Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363266343a3a2f34382d3438203d3e203136393039.roa
File: 326131343a373538343a363266343a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier: MNFhR5kHEeOFMRlrrju1nsyymHQd4YkEI033N6Lnars=
Subject key identifier: 2F:07:7F:2D:DB:1D:E1:C8:75:F9:98:FE:70:83:4F:2B:98:23:73:3D
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 6E4FA55EBB26FD837E86DAC23C209EB4C4653F63
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363266343a3a2f34382d3438203d3e203136393039.roa
Signing time: Sun 18 May 2025 23:18:02 +0000
ROA not before: Sun 18 May 2025 23:13:02 +0000
ROA not after: Sun 17 May 2026 23:18:02 +0000
asID: 16909
IP address blocks: 2a14:7584:62f4::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 21 May 2025 07:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6e:4f:a5:5e:bb:26:fd:83:7e:86:da:c2:3c:20:9e:b4:c4:65:3f:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: May 18 23:13:02 2025 GMT
Not After : May 17 23:18:02 2026 GMT
Subject: CN=2F077F2DDB1DE1C875F998FE70834F2B9823733D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:77:67:74:90:6c:ea:ca:82:36:4a:43:5f:8a:
ed:d8:08:87:a5:5e:2d:07:c8:32:46:e9:b7:37:69:
1c:40:f3:8e:f5:f0:34:c4:a0:c5:09:e7:46:0d:f3:
26:68:8c:fa:1e:a2:f2:86:63:a6:d6:31:75:1b:23:
05:08:81:04:f5:75:69:0d:6c:71:a4:12:2f:73:7f:
7a:1f:7d:9f:0f:33:26:9a:ce:f5:c4:83:1e:d1:19:
fe:93:93:9f:21:bd:ee:61:ef:25:b2:09:62:c2:df:
2e:97:00:49:79:0f:35:cd:f6:dc:70:c0:79:b3:c2:
7a:1f:84:75:37:0c:40:a3:7b:bc:5f:5e:e3:5d:a3:
8c:09:98:63:ab:ba:17:23:f6:bb:6b:4b:a8:23:4b:
8c:d1:c5:7f:5f:ec:f6:6d:e4:68:0d:44:5e:6e:21:
e0:10:82:6e:13:19:4c:85:96:24:50:f1:65:53:c6:
dc:d8:53:ef:2d:32:8a:82:26:60:83:ab:03:67:35:
ab:2d:40:07:b1:09:7c:e4:9f:66:19:3e:01:9b:60:
d6:12:e7:76:56:55:51:43:db:cf:fa:1b:9c:23:cf:
6c:30:6a:8f:00:f0:e4:56:fb:84:1f:5f:f6:4d:17:
6f:86:e0:4a:1f:df:b8:d0:e6:65:a6:37:26:e1:3f:
5e:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:07:7F:2D:DB:1D:E1:C8:75:F9:98:FE:70:83:4F:2B:98:23:73:3D
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363266343a3a2f34382d3438203d3e203136393039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:62f4::/48
Signature Algorithm: sha256WithRSAEncryption
3a:3c:f9:2a:da:17:ad:0f:ff:53:31:04:f0:68:36:9d:02:2f:
2c:59:8b:fe:7a:ee:f5:f4:da:00:38:d5:e6:ad:e6:ac:32:47:
ef:d0:f0:73:1a:7d:1a:54:92:da:35:1a:34:73:76:1b:86:7d:
0e:b7:a0:e5:d8:4a:0e:ac:7c:00:c5:14:18:50:2a:98:02:44:
c9:59:1a:6c:a8:70:e8:f6:51:aa:16:7a:5b:70:66:79:4f:67:
d1:31:b3:2e:a2:8c:3c:ff:9c:f4:b9:2c:3c:87:7a:30:c9:25:
c2:4f:41:a3:03:92:c8:46:75:9c:8b:44:9f:58:46:af:9c:43:
81:3c:9f:bb:64:de:e2:7c:b5:36:c6:3f:cc:25:7d:00:a2:c2:
74:10:43:ac:c9:7a:27:56:22:5a:7c:34:cd:96:19:15:91:f3:
51:47:19:eb:be:dc:19:70:f3:ef:aa:b3:df:21:54:75:ee:9a:
88:e5:95:87:32:89:e4:82:fb:7c:e3:6b:30:4d:ce:7f:31:78:
ee:4c:3c:51:b2:b4:73:d1:98:9d:5f:39:79:ab:81:e2:b9:d1:
a6:2b:43:de:30:ef:4c:fc:d7:2a:8a:b3:ff:03:48:14:76:9b:
b7:84:63:05:80:e9:24:3e:71:bf:77:62:fb:5f:e1:1a:74:78:
4b:96:a9:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 14:43:46 2025 by rpki-client