Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363266353a3a2f34382d3438203d3e203136393039.roa
File: 326131343a373538343a363266353a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier: tHSKsRK7Ok5R3kDWLYYcO3hxTgzVxDroANwC9uv6VRw=
Subject key identifier: F7:7A:58:2F:EA:09:E6:68:37:A9:07:39:8F:72:9B:49:FF:E9:5B:59
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 2639D9D45D81179597D3571ECCCEABFAFCF64987
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363266353a3a2f34382d3438203d3e203136393039.roa
Signing time: Sun 18 May 2025 23:18:02 +0000
ROA not before: Sun 18 May 2025 23:13:02 +0000
ROA not after: Sun 17 May 2026 23:18:02 +0000
asID: 16909
IP address blocks: 2a14:7584:62f5::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 21 May 2025 18:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
26:39:d9:d4:5d:81:17:95:97:d3:57:1e:cc:ce:ab:fa:fc:f6:49:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: May 18 23:13:02 2025 GMT
Not After : May 17 23:18:02 2026 GMT
Subject: CN=F77A582FEA09E66837A907398F729B49FFE95B59
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:60:6f:71:1c:07:56:3f:97:93:fb:15:0d:d2:
06:2d:15:90:61:ad:36:f9:ea:03:ae:1b:f3:19:77:
ad:61:ab:68:b2:90:0a:6e:d3:07:70:7e:f8:ce:77:
2d:b6:43:58:ca:9a:8e:1a:3d:c7:a8:9c:da:01:78:
9c:df:f9:f9:0c:fa:1f:25:b0:a4:92:67:50:a5:49:
fd:e5:e7:da:57:22:fd:8b:95:a3:d1:ec:c2:81:39:
4d:4c:b2:a2:60:b9:96:f1:31:16:64:0b:98:ac:34:
c3:bf:1c:99:1b:16:1c:f9:5c:0b:9c:4d:46:3f:50:
15:53:44:f9:59:19:39:da:24:95:fb:0c:b5:c0:e7:
cf:38:ec:a1:a8:05:a2:94:69:a9:e0:89:0a:39:90:
d4:08:f4:d2:a5:1f:a9:75:1b:81:d6:ef:51:aa:34:
c8:e4:c2:fb:61:64:2b:89:a4:90:53:ae:eb:a2:36:
e6:4f:a7:71:a9:43:6b:7a:f0:f1:ea:c3:af:f8:52:
f3:bd:c0:b8:0c:93:a0:60:27:c8:c7:e9:e5:95:97:
9a:c5:00:f4:05:04:9f:f2:bc:ae:9b:1e:b4:f8:58:
3b:f1:a6:de:f7:b3:69:98:3f:2f:e8:b2:5e:c2:c7:
6d:03:e5:6a:60:ca:4c:9b:d9:60:1b:65:29:17:82:
6e:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:7A:58:2F:EA:09:E6:68:37:A9:07:39:8F:72:9B:49:FF:E9:5B:59
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363266353a3a2f34382d3438203d3e203136393039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:62f5::/48
Signature Algorithm: sha256WithRSAEncryption
98:e5:56:2e:d5:cc:c3:78:c4:81:35:59:f8:72:06:ff:48:84:
73:9c:7a:92:aa:31:57:f9:fc:04:04:1f:af:53:91:a7:64:23:
9a:90:c8:54:f6:22:0c:6e:64:4c:f2:e3:0a:cc:15:23:5e:6a:
20:c0:d0:70:16:dd:dc:e0:85:49:46:96:05:26:eb:fa:f4:aa:
c7:c5:81:5b:45:02:a1:cf:3e:9e:da:53:77:88:fc:0a:e1:71:
ac:98:1b:87:19:46:66:0e:83:43:af:a5:54:75:8f:6b:3e:9a:
db:53:b0:0f:85:58:6e:22:13:87:dd:50:d5:00:34:d7:a5:e6:
f7:d4:e8:0a:81:bb:c9:4f:cc:f7:cb:01:46:89:37:5d:53:33:
07:9f:1d:35:a0:85:e4:d2:7e:68:09:2b:25:59:9d:f9:59:93:
78:0c:b3:11:79:e3:7f:1a:3d:b1:04:ed:7d:98:b0:75:a7:d4:
76:55:84:ac:c7:3f:c8:5d:f5:d1:a9:c4:a7:b5:b6:0f:30:db:
71:1a:23:cd:d6:67:fe:a7:41:0a:34:85:43:f7:20:36:c3:9a:
b1:ca:12:98:c2:4d:69:1e:e2:c0:c1:8d:6e:46:41:49:23:3b:
41:40:24:bf:57:d8:c3:61:55:f4:4f:98:41:21:fb:57:6d:83:
be:6f:c1:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 06:36:00 2025 by rpki-client