Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363266613a3a2f34382d3438203d3e203136393039.roa
File: 326131343a373538343a363266613a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier: vx3M/n8Gxx67VOXj/l9Hqs3nxpm+UONnATqbheWDm1c=
Subject key identifier: 17:58:30:2B:CD:D3:2A:2F:ED:7A:36:00:46:89:E1:44:F4:0D:E5:39
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 72A9F735A0EA08BBAAF3D64A9926FB7FD6D07A5C
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363266613a3a2f34382d3438203d3e203136393039.roa
Signing time: Mon 19 May 2025 06:54:02 +0000
ROA not before: Mon 19 May 2025 06:49:02 +0000
ROA not after: Mon 18 May 2026 06:54:02 +0000
asID: 16909
IP address blocks: 2a14:7584:62fa::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 21 May 2025 18:06:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
72:a9:f7:35:a0:ea:08:bb:aa:f3:d6:4a:99:26:fb:7f:d6:d0:7a:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: May 19 06:49:02 2025 GMT
Not After : May 18 06:54:02 2026 GMT
Subject: CN=1758302BCDD32A2FED7A36004689E144F40DE539
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:5b:32:81:e9:94:59:d1:74:e0:dd:b3:e1:b7:
ef:af:c3:e4:cf:ad:2e:f2:50:a2:c0:9f:e3:37:80:
36:0d:85:4f:02:16:d3:47:37:1e:9e:27:8b:bc:5e:
69:24:23:1b:45:8c:c9:d2:0e:9c:f2:98:83:5f:44:
1e:d1:38:8e:f7:29:ff:b6:a8:97:b5:64:f5:4f:d4:
78:db:42:01:bf:d0:76:e0:7c:be:e2:37:42:fa:0e:
78:d1:1f:3f:f1:47:33:08:5c:33:c1:b4:7c:36:c4:
fc:99:ce:e4:36:f9:f6:d0:b9:83:db:64:7d:bd:b2:
0a:05:59:fc:91:19:55:20:0f:3c:6d:97:f2:ed:a2:
cf:a2:53:a0:e4:e3:f3:f8:98:43:de:42:b1:4e:85:
e7:f6:fb:32:3e:13:b2:c0:32:65:24:df:48:63:f8:
0f:c0:6d:21:6f:69:bd:2f:d3:07:22:6e:c8:9b:47:
7e:31:18:ab:9d:85:30:db:58:0c:1b:16:b6:ea:91:
7c:2f:2b:a1:12:3d:77:5c:e7:df:47:5a:92:aa:dd:
e6:3b:b3:1e:2f:ef:49:f7:a5:2f:12:e5:9d:c9:4c:
2b:27:a1:07:7a:d6:29:e5:6b:e2:f8:7d:89:07:ac:
1f:51:bf:df:24:d2:4d:a7:6a:c2:4a:90:6e:f8:89:
88:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:58:30:2B:CD:D3:2A:2F:ED:7A:36:00:46:89:E1:44:F4:0D:E5:39
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363266613a3a2f34382d3438203d3e203136393039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:62fa::/48
Signature Algorithm: sha256WithRSAEncryption
1c:dc:a1:ae:7b:4a:82:26:09:e6:c6:6a:48:4a:ac:45:4b:9d:
18:83:e9:f7:97:66:d0:b0:76:6a:e1:5f:52:e4:0f:05:3b:2b:
cf:ce:48:ca:78:fc:cd:ea:e1:d4:52:ed:17:14:e6:05:f1:18:
66:4f:2e:96:0c:54:fd:a0:1f:33:76:35:89:89:38:61:8f:9d:
ce:a4:96:e1:be:c5:b9:5f:20:1f:54:58:5d:b8:ae:d7:38:e1:
e7:55:65:6c:6b:f9:cc:98:d5:14:4a:6e:69:10:cb:ba:39:8c:
27:33:03:ff:66:44:66:12:52:a2:d6:eb:7b:aa:a7:29:9a:99:
e9:5e:d4:2c:bf:31:16:e0:54:34:89:64:4b:08:96:88:7c:75:
b3:42:3b:f2:99:de:b9:fe:35:1f:63:e5:6f:09:54:a2:e9:8c:
30:d9:ad:58:c2:ae:0d:d1:d8:1c:a3:24:ae:35:cd:00:2b:dd:
bd:4f:ac:f9:da:b8:b8:91:81:53:01:94:dc:40:41:c7:ae:1c:
ee:1a:a1:db:88:d6:b1:4e:c4:29:0f:7a:81:4f:41:88:b7:4a:
c0:8c:d0:f5:53:95:be:46:9e:56:9a:d4:0b:20:15:36:a7:91:
71:4c:3e:f1:29:ec:30:33:36:b1:fa:dd:10:ba:4f:1f:1a:a2:
16:f3:77:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 06:10:11 2025 by rpki-client