:b9:ae:ff:40:28:93:54:
3a:f7:0c:94:9a:bb:7a:3d:45:db:a5:ce:76:a4:5d:
7d:25:cb:26:67:98:d1:c2:6f:de:89:bc:3e:95:7c:
97:e7:16:1e:50:1d:48:44:28:f5:fc:0a:55:ea:1d:
9f:99:11:11:64:4f:67:df:07:4d:84:91:88:0f:14:
76:cc:26:0e:04:40:dd:32:97:d7:72:89:b6:a8:ef:
24:35:ac:2a:03:27:8a:5c:ba:9c:18:ac:04:5f:ba:
d0:0d:50:87:bc:e3:3d:c2:79:3a:bf:17:03:2e:f8:
e8:f8:87:0d:7e:b3:0d:70:0e:eb:a0:18:f0:5f:34:
1d:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:61:42:DB:D2:84:09:8E:C2:65:BE:7E:09:03:AB:76:65:52:8B:0F
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363265353a3a2f34382d3438203d3e203136393039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:62e5::/48
Signature Algorithm: sha256WithRSAEncryption
b6:f2:3c:eb:3d:6f:1a:96:af:df:e1:b9:dd:d6:30:44:97:14:
ee:dd:b2:ce:4e:dc:df:c3:15:35:34:fe:ac:74:00:3b:70:37:
0f:8f:2f:9e:58:fb:a1:16:b8:69:8c:68:8c:e6:ab:26:bc:38:
76:44:a0:0f:1f:f3:5b:c0:93:09:60:5f:7e:fb:e5:d6:df:12:
5f:b3:7c:d5:c0:72:05:86:27:52:a7:af:75:30:e8:6c:91:4a:
94:56:aa:b5:64:ca:38:2d:0e:2b:0a:10:bd:67:ed:ae:cf:dd:
bc:73:37:2e:0d:42:18:6c:cb:40:77:1c:2e:0a:88:6d:fd:b9:
81:a2:3a:9b:33:53:ad:7a:8d:95:a1:3d:ed:c4:be:b9:d8:cc:
1e:a4:57:20:29:f9:c2:ec:8b:20:fc:de:ad:3f:3e:c8:81:04:
12:e9:e8:6f:d8:6e:15:97:2f:4d:dc:03:e7:4e:9a:4f:89:05:
56:88:5b:c2:f1:70:3f:9e:c2:56:3c:44:ae:2f:db:f2:94:34:
54:b5:56:89:3e:4b:90:76:76:cb:2c:00:8e:ef:ea:3d:c0:cc:
25:15:bb:2a:66:0e:1a:43:ad:d6:87:e9:54:1f:a2:5f:bc:fb:
96:93:49:b4:a4:5d:fb:80:79:ec:18:31:65:47:cf:49:fb:c9:
80:21:ca:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 04:56:43 2025 by rpki-client