Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363334373a3a2f34382d3438203d3e203136393039.roa
File: 326131343a373538343a363334373a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier: 9AdkKO5OGyStr+gOOnE9ou6geJAQh0e3Hi0nvm/merc=
Subject key identifier: 91:F6:0A:E2:A6:B9:72:71:29:72:79:EA:7A:FF:C5:6C:5A:AB:6B:E3
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 616D3594D6A5A3E05920374CC89430C13CAF9387
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363334373a3a2f34382d3438203d3e203136393039.roa
Signing time: Thu 22 May 2025 14:54:01 +0000
ROA not before: Thu 22 May 2025 14:49:01 +0000
ROA not after: Thu 21 May 2026 14:54:01 +0000
asID: 16909
IP address blocks: 2a14:7584:6347::/48 maxlen: 48
Validation: Failed, certificate revoked on Fri 23 May 2025 20:36:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
61:6d:35:94:d6:a5:a3:e0:59:20:37:4c:c8:94:30:c1:3c:af:93:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: May 22 14:49:01 2025 GMT
Not After : May 21 14:54:01 2026 GMT
Subject: CN=91F60AE2A6B97271297279EA7AFFC56C5AAB6BE3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:d7:3d:f0:12:1a:c6:d3:77:3e:0e:fc:4e:f3:
3d:d4:e4:56:06:e5:e5:d8:f0:96:b6:53:97:72:49:
1f:af:29:b9:cf:76:ee:78:a5:58:08:58:3f:c3:09:
8a:3b:29:0e:0d:1a:a1:95:96:53:42:49:4a:e8:f3:
41:6b:c3:39:d3:af:70:06:09:28:f6:2e:8f:13:dd:
26:34:fc:42:e3:8f:12:c7:2e:b1:d7:83:be:1e:21:
4a:e8:ff:a2:92:f8:9f:ca:6b:61:ab:d5:68:e6:6a:
14:2a:88:8a:8f:9b:74:14:a6:bc:e5:74:76:fe:05:
6b:c1:00:5b:10:61:45:21:17:e8:28:7c:2d:cd:0a:
68:0b:a7:fb:71:d0:98:ef:f1:49:95:36:60:c6:3f:
20:73:44:ca:2a:6b:a7:63:b5:ad:42:9d:87:aa:4b:
fc:d3:5b:ca:be:ca:c0:cf:19:d3:73:2e:a8:76:c9:
da:27:36:b0:2c:50:f4:b6:2a:0f:64:55:72:88:45:
b7:25:fd:21:ec:d5:d2:d2:2c:5d:58:02:26:3e:ca:
c6:d2:d6:2b:9e:f7:13:a0:38:3c:62:40:e8:b1:c1:
32:e2:c7:06:b7:bf:ed:ef:73:56:82:e7:f2:90:da:
f2:56:6b:e7:f9:24:7b:1a:5d:67:9e:7b:a0:78:b8:
e3:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:F6:0A:E2:A6:B9:72:71:29:72:79:EA:7A:FF:C5:6C:5A:AB:6B:E3
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363334373a3a2f34382d3438203d3e203136393039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:6347::/48
Signature Algorithm: sha256WithRSAEncryption
00:a8:ed:17:77:17:30:b8:a5:fd:f9:72:9d:c5:b7:5e:1d:e5:
3d:e7:66:9b:83:2b:97:61:30:09:0b:2d:ed:18:1d:4c:6a:77:
d6:80:e8:5f:f2:31:0d:ed:97:25:65:7c:9e:b7:a0:66:7c:a4:
8f:56:f4:26:3b:d3:52:29:b7:36:17:0b:b8:03:65:2e:34:36:
b3:26:4d:db:6f:fa:ee:c5:91:e2:dd:11:a0:bf:49:db:74:96:
c7:40:97:79:79:d9:44:c7:aa:f2:b5:09:2b:9f:0e:db:04:01:
9c:97:72:76:a6:67:8a:a5:16:cf:9b:d8:8b:1d:da:40:44:77:
af:25:5c:d9:6d:59:c4:28:c6:2c:da:a1:dd:81:10:a8:da:6d:
20:09:dc:79:ae:27:95:25:24:69:92:09:ac:47:65:83:d2:49:
cf:2d:33:31:8d:68:91:6c:4d:f6:d1:f0:b2:3c:90:99:6c:2c:
a0:aa:ed:8c:dd:a7:11:68:d3:58:a0:bd:3a:72:2d:49:d0:fc:
44:6f:79:58:e4:43:6a:02:ea:3d:1f:7f:89:3a:2b:4a:00:7e:
03:3b:70:a5:60:6f:af:2d:d4:f1:3e:25:ad:de:21:6e:1d:83:
11:3d:16:c9:0a:9a:ab:e0:1a:4e:17:81:11:51:90:13:ff:ec:
bc:54:23:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 14:38:06 2025 by rpki-client