Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363331383a3a2f34382d3438203d3e203136393039.roa
File: 326131343a373538343a363331383a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier: RuLnvRiNMHY6imWVMi6A1seWjZfNwer6Ekta9DcBj8o=
Subject key identifier: 71:11:E4:B9:AB:B0:F9:F8:C8:57:9B:12:89:76:36:14:45:30:31:64
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 0F1DEF376C6C1D1BDB922D9D89CF121E7BBCC9DA
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363331383a3a2f34382d3438203d3e203136393039.roa
Signing time: Tue 20 May 2025 02:00:02 +0000
ROA not before: Tue 20 May 2025 01:55:02 +0000
ROA not after: Tue 19 May 2026 02:00:02 +0000
asID: 16909
IP address blocks: 2a14:7584:6318::/48 maxlen: 48
Validation: Failed, certificate revoked on Fri 23 May 2025 05:06:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0f:1d:ef:37:6c:6c:1d:1b:db:92:2d:9d:89:cf:12:1e:7b:bc:c9:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: May 20 01:55:02 2025 GMT
Not After : May 19 02:00:02 2026 GMT
Subject: CN=7111E4B9ABB0F9F8C8579B128976361445303164
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:eb:29:eb:f7:01:c3:2e:f7:0f:c2:6b:f4:64:
81:6f:e2:5a:cd:9e:5c:f7:74:f2:23:c6:3e:a7:43:
f0:6c:6d:a7:1d:69:89:f1:da:cf:91:1a:de:b5:88:
33:25:80:b7:97:d5:94:66:03:21:00:3f:6d:fa:d9:
07:9b:e0:c6:82:82:68:da:58:86:21:22:a2:af:ab:
1d:eb:15:4f:ce:34:e1:0c:3d:3d:f4:16:7c:53:e5:
09:ec:f3:d6:a8:3e:d3:59:5a:82:71:c5:4a:77:84:
f8:78:4d:19:f6:52:a1:8b:58:85:e1:a2:c4:d8:c2:
9c:be:9d:f2:fc:95:ed:82:37:01:ad:6b:2a:cd:0a:
39:83:b2:75:3c:7b:4a:3b:39:4c:10:82:73:0a:1a:
1c:a6:94:c9:7b:4e:1b:56:49:1c:de:29:d4:f5:3c:
61:4c:f1:18:b2:7f:5a:90:8d:1f:f3:4b:40:72:0b:
bd:a3:08:ec:36:d6:13:8c:a1:36:24:7d:42:01:11:
58:67:8c:f3:57:a1:29:be:3e:26:b4:64:db:13:59:
53:09:b1:a6:27:34:21:88:2a:b4:91:f7:42:ab:2b:
57:a4:a7:4a:c0:41:59:2f:7c:a5:35:ce:e2:e2:74:
95:b3:fc:cf:b5:52:c9:6c:41:4d:e8:e5:43:d0:f2:
22:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:11:E4:B9:AB:B0:F9:F8:C8:57:9B:12:89:76:36:14:45:30:31:64
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363331383a3a2f34382d3438203d3e203136393039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:6318::/48
Signature Algorithm: sha256WithRSAEncryption
52:3c:1a:80:58:d2:57:c3:ac:89:c6:7d:81:e6:8a:75:8f:6b:
f0:a2:35:8a:71:df:93:20:5e:52:0d:d8:1b:21:c0:38:49:13:
32:9f:80:60:fa:d7:35:09:93:97:3b:6b:64:f7:8c:e2:27:e0:
44:04:6a:ef:ea:4e:fa:09:62:8e:4e:c3:af:1d:d5:0f:f5:4f:
2f:e2:7e:cf:4a:70:4a:f8:6b:55:1b:48:dc:31:55:c1:15:06:
cc:47:75:65:d0:c7:12:d7:7f:eb:a1:49:d4:0e:9a:d7:b6:26:
c1:95:85:ac:2e:43:5a:72:bd:88:e7:ea:81:4a:d8:7b:15:a0:
2a:83:11:d0:38:dc:e3:92:39:cb:c4:07:06:15:64:57:14:8f:
c7:a6:00:c0:2a:0c:e6:0c:a0:a8:70:f1:3e:53:22:b8:5f:35:
2e:e0:df:44:20:aa:89:5c:f5:31:3e:1f:66:84:c8:76:61:ba:
52:e0:c6:54:00:34:96:b8:e9:e0:e5:15:fe:a2:11:cf:92:fc:
42:c4:e2:f8:61:26:4d:a8:1a:85:45:4d:d2:8c:4c:f0:d5:ef:
94:c6:ad:dc:39:50:81:89:93:37:3e:17:b6:10:e5:f7:ba:5c:
c1:a5:ef:b5:f8:a3:53:af:de:c2:dc:c2:e9:bb:71:95:1f:13:
d3:f6:13:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 06:07:24 2025 by rpki-client