Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363266663a3a2f34382d3438203d3e203136393039.roa
File: 326131343a373538343a363266663a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier: J2yipbLrEH/8zvx28Zx8KNwkXHAkRf2KnsH6qzlbTUM=
Subject key identifier: 3C:F5:8A:8F:CE:72:51:9E:42:41:67:07:88:F9:E0:18:57:D5:A8:F8
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 760C315D04727B90572D538B9804EF8433499190
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363266663a3a2f34382d3438203d3e203136393039.roa
Signing time: Mon 19 May 2025 12:06:02 +0000
ROA not before: Mon 19 May 2025 12:01:02 +0000
ROA not after: Mon 18 May 2026 12:06:02 +0000
asID: 16909
IP address blocks: 2a14:7584:62ff::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 21 May 2025 03:48:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
76:0c:31:5d:04:72:7b:90:57:2d:53:8b:98:04:ef:84:33:49:91:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: May 19 12:01:02 2025 GMT
Not After : May 18 12:06:02 2026 GMT
Subject: CN=3CF58A8FCE72519E4241670788F9E01857D5A8F8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:0a:cd:bf:bd:2a:c2:a4:9b:aa:43:bf:1a:bb:
36:8a:af:89:e4:35:58:83:6c:04:8f:58:c2:ba:7d:
73:cb:ea:d0:ab:3a:88:02:d7:94:99:17:3c:7f:17:
94:46:c1:ec:ab:fb:1c:80:4e:8b:24:b9:b6:d8:92:
f4:59:59:61:1e:8c:e5:e0:fc:08:e9:64:8d:db:b5:
3d:bb:00:0a:28:03:91:b8:00:52:c1:31:86:c8:6b:
5e:d9:cf:8d:bd:78:ad:bc:75:45:f1:09:b3:a4:2d:
19:40:4e:4c:d1:de:b0:66:b3:9d:83:f0:7d:09:56:
d7:47:6a:05:bc:ab:fa:84:18:c7:9f:4a:d8:1b:c1:
5a:1d:93:c9:de:e3:de:4b:77:b5:6b:c8:6d:ce:77:
da:2a:ee:2c:c0:28:a9:89:35:aa:13:fa:75:1d:0f:
9e:84:97:25:64:da:64:c0:4f:17:1a:0a:de:92:8e:
fc:3f:1c:fb:3a:b7:cf:0a:f6:47:c5:70:c8:f4:7f:
4a:26:54:8a:1b:cd:eb:a2:28:b6:30:1f:d9:3e:a2:
b2:31:02:fc:92:c4:39:f0:f4:d6:82:68:b8:05:b3:
18:bd:1f:64:eb:7c:e1:9e:1f:f0:2f:45:9c:83:b0:
cc:27:0d:a1:39:d0:0f:d3:9f:96:8b:22:2a:21:5d:
16:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:F5:8A:8F:CE:72:51:9E:42:41:67:07:88:F9:E0:18:57:D5:A8:F8
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363266663a3a2f34382d3438203d3e203136393039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:62ff::/48
Signature Algorithm: sha256WithRSAEncryption
45:35:cf:64:ee:e2:84:9b:b2:dc:e9:c0:a2:4b:77:cd:df:86:
c1:ac:3a:f8:af:7f:0a:04:9c:33:53:90:3c:60:17:29:01:a4:
c7:bb:18:a6:c9:27:3c:7e:b4:a0:b9:cc:3b:fe:0e:3b:55:b4:
c2:6a:99:10:94:96:ca:52:bd:e2:dd:34:98:eb:f7:77:48:37:
1c:8c:9d:86:89:a8:fe:bc:83:76:32:21:80:df:96:00:b8:e3:
43:07:13:bd:c5:92:ef:2c:6b:02:b0:a4:23:68:08:cd:f4:69:
81:2c:f7:ec:fd:d4:3f:77:26:07:00:33:10:f8:5c:08:e7:c5:
98:72:d5:1c:a7:29:a0:ce:f0:d2:f6:09:d1:1c:66:fd:5c:94:
43:aa:2b:11:68:fc:f8:19:63:23:b5:52:1e:7a:45:e1:9f:c6:
e2:68:9d:dd:01:8f:2b:9b:af:27:88:38:f5:9e:2e:ab:11:10:
34:08:4e:5b:63:9d:ad:d5:36:a9:bf:32:97:45:47:f9:7b:9a:
57:eb:5a:c6:d6:f0:de:f0:eb:17:3a:25:09:1d:c9:34:43:49:
e9:52:14:fb:b8:25:89:2e:ec:75:cc:b4:55:a2:01:1f:de:7c:
1a:36:a5:0a:5a:2a:45:4b:ff:59:ce:c7:b0:11:79:87:39:72:
8a:26:f1:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 07:36:50 2025 by rpki-client