Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363266363a3a2f34382d3438203d3e203136393039.roa
File: 326131343a373538343a363266363a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier: RhD0oDQDhUQFwBDpWRxnxQK7qvG3N49+27KVoyAAgN0=
Subject key identifier: 01:69:8E:73:80:A8:7E:D2:43:43:D1:CD:A4:C6:3C:A4:98:30:BE:D3
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 0B87E413929B49DAA09DF0E4FD9BEEE67C92DD6E
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363266363a3a2f34382d3438203d3e203136393039.roa
Signing time: Sun 18 May 2025 23:18:02 +0000
ROA not before: Sun 18 May 2025 23:13:02 +0000
ROA not after: Sun 17 May 2026 23:18:02 +0000
asID: 16909
IP address blocks: 2a14:7584:62f6::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 21 May 2025 18:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0b:87:e4:13:92:9b:49:da:a0:9d:f0:e4:fd:9b:ee:e6:7c:92:dd:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: May 18 23:13:02 2025 GMT
Not After : May 17 23:18:02 2026 GMT
Subject: CN=01698E7380A87ED24343D1CDA4C63CA49830BED3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:76:0c:f8:a6:5a:9d:4e:de:05:c7:df:4e:47:
03:99:71:21:b3:fb:a3:80:6b:d1:30:c9:62:ed:14:
3e:08:d1:d1:aa:4f:41:4a:0d:09:9d:81:c3:13:e3:
43:26:4f:50:ce:c6:dd:64:e7:16:ee:46:72:1e:84:
a1:6a:e3:b4:db:01:fe:55:d5:02:40:94:81:e7:9b:
ac:9d:49:f8:34:8e:48:e9:d7:35:59:c6:7c:9f:7d:
52:ae:7e:32:ee:ce:cc:93:72:e4:9e:59:fb:d4:05:
b4:6b:1a:a2:91:69:7e:54:33:48:05:29:3a:d2:15:
cc:82:e8:e2:5f:05:99:62:f5:6b:25:4b:be:1c:9e:
de:2c:4b:31:c1:01:65:45:91:30:1d:64:89:cc:64:
50:95:27:27:a8:5c:47:cd:2f:1a:21:b3:61:5c:51:
89:79:2a:fb:48:a4:9a:d9:ac:4e:b9:c6:cb:10:d8:
05:45:04:bd:f4:b3:d6:01:2b:08:ed:48:a4:08:f8:
08:b1:47:78:1a:0c:c8:40:9b:bb:99:b9:e8:09:01:
42:09:c4:ba:6d:53:f4:20:f8:70:62:85:e6:4f:ae:
76:ee:cd:32:81:6e:bf:6a:88:06:e2:f4:15:a5:8e:
85:c1:07:a8:3e:e3:63:cc:22:1f:93:94:f0:dd:4e:
dd:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:69:8E:73:80:A8:7E:D2:43:43:D1:CD:A4:C6:3C:A4:98:30:BE:D3
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363266363a3a2f34382d3438203d3e203136393039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:62f6::/48
Signature Algorithm: sha256WithRSAEncryption
00:f3:ef:69:66:d8:b4:e9:78:6f:53:34:47:31:df:13:55:01:
3c:84:22:b8:c6:94:2b:c7:b3:64:a1:71:b4:68:ee:ea:8c:39:
17:d0:d1:e7:f5:4c:1c:f9:25:8d:7d:20:de:09:c2:85:b8:db:
a3:a4:69:b0:57:b0:5d:a5:52:ac:b9:e0:b5:ae:96:a3:4c:ac:
85:07:a4:32:3a:15:09:01:fe:19:35:7d:7b:b7:d3:90:eb:e5:
40:84:98:b4:1d:07:3b:8a:52:67:16:e4:99:89:68:0b:58:b6:
d3:b6:f3:b6:b9:74:e7:d6:59:50:1b:05:19:23:ed:f3:85:55:
a8:ee:5e:81:8d:ab:5e:80:08:82:07:2d:3e:5e:9e:7b:85:ee:
16:9c:67:50:f4:90:b8:36:99:ab:70:7a:41:d4:49:cb:1b:56:
73:e7:9f:0b:bb:e2:e6:82:4e:ab:6d:57:e0:68:c3:d7:f9:d5:
88:16:7d:91:6c:77:f1:cd:fd:de:b4:8b:de:ec:91:b8:83:ca:
16:94:bf:c5:ce:fa:36:76:ea:cd:64:0f:ab:1f:1a:83:47:cb:
04:33:d1:a2:c4:4c:14:54:83:97:36:85:25:5e:d9:fd:4d:93:
dc:0d:f8:76:5b:57:f0:b0:74:f9:ae:95:8b:62:af:ec:63:de:
95:5a:0d:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 07:57:44 2025 by rpki-client