Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363266653a3a2f34382d3438203d3e203136393039.roa
File: 326131343a373538343a363266653a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier: EuMxEU2/RdfjJP/MK76TozEazcZwMlfpw91Vlo/xcCs=
Subject key identifier: CC:C4:B2:57:9B:6E:EB:36:79:44:13:12:C4:97:7D:10:E9:05:DB:D5
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 167B5B2746845034C4B519012D7B321165844042
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363266653a3a2f34382d3438203d3e203136393039.roa
Signing time: Mon 19 May 2025 12:06:02 +0000
ROA not before: Mon 19 May 2025 12:01:02 +0000
ROA not after: Mon 18 May 2026 12:06:02 +0000
asID: 16909
IP address blocks: 2a14:7584:62fe::/48 maxlen: 48
Validation: Failed, certificate revoked on Tue 20 May 2025 21:24:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
16:7b:5b:27:46:84:50:34:c4:b5:19:01:2d:7b:32:11:65:84:40:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: May 19 12:01:02 2025 GMT
Not After : May 18 12:06:02 2026 GMT
Subject: CN=CCC4B2579B6EEB3679441312C4977D10E905DBD5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:fd:89:1e:92:ce:81:b0:d9:de:f0:aa:0e:ba:
c4:dd:dc:f4:88:b0:42:d2:f9:ff:b5:60:c1:9a:f5:
d0:7a:df:17:05:60:f8:43:cd:67:c7:e1:59:52:f1:
86:75:f6:b2:6d:4a:75:43:e2:bf:a2:77:8e:cd:39:
b4:c6:ef:f9:c4:fd:1c:ec:aa:6b:1a:e0:32:0c:b8:
86:c6:15:7f:60:43:5a:35:65:fe:2d:b5:d2:9d:ff:
bc:91:23:bd:73:ea:d6:b6:56:b8:f1:2a:41:59:d2:
58:80:b0:f4:e6:fa:ad:15:87:93:f5:29:24:c3:dd:
1a:7c:8c:26:d6:d8:a9:5a:e8:df:f7:57:f6:99:e9:
dd:61:57:13:cc:d6:9c:86:06:4f:22:c4:e3:39:89:
77:b2:eb:44:6b:f7:6b:20:f2:3b:3d:db:67:dc:03:
e4:fd:21:2b:81:f4:2f:6e:e8:19:b4:c4:4d:dc:9c:
4f:ad:f2:45:6e:25:e5:49:d0:ea:f3:3d:70:c3:71:
dc:d2:bc:57:61:be:92:52:a9:97:12:a7:62:f1:c0:
0a:f1:66:c8:0b:18:a9:37:df:01:75:20:9f:9f:d9:
ff:f5:1d:d8:1d:be:75:48:b9:76:00:cf:58:e7:38:
ac:00:cf:28:3a:d1:c4:3d:e9:c4:db:76:2e:5e:e7:
20:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:C4:B2:57:9B:6E:EB:36:79:44:13:12:C4:97:7D:10:E9:05:DB:D5
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363266653a3a2f34382d3438203d3e203136393039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:62fe::/48
Signature Algorithm: sha256WithRSAEncryption
47:58:b5:8a:95:03:3b:f2:60:b5:1e:ec:43:89:46:b5:7f:35:
45:79:19:0a:52:b0:6e:4e:0a:07:8c:18:b3:40:5d:91:ea:e5:
44:d7:a1:02:2b:88:c9:22:17:6f:b7:72:16:2d:a0:18:c7:0f:
f4:92:db:54:c5:e0:73:a0:b7:27:70:32:ac:59:09:88:54:06:
6f:8f:ae:eb:e0:bc:22:4b:5a:5a:f2:31:10:2b:e7:51:44:b5:
d0:61:73:43:b6:94:94:3d:c9:bc:dc:17:60:81:d2:dd:3b:11:
7a:1d:89:fe:d7:61:3b:30:2f:bd:cf:08:88:cd:ac:9d:ac:d5:
cc:45:8f:1b:ef:b1:11:b1:9c:92:69:54:8f:76:99:23:3a:a1:
4d:9d:33:37:a0:f7:a5:66:fd:b0:f2:b6:75:66:5f:45:e9:ca:
ad:f7:54:b8:be:e3:24:d3:5e:69:7f:8d:d9:af:10:a0:94:42:
92:08:7f:bc:fa:5c:03:45:4b:fa:3e:f3:11:aa:c2:de:0c:6a:
54:71:8d:72:10:76:36:1d:6d:e2:84:96:a5:8d:72:2c:43:11:
e4:23:f3:ee:95:cf:c3:88:c2:c8:15:70:e8:37:4b:48:76:90:
3c:39:5f:73:7d:5c:78:77:25:8e:81:bc:65:19:4b:bc:74:c7:
0c:b8:07:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 08:20:24 2025 by rpki-client