Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363266313a3a2f34382d3438203d3e203136393039.roa
File: 326131343a373538343a363266313a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier: dQU5fBkiOq/KOhiE9TA4jqq7Zf6D+IQaEI4HtjyXCiM=
Subject key identifier: 67:E3:31:AB:5E:C3:EC:E0:E4:B5:67:9E:BF:71:8F:1A:59:7F:24:DF
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 3970BF335597C539D529E42DDD09B7E9A965EB16
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363266313a3a2f34382d3438203d3e203136393039.roa
Signing time: Sun 18 May 2025 23:12:01 +0000
ROA not before: Sun 18 May 2025 23:07:01 +0000
ROA not after: Sun 17 May 2026 23:12:01 +0000
asID: 16909
IP address blocks: 2a14:7584:62f1::/48 maxlen: 48
Validation: Failed, certificate revoked on Tue 20 May 2025 18:06:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
39:70:bf:33:55:97:c5:39:d5:29:e4:2d:dd:09:b7:e9:a9:65:eb:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: May 18 23:07:01 2025 GMT
Not After : May 17 23:12:01 2026 GMT
Subject: CN=67E331AB5EC3ECE0E4B5679EBF718F1A597F24DF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:6d:17:3b:0c:b7:44:68:e3:39:05:34:bc:fa:
f5:15:eb:81:9f:77:41:8c:6a:09:a0:7e:f6:cd:4e:
1d:1b:8a:1f:5e:46:8c:88:74:5c:1b:24:b0:b5:25:
39:9c:4e:77:f2:32:e3:4d:bc:ef:6b:0d:b0:c4:e7:
f6:ea:1e:99:2f:3b:a4:f8:f9:a8:cc:5b:e0:6b:35:
0e:fc:bf:70:b4:7a:c6:8c:59:2e:7b:77:ef:a3:48:
59:ad:34:f6:db:76:c5:83:a3:63:08:6a:9d:d7:a6:
24:15:b7:88:6c:ce:46:f0:22:21:b2:cd:33:1b:d5:
36:7f:fb:9b:ca:75:fe:e4:28:48:be:79:39:5e:26:
02:7c:cd:f8:92:38:d4:80:4d:de:4c:33:5f:b4:fd:
07:1e:b5:73:48:e6:52:c1:7f:b1:f6:5a:8e:50:44:
8d:22:ae:95:0a:ee:17:88:d6:5a:65:e4:21:4d:c7:
56:52:ea:da:89:c1:85:1a:56:50:7e:98:c5:d1:ca:
8e:1d:f1:f5:d3:b8:82:06:c8:e0:b3:c3:21:54:9a:
20:e6:fe:d2:1d:96:f5:e3:8f:fb:a3:c5:f6:01:81:
8c:f5:21:07:0e:8e:b7:12:ac:32:4c:fc:6a:2d:32:
67:ef:dd:62:4e:a4:f5:0c:23:bb:15:e1:ab:d0:f3:
a6:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:E3:31:AB:5E:C3:EC:E0:E4:B5:67:9E:BF:71:8F:1A:59:7F:24:DF
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363266313a3a2f34382d3438203d3e203136393039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:62f1::/48
Signature Algorithm: sha256WithRSAEncryption
66:84:12:4d:67:df:69:56:61:ec:d6:cc:57:f2:e6:8e:cb:90:
13:40:e3:6e:d1:f1:06:2a:95:25:c2:e8:e3:8a:90:ba:9c:5e:
ad:9d:46:f7:bc:e4:c5:67:d5:44:03:ae:ff:a1:f6:59:33:20:
7a:26:c1:8a:e7:95:1f:c1:c5:5c:15:2c:9b:af:4f:5a:28:97:
4d:3d:52:76:00:5f:92:1f:a1:28:bc:6d:a1:79:f1:ff:ce:6e:
b4:85:0a:2a:15:e3:30:fa:85:98:4a:8a:71:d6:05:c5:dd:2c:
b0:60:e5:71:6b:d0:f1:f5:0d:27:7e:c5:47:d5:d9:71:de:d5:
84:93:ff:6c:13:2a:05:af:90:4b:00:c6:eb:bb:b6:34:28:ea:
db:03:08:04:ea:06:30:94:58:52:d8:2d:6d:ff:9f:53:5e:5a:
5d:ac:be:8b:a2:4b:1e:cc:85:75:22:ae:cd:b3:c7:16:6b:95:
06:c0:26:d1:01:1d:3e:99:5d:7f:b8:94:60:74:a9:34:ef:67:
d4:fa:f6:c4:10:a3:22:48:1d:2e:21:84:fe:88:27:af:38:3d:
c6:d0:85:63:e9:18:9d:33:72:cc:2e:ec:61:b0:dc:2a:b7:12:
b7:e8:f7:f3:04:f6:f2:71:47:56:6c:da:40:e3:5c:75:04:9c:
6f:07:96:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 07:33:57 2025 by rpki-client