Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363331353a3a2f34382d3438203d3e203136393039.roa
File: 326131343a373538343a363331353a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier: hhTDEUQHn8202+PZ0j2eOTcCUE0qjLcCm9g7esMlgmk=
Subject key identifier: 27:AD:23:92:91:77:BA:B0:58:A4:65:36:D4:91:1D:31:50:5A:DD:EE
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 32F060F8A2816D402EC146DA57379A347AA5AAD4
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363331353a3a2f34382d3438203d3e203136393039.roa
Signing time: Tue 20 May 2025 01:42:02 +0000
ROA not before: Tue 20 May 2025 01:37:02 +0000
ROA not after: Tue 19 May 2026 01:42:02 +0000
asID: 16909
IP address blocks: 2a14:7584:6315::/48 maxlen: 48
Validation: Failed, certificate revoked on Thu 22 May 2025 14:54:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
32:f0:60:f8:a2:81:6d:40:2e:c1:46:da:57:37:9a:34:7a:a5:aa:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: May 20 01:37:02 2025 GMT
Not After : May 19 01:42:02 2026 GMT
Subject: CN=27AD23929177BAB058A46536D4911D31505ADDEE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:6f:2c:c0:5d:d6:35:c9:a5:33:3c:90:8f:fb:
59:06:ba:f8:00:07:17:ca:51:7b:55:69:25:67:40:
d5:57:97:08:66:67:a7:7c:b5:1c:8e:e2:ae:1d:37:
ff:22:06:d2:d8:2a:86:0d:22:ce:a4:e0:cd:04:ac:
bd:47:52:32:c8:cd:38:3c:ef:95:35:ad:6a:be:cb:
03:04:af:5e:0d:bb:eb:ad:62:13:99:a3:64:cb:3e:
5e:71:50:9b:21:d5:57:00:67:72:65:a0:f6:9b:b4:
4d:7e:13:86:0c:a9:e1:fe:7b:dd:27:ac:75:50:89:
76:3f:e9:2d:54:86:27:d1:e1:b2:d7:24:c2:81:dc:
44:5c:62:9e:39:92:6b:c2:83:0c:9d:03:0d:1a:bb:
af:b8:ca:fd:cd:6a:c2:56:1c:1d:d5:e4:3d:f7:d7:
53:d4:20:9a:2a:d0:4b:e2:ac:35:ac:b7:3c:a0:d8:
6e:5b:51:e0:cf:a5:a7:79:a7:e0:f4:37:1b:08:72:
bc:61:43:fc:c9:4f:67:10:d8:41:46:e5:d2:88:ca:
a4:85:26:41:27:ba:f6:11:71:bf:8c:02:2e:ff:03:
9f:95:0f:a0:90:22:af:82:b4:64:2d:6c:77:ef:46:
0e:56:6d:2d:29:a8:55:6f:ce:e1:bf:03:d6:cd:92:
80:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:AD:23:92:91:77:BA:B0:58:A4:65:36:D4:91:1D:31:50:5A:DD:EE
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363331353a3a2f34382d3438203d3e203136393039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:6315::/48
Signature Algorithm: sha256WithRSAEncryption
67:06:45:39:a3:bd:f4:39:6f:42:19:29:ef:7b:31:72:22:b0:
f9:fd:64:39:78:07:8f:89:2a:88:ac:db:4d:d6:84:73:9d:49:
c3:ec:5e:ba:da:65:f7:ab:37:ad:fb:69:79:9c:fe:e2:f5:eb:
83:8d:af:7a:e3:a3:f9:ce:87:d7:a5:99:82:76:53:b9:8b:f3:
dc:7f:93:c4:0b:0c:39:20:82:c8:cc:2a:aa:9f:8a:d2:86:1b:
5f:b5:23:24:51:6f:04:34:33:86:1a:92:cf:0b:65:98:b8:46:
9a:3d:20:3d:0e:ba:ed:ed:61:cd:97:86:59:f6:85:d8:63:56:
97:81:10:ee:4b:df:be:e8:4e:41:44:53:dd:c0:73:95:e4:08:
2f:72:8e:ac:d9:31:57:7d:6c:b9:eb:02:2d:94:c4:63:30:9d:
f1:3c:ac:07:86:ea:95:9f:b0:98:3c:16:18:e6:38:d0:8c:eb:
4e:13:19:e9:ec:4e:df:17:e9:cb:0c:d1:b9:52:94:42:40:1f:
77:61:fd:c4:26:2a:38:56:e9:02:2a:14:53:fd:df:21:97:71:
6b:a8:7a:95:30:f9:5b:69:32:5f:71:8d:70:02:86:c7:eb:39:
8e:9a:e6:01:07:4e:1f:fd:c1:61:5a:c6:ba:63:f3:c1:3b:71:
e0:30:48:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 05:58:21 2025 by rpki-client