Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363332663a3a2f34382d3438203d3e203136393039.roa
File: 326131343a373538343a363332663a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier: g1dzbYcpoxDd8r2o3KsZ8kWDdQWaEGDzswH9Q2ylLuw=
Subject key identifier: EC:A4:70:81:1F:48:C1:5F:C6:BF:71:B1:F8:76:CC:7F:BA:66:3F:2C
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 10B7D8E1425F1D7337D6928AADBA072ACEBC3AD0
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363332663a3a2f34382d3438203d3e203136393039.roa
Signing time: Wed 21 May 2025 03:54:03 +0000
ROA not before: Wed 21 May 2025 03:49:03 +0000
ROA not after: Wed 20 May 2026 03:54:03 +0000
asID: 16909
IP address blocks: 2a14:7584:632f::/48 maxlen: 48
Validation: Failed, certificate revoked on Thu 22 May 2025 16:06:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
10:b7:d8:e1:42:5f:1d:73:37:d6:92:8a:ad:ba:07:2a:ce:bc:3a:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: May 21 03:49:03 2025 GMT
Not After : May 20 03:54:03 2026 GMT
Subject: CN=ECA470811F48C15FC6BF71B1F876CC7FBA663F2C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:d7:0d:e3:80:91:62:b1:d2:2d:1e:2e:6d:fc:
8b:69:5a:b6:c5:eb:b7:a6:e8:7b:d6:9d:c7:07:92:
d5:a8:96:ee:a3:62:b0:2d:2c:ea:e3:c8:4f:97:04:
e4:80:90:11:85:98:47:45:b8:38:4d:6a:1d:85:50:
2b:93:ea:05:ff:e8:b5:bd:aa:2f:b5:25:d8:cc:f7:
b8:ac:0d:43:64:55:ca:3a:5f:1d:fa:b6:bb:44:ca:
d3:2c:aa:a7:3b:86:c7:d5:c7:6b:bf:73:da:d8:d9:
05:80:b8:d0:00:6a:6d:6c:72:5d:63:11:e2:08:c2:
85:3b:f7:0d:10:f4:61:30:e7:42:2a:46:9f:18:0d:
86:81:13:34:97:43:8f:4d:7f:2b:77:53:16:aa:01:
89:e7:7a:96:a1:c9:44:a9:f7:5a:03:cc:b4:53:20:
bc:dc:ec:24:5e:8b:d8:30:34:3e:a0:37:c2:c6:b1:
61:c7:b7:aa:19:8d:95:1c:c7:69:95:8a:79:42:5f:
94:88:a5:be:04:07:00:3f:6e:d9:47:90:16:ba:ad:
0b:e9:68:d7:36:a7:dc:8a:39:17:79:ff:97:e4:ca:
17:33:15:1e:e0:53:33:b3:76:5f:1c:76:8b:c3:ff:
78:d7:79:b8:e5:71:c4:94:ff:ab:95:00:bd:f6:5d:
e4:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:A4:70:81:1F:48:C1:5F:C6:BF:71:B1:F8:76:CC:7F:BA:66:3F:2C
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363332663a3a2f34382d3438203d3e203136393039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:632f::/48
Signature Algorithm: sha256WithRSAEncryption
52:0e:d5:89:b7:f3:14:d3:f6:a1:21:ba:29:82:47:91:25:fb:
36:6b:b1:74:de:56:4a:69:68:4c:2a:b9:de:f7:42:86:a6:5b:
f1:fc:4c:90:03:8c:33:38:85:d1:38:cd:f3:a0:3a:99:80:63:
ed:a6:bc:87:75:60:40:93:69:bc:4d:7c:3f:c2:b5:ce:85:79:
00:05:2a:72:b5:af:cd:ac:2b:76:86:e4:7e:0e:dc:7e:f5:7a:
d3:47:83:da:27:91:72:db:a8:79:fb:3b:25:ee:13:66:8e:41:
33:0b:c0:ac:2d:80:f7:dd:51:23:2e:16:48:3c:cc:6c:d9:8f:
d5:58:8f:3c:ce:73:fe:bf:d9:d9:29:9d:4a:1b:59:a1:f2:99:
0f:5f:92:31:e8:e9:c6:17:ff:18:4b:cc:14:0c:bf:e7:93:b7:
be:2c:93:da:8e:41:34:b2:f6:02:73:b0:2f:d4:67:56:2f:86:
c6:1c:36:e8:a9:40:5d:8d:a9:73:4c:ef:86:c8:2f:36:33:ed:
3b:39:98:56:36:58:82:24:6b:8b:51:65:16:79:20:ae:e3:21:
bb:a5:ac:d8:10:83:08:7d:68:c8:29:f2:62:62:cf:b1:47:18:
6e:85:97:7a:41:da:b0:e0:a9:a3:01:4b:42:5a:c3:64:35:0a:
36:05:4d:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 06:17:26 2025 by rpki-client