Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363335643a3a2f34382d3438203d3e203136393039.roa
File: 326131343a373538343a363335643a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier: wdHg3fkOllPLpQ0BSBcTeQ2jR5df3Akj1jufkpLXF1s=
Subject key identifier: CE:29:92:F2:9D:9D:CF:E2:CC:CC:0E:9E:DB:9F:1A:0C:EE:2C:F9:9E
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 23FC243F133AEAA52C33EEF72739A3692C157BF8
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363335643a3a2f34382d3438203d3e203136393039.roa
Signing time: Fri 23 May 2025 05:06:02 +0000
ROA not before: Fri 23 May 2025 05:01:02 +0000
ROA not after: Fri 22 May 2026 05:06:02 +0000
asID: 16909
IP address blocks: 2a14:7584:635d::/48 maxlen: 48
Validation: Failed, certificate revoked on Sat 24 May 2025 17:48:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
23:fc:24:3f:13:3a:ea:a5:2c:33:ee:f7:27:39:a3:69:2c:15:7b:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: May 23 05:01:02 2025 GMT
Not After : May 22 05:06:02 2026 GMT
Subject: CN=CE2992F29D9DCFE2CCCC0E9EDB9F1A0CEE2CF99E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:fb:50:20:ff:1d:bf:e8:ac:cd:57:a7:83:4d:
77:90:a0:96:d1:f6:b9:7a:4a:2b:28:7f:b1:8a:46:
80:f5:61:18:7d:82:fb:be:9a:ea:b0:da:51:2c:97:
a1:13:e1:3d:3f:43:10:2d:3b:54:9e:30:5c:5a:49:
3b:1b:63:8a:d3:d6:2e:82:5c:cb:3f:aa:ac:39:f7:
68:82:fb:fa:20:b0:b3:79:a1:1a:00:e9:21:ef:2c:
fb:79:7d:aa:07:ee:02:98:ca:81:7b:a7:8d:31:5a:
e8:55:d2:76:56:ae:03:92:ff:ce:a2:a7:b0:81:c4:
ba:21:7a:16:8a:f4:c5:aa:2b:c3:b7:8d:cd:70:35:
7d:05:4f:ba:64:a0:20:87:db:8b:07:14:11:3c:c8:
54:bf:36:5d:37:ab:ae:98:2b:86:00:e3:c4:4a:6c:
6f:a6:ad:8b:6e:dc:27:3f:50:b8:cd:b7:00:a2:02:
1a:63:ec:c6:cf:86:05:02:87:76:b9:47:b8:41:1a:
e6:0a:08:de:47:03:57:4b:98:14:3a:43:23:67:be:
53:cc:24:72:10:76:72:91:95:fc:65:34:e4:72:9b:
db:fd:69:42:87:34:d6:4a:4e:b5:34:d2:ff:a1:aa:
d2:05:e0:09:a6:07:9a:3b:37:db:95:2a:52:93:fc:
ae:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:29:92:F2:9D:9D:CF:E2:CC:CC:0E:9E:DB:9F:1A:0C:EE:2C:F9:9E
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363335643a3a2f34382d3438203d3e203136393039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:635d::/48
Signature Algorithm: sha256WithRSAEncryption
5d:d1:92:9b:1e:83:6e:52:68:14:67:13:4b:7c:fb:50:ea:c1:
56:33:63:8f:c9:a3:7b:28:20:a6:0d:fe:5d:ad:5f:22:b2:3e:
80:09:a0:bb:26:59:5f:70:66:01:e5:ac:a2:fc:08:e4:a9:7b:
fd:0a:c8:bc:93:32:d8:e5:de:46:5c:b5:c8:46:73:00:26:34:
53:34:77:f8:0f:6b:d5:bd:26:90:ef:32:92:1f:6d:45:4e:dd:
d9:2a:41:0a:34:ac:b9:f1:73:c8:01:84:a8:5e:e0:4c:2f:d7:
56:51:69:7d:e7:9c:98:d4:8d:2f:a0:12:38:09:85:ea:ad:a3:
d1:96:e2:bc:23:fb:1a:90:a3:99:78:c6:d5:95:eb:2a:b0:cb:
02:e5:4d:7e:fc:da:7f:9f:da:35:53:00:23:62:3e:65:f1:c2:
da:54:31:61:40:0e:e4:e4:a3:67:d3:b2:e9:40:37:21:2b:cd:
ff:28:ac:65:5d:1e:49:4c:15:b1:7f:5e:eb:78:f7:35:46:81:
92:00:41:7b:74:b2:c6:ab:04:2d:9c:4a:07:9a:fa:23:88:78:
07:c4:f6:bf:1a:5d:06:43:e6:35:19:50:fc:6a:8e:b1:ca:44:
8a:ba:f3:e3:f9:66:93:fd:a1:6b:64:84:61:b8:8f:79:cd:b5:
cc:0b:31:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 06:01:07 2025 by rpki-client