Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363266333a3a2f34382d3438203d3e203136393039.roa
File: 326131343a373538343a363266333a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier: zIroOrNo+67tY14m+ITVuSgw6PUPgWs9a+YG2ECTm0w=
Subject key identifier: 70:66:44:57:B2:41:AD:CC:EC:85:1B:AE:05:B6:A9:7B:7D:A5:16:6D
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 6CDBF58C5FA8B534EFE797263E1BA2E984B67899
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363266333a3a2f34382d3438203d3e203136393039.roa
Signing time: Sun 18 May 2025 23:12:01 +0000
ROA not before: Sun 18 May 2025 23:07:01 +0000
ROA not after: Sun 17 May 2026 23:12:01 +0000
asID: 16909
IP address blocks: 2a14:7584:62f3::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 21 May 2025 07:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6c:db:f5:8c:5f:a8:b5:34:ef:e7:97:26:3e:1b:a2:e9:84:b6:78:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: May 18 23:07:01 2025 GMT
Not After : May 17 23:12:01 2026 GMT
Subject: CN=70664457B241ADCCEC851BAE05B6A97B7DA5166D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:22:50:76:f2:c9:f1:87:8e:6b:ba:a4:c3:34:
a8:77:50:31:1a:c2:48:50:03:e8:41:ae:7d:50:13:
1d:25:83:5b:0b:01:b5:0a:3f:47:83:07:f4:af:89:
c6:f9:c3:ce:07:c6:3d:e9:8c:5b:a0:9e:f0:7a:bc:
44:be:ed:86:b5:e2:8f:a5:2b:66:90:82:c6:7f:1f:
a4:36:f3:22:42:b4:a5:87:0d:bf:d2:8b:43:5f:1c:
5f:6b:9d:46:e7:de:c3:b2:1b:d0:2b:84:32:68:4f:
fb:d0:83:58:35:43:f6:1c:b8:64:f1:c3:dc:16:76:
75:aa:4c:2d:b5:a3:cf:80:a1:85:04:ef:19:27:43:
89:55:70:fd:3c:cb:2e:94:1b:f9:be:e9:23:f9:8a:
0c:61:15:39:1e:7a:31:67:6d:e9:22:b1:76:aa:b7:
75:af:f5:e6:45:be:7a:ab:ea:e5:98:19:c0:e8:02:
fa:fb:11:a1:5b:91:7a:8d:75:46:ac:f2:53:c9:02:
bc:e3:1a:f0:7b:23:52:89:ed:a6:ff:ac:a5:89:d2:
88:6b:94:0e:d6:4d:8a:c6:89:77:2b:6d:49:07:52:
7e:a7:c7:7f:93:7a:e2:cc:a9:15:6f:ce:c6:4a:d3:
72:32:31:09:36:6f:e3:7e:62:18:01:62:08:c0:d4:
53:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:66:44:57:B2:41:AD:CC:EC:85:1B:AE:05:B6:A9:7B:7D:A5:16:6D
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363266333a3a2f34382d3438203d3e203136393039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:62f3::/48
Signature Algorithm: sha256WithRSAEncryption
ad:39:36:78:71:13:f3:0a:18:fa:98:a3:61:3b:3b:11:0c:44:
94:b4:00:a1:f4:62:9a:01:ab:ee:0d:49:eb:62:dd:b3:0c:5b:
aa:20:03:cd:4a:4d:da:95:a5:b1:b7:1c:b6:ea:66:b7:d4:6d:
6e:b4:e8:9a:51:63:64:cd:6d:73:bd:5d:bf:d3:7c:e6:5d:c5:
48:b9:0b:a0:81:cd:70:81:68:e1:96:6b:9b:a2:25:d2:05:7b:
7b:bf:0a:8d:7a:d2:55:d3:f2:37:de:ae:b9:e7:04:eb:7b:48:
d8:1d:c2:94:c7:90:45:1a:69:ec:dd:9e:1f:44:85:73:c8:f1:
bd:ab:ad:ab:64:70:9f:b8:fe:dc:a3:42:06:5c:d2:31:12:5d:
bd:75:99:8a:1f:05:0d:1b:07:b6:33:ec:74:29:31:8a:91:8b:
45:2b:30:85:70:14:bb:f1:f6:ec:f3:f4:a2:ed:c0:57:49:37:
4c:91:a4:b3:ba:c0:0e:e4:cf:8f:35:cf:27:b1:ca:2e:05:d3:
40:fe:7e:84:ff:5a:f0:68:a3:a3:79:fb:d4:b6:5e:22:86:8a:
8d:e0:89:07:7f:33:17:20:de:0e:eb:7b:e9:bc:88:01:9d:38:
67:3f:ca:d0:6b:6a:33:66:a7:db:bb:e6:ad:11:cf:11:a8:f1:
b3:bd:6d:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 07:41:19 2025 by rpki-client