Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363265643a3a2f34382d3438203d3e203136393039.roa
File: 326131343a373538343a363265643a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier: xu7a2xzT3PEY068iBjQ1yRH/zgZOZvxEM4+g6GAx+KQ=
Subject key identifier: 6B:19:16:35:D9:51:D3:02:E1:4E:5B:7C:C8:39:42:69:9D:7B:CE:CF
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 71D23F88E2A4847351B70050162AD987A775B419
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363265643a3a2f34382d3438203d3e203136393039.roa
Signing time: Sun 18 May 2025 23:06:02 +0000
ROA not before: Sun 18 May 2025 23:01:02 +0000
ROA not after: Sun 17 May 2026 23:06:02 +0000
asID: 16909
IP address blocks: 2a14:7584:62ed::/48 maxlen: 48
Validation: Failed, certificate revoked on Mon 19 May 2025 22:54:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
71:d2:3f:88:e2:a4:84:73:51:b7:00:50:16:2a:d9:87:a7:75:b4:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: May 18 23:01:02 2025 GMT
Not After : May 17 23:06:02 2026 GMT
Subject: CN=6B191635D951D302E14E5B7CC83942699D7BCECF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:e8:42:3f:37:76:04:5d:36:ef:6f:1f:8a:1b:
b3:c2:47:e2:e7:3d:ac:ab:6a:8f:fd:b9:49:c4:f6:
b1:80:a1:8f:68:e2:f2:b8:1f:61:07:d7:eb:8c:f5:
cd:90:ae:b6:e2:6c:32:60:42:e5:06:e7:dc:66:28:
8d:35:e4:f2:95:1a:ae:04:3c:64:48:9b:c6:f9:0b:
a6:9f:1b:76:12:e8:30:77:48:2b:36:a9:00:30:28:
ba:25:32:c0:cc:6c:7f:97:e9:c3:15:44:31:ab:96:
0a:a2:ad:18:66:be:c3:90:78:90:55:75:ca:66:4c:
61:f6:98:89:92:f0:b0:f9:1f:49:f1:13:47:3c:77:
93:96:40:5a:65:eb:b1:0b:1d:e5:b2:98:9a:ba:15:
a1:84:8c:36:8c:25:e2:15:42:0a:3d:97:09:f8:0a:
ad:65:d1:87:30:df:3c:3b:a6:09:8f:f4:f3:1e:84:
37:fe:b6:29:c6:3e:39:fd:65:df:f7:7c:5c:f6:8a:
45:ab:c2:51:66:5d:9b:43:70:5b:4e:31:ea:c8:0c:
7c:32:28:86:9f:76:7e:e4:2c:d9:c9:c4:80:5d:f4:
8a:7e:15:fe:bc:a3:89:01:41:c2:19:18:88:ed:99:
45:e0:8f:6d:c4:f5:7f:f1:fb:ca:f9:e1:cb:d8:aa:
30:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:19:16:35:D9:51:D3:02:E1:4E:5B:7C:C8:39:42:69:9D:7B:CE:CF
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363265643a3a2f34382d3438203d3e203136393039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:62ed::/48
Signature Algorithm: sha256WithRSAEncryption
94:09:94:a1:27:90:0d:6b:f0:52:9d:90:ef:ca:33:dd:3a:21:
30:03:b5:d4:58:92:b5:74:e6:69:23:3e:85:88:14:81:3b:99:
9b:7f:1c:f5:26:67:f6:91:32:39:6f:af:e4:af:b2:d5:85:1e:
ba:e4:79:d9:fc:02:7e:33:22:6d:7a:22:52:fc:3d:65:c3:68:
a2:75:79:ed:b8:f6:66:b2:07:d7:21:78:e0:5f:0d:b4:82:3a:
8d:a5:38:29:e6:e2:fc:ec:92:f2:6a:23:96:75:73:4e:f1:45:
2c:2e:10:11:4a:4b:c3:e7:c8:b7:17:63:66:06:48:ba:5e:f1:
8d:e0:da:b2:59:cb:24:4b:e2:21:ae:ed:87:09:a1:26:a8:aa:
27:3e:50:b7:69:b2:d3:46:a5:9f:8c:20:7c:db:b4:18:50:04:
c4:9e:72:8c:b0:3c:d6:92:00:40:57:aa:e2:66:ea:06:b0:84:
c8:0a:dd:b3:31:6e:98:27:ba:71:5b:f1:8c:05:0c:20:9b:69:
16:36:01:43:c3:ce:5a:38:3a:01:09:b3:79:a5:7a:95:c8:95:
24:f8:4d:87:af:71:97:fa:ac:5a:92:46:0e:f1:68:85:46:1b:
34:77:39:68:62:92:2d:b8:d6:8b:4d:57:b0:67:bc:ee:50:81:
0d:63:2a:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 02:50:55 2025 by rpki-client