Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363333623a3a2f34382d3438203d3e203136393039.roa
File: 326131343a373538343a363333623a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier: znd1xGZSN3CTIXEtYVq1po3C2yfFcSNFuH7No8aphA0=
Subject key identifier: D7:01:02:B8:71:B5:A1:5C:8C:58:B1:FB:10:7D:5C:C6:DD:9B:AB:EA
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 28CEA85BF82C7142F9FE57A61355E229DE802E36
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363333623a3a2f34382d3438203d3e203136393039.roa
Signing time: Wed 21 May 2025 18:12:03 +0000
ROA not before: Wed 21 May 2025 18:07:03 +0000
ROA not after: Wed 20 May 2026 18:12:03 +0000
asID: 16909
IP address blocks: 2a14:7584:633b::/48 maxlen: 48
Validation: Failed, certificate revoked on Fri 23 May 2025 07:54:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
28:ce:a8:5b:f8:2c:71:42:f9:fe:57:a6:13:55:e2:29:de:80:2e:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: May 21 18:07:03 2025 GMT
Not After : May 20 18:12:03 2026 GMT
Subject: CN=D70102B871B5A15C8C58B1FB107D5CC6DD9BABEA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:81:2c:b0:c2:b1:7e:6a:72:25:d5:21:ce:70:
61:54:2c:72:cd:b2:3f:c0:ac:89:c4:f8:16:ec:94:
57:82:2c:5e:0b:2a:7a:7f:ad:ba:e6:73:b2:a7:ca:
d5:53:51:4a:c8:7f:d1:57:6a:24:fe:ce:d2:58:b4:
4b:33:9a:72:9c:9f:04:75:1c:aa:0e:5f:00:d4:2f:
57:b2:11:af:78:50:e6:d5:18:c4:cc:a4:69:08:13:
db:87:4f:c7:da:50:a1:02:f5:07:6e:6e:e2:11:a2:
e7:25:db:ec:b0:23:ac:ce:ff:5f:17:8b:ac:44:b0:
13:1d:8a:4b:5e:a4:69:2f:78:44:f8:59:7f:fb:2a:
1a:fc:b4:4c:4b:82:1a:10:65:2d:7c:d4:91:16:c1:
83:d7:35:b5:f2:9b:5a:71:05:cd:b3:ba:92:8a:e7:
03:d0:06:35:99:d1:f5:f3:24:44:96:d1:5f:fb:b1:
fe:87:01:56:b5:4f:b8:0e:07:c4:e1:ef:ee:52:02:
b1:c1:62:7c:3c:e0:68:24:30:fa:80:a7:d6:a8:05:
e5:6f:93:83:43:d7:59:ca:b4:34:87:79:06:90:ce:
98:4b:4e:62:8d:25:b5:a9:78:86:6a:9b:31:8e:ed:
58:84:26:24:1c:10:bf:82:c1:87:3b:12:ee:d0:c8:
ec:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:01:02:B8:71:B5:A1:5C:8C:58:B1:FB:10:7D:5C:C6:DD:9B:AB:EA
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363333623a3a2f34382d3438203d3e203136393039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:633b::/48
Signature Algorithm: sha256WithRSAEncryption
79:b4:20:d5:df:82:c4:d0:64:ff:55:f9:98:30:49:d7:24:b0:
28:94:d5:3b:02:c9:f0:b9:e2:c9:d0:c6:2c:26:93:c7:91:e4:
91:90:61:62:ce:7a:98:f1:f9:4b:29:e9:bc:e7:28:f4:d1:d9:
67:32:45:53:67:b4:3b:69:39:b1:d6:83:8a:a5:52:0e:3b:88:
a7:5c:99:9b:59:34:55:17:8b:b1:ef:71:d7:ec:29:be:c0:c1:
75:02:f0:6b:d7:00:47:2a:b6:5f:99:dc:68:d4:05:10:64:ec:
ea:ef:39:33:ab:36:f6:70:d9:77:b3:da:a0:ab:9e:9d:2c:f5:
8a:9d:36:aa:df:57:be:95:0e:f8:76:70:89:13:7f:95:02:e6:
5b:3b:e3:9f:26:c3:d1:d8:5b:98:5c:e4:c2:5a:81:b6:04:86:
af:39:ea:69:f7:87:84:fa:19:f4:aa:2e:41:42:40:5b:01:14:
46:77:39:a2:bd:78:e6:13:8d:1d:a6:15:c7:1b:c3:fc:f0:80:
85:7a:18:d0:c5:fd:fb:ae:bc:14:a6:e0:7f:32:d6:e2:59:97:
36:08:af:6a:f6:d7:c0:c8:f1:f2:92:c1:32:39:50:17:c4:17:
9a:6d:e1:a8:4e:6f:90:a5:50:cc:64:3d:a9:ed:e3:dd:60:23:
c0:2a:c6:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 07:35:31 2025 by rpki-client