Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363266633a3a2f34382d3438203d3e203136393039.roa
File: 326131343a373538343a363266633a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier: VRg5GjvuDyq3qcwITNS1dnUOowcTIHV17zROwdGKlL0=
Subject key identifier: 87:FF:02:22:77:26:92:B3:7E:EA:5F:6E:DC:0E:C9:53:05:5F:B0:AE
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 40ED59F0EB19ABDA6F51992121F471DDBD464DEA
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363266633a3a2f34382d3438203d3e203136393039.roa
Signing time: Mon 19 May 2025 06:54:02 +0000
ROA not before: Mon 19 May 2025 06:49:02 +0000
ROA not after: Mon 18 May 2026 06:54:02 +0000
asID: 16909
IP address blocks: 2a14:7584:62fc::/48 maxlen: 48
Validation: Failed, certificate revoked on Tue 20 May 2025 05:36:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
40:ed:59:f0:eb:19:ab:da:6f:51:99:21:21:f4:71:dd:bd:46:4d:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: May 19 06:49:02 2025 GMT
Not After : May 18 06:54:02 2026 GMT
Subject: CN=87FF0222772692B37EEA5F6EDC0EC953055FB0AE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:a5:3d:6f:ed:91:51:bb:ee:fc:8f:f9:41:a9:
65:b6:5a:10:e5:5f:71:85:6d:fe:10:37:3d:43:29:
8d:d1:e0:da:03:3a:7b:61:17:d6:f6:42:58:ff:d9:
f9:d5:d1:a1:88:47:65:d1:f8:2a:79:f6:72:ea:01:
23:de:7f:d8:2f:7f:2a:40:c6:3e:4b:84:c5:e9:04:
4d:60:39:ff:b0:4b:40:3c:f7:61:20:94:62:12:b9:
89:1a:6c:fb:14:e7:0e:67:50:3b:3b:30:2f:f1:f8:
4c:43:3e:0f:f5:ea:8b:e8:67:89:9d:62:52:9d:99:
d4:48:bf:af:e8:59:d2:96:16:dd:96:32:eb:f1:17:
13:cc:0d:f7:b7:d7:03:4c:10:01:73:f1:ff:8f:42:
50:81:77:3a:80:33:53:a5:1b:3d:69:6f:02:2f:05:
f2:4a:0c:e2:3f:ad:25:90:25:b6:63:06:ee:5f:02:
7e:77:4d:92:2b:e8:4a:3d:07:5e:6c:0b:21:8a:0d:
f9:ab:e1:2a:f1:9e:0a:76:34:8e:07:44:cd:81:38:
7d:b5:ed:24:2c:22:1a:6b:5a:ac:d2:d2:6c:d7:b6:
a9:6d:02:29:b7:2a:f1:b4:c1:4f:1c:c3:bb:de:ad:
92:57:7c:53:91:5b:38:e4:20:3b:e2:f7:8b:33:a1:
84:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:FF:02:22:77:26:92:B3:7E:EA:5F:6E:DC:0E:C9:53:05:5F:B0:AE
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363266633a3a2f34382d3438203d3e203136393039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:62fc::/48
Signature Algorithm: sha256WithRSAEncryption
19:b7:ba:f0:7b:8f:31:82:d8:55:51:d2:7b:67:b4:d6:75:4e:
34:e9:df:ca:e0:5f:c6:4f:64:89:67:4b:be:fe:67:7c:13:a8:
24:08:66:46:8a:8f:1b:c6:a1:1b:ed:0b:c0:12:c1:b4:4c:d5:
54:eb:0d:b6:1c:31:b5:57:99:75:57:b8:eb:98:5e:c5:ca:ef:
00:a6:6b:35:41:6b:c6:c4:f1:d8:70:d2:8b:e8:0f:b5:bd:6c:
ea:68:c5:1f:2c:ba:82:9e:57:ab:a1:fa:32:37:9e:0a:c6:a2:
02:14:c3:be:06:91:8b:57:fa:47:ae:4b:3f:65:91:bc:c4:4b:
6a:3f:e7:dd:1a:ad:3f:50:3c:da:9b:42:bd:36:81:b5:15:65:
6a:44:ef:17:33:aa:22:dc:a6:fd:88:87:26:08:b4:0c:5b:9b:
94:83:33:f1:e6:3b:bc:de:60:b1:38:aa:62:63:d4:c0:95:e1:
2b:0c:5e:bc:0e:14:13:42:4c:1b:99:96:51:73:e1:28:54:4f:
b4:a4:54:2b:ba:fc:79:6b:33:ed:44:49:a4:42:a3:93:25:82:
19:95:ca:f8:ee:a3:e9:1c:d0:95:d0:44:e5:30:8f:f2:c7:70:
a4:10:63:d0:0a:f2:18:5c:37:63:d0:b3:b1:78:d2:17:61:30:
fc:6d:90:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 06:21:10 2025 by rpki-client