Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363335663a3a2f34382d3438203d3e203136393039.roa
File: 326131343a373538343a363335663a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier: ijFR6dUeTBOkPn24NNmQGiH7EE4QX9xkh3DUU0Pn4Kc=
Subject key identifier: 73:A2:7A:D8:1A:4C:DE:F9:BA:E7:D5:BD:90:1B:66:B7:DE:CB:7B:CD
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 60DDDC72E91C2CAA9C9E5E516E5BB4F761883E7D
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363335663a3a2f34382d3438203d3e203136393039.roa
Signing time: Fri 23 May 2025 05:18:02 +0000
ROA not before: Fri 23 May 2025 05:13:02 +0000
ROA not after: Fri 22 May 2026 05:18:02 +0000
asID: 16909
IP address blocks: 2a14:7584:635f::/48 maxlen: 48
Validation: Failed, certificate revoked on Sat 24 May 2025 17:54:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
60:dd:dc:72:e9:1c:2c:aa:9c:9e:5e:51:6e:5b:b4:f7:61:88:3e:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: May 23 05:13:02 2025 GMT
Not After : May 22 05:18:02 2026 GMT
Subject: CN=73A27AD81A4CDEF9BAE7D5BD901B66B7DECB7BCD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:d2:ee:17:7d:45:89:c1:16:c6:84:6d:d7:bc:
1b:e9:4d:3b:0f:02:f0:3f:c5:c8:c6:b5:9e:39:20:
46:19:62:91:3b:4e:21:33:76:b4:4e:69:04:cb:f0:
6e:a7:44:c6:f7:b8:f7:66:44:0a:29:e0:66:c7:6a:
fb:b5:62:14:fc:3b:ac:e7:ea:fc:ba:fa:c4:b5:4d:
ba:e0:f0:6c:69:67:c9:5d:73:28:7b:ad:64:76:f5:
5e:23:9e:46:3a:ff:20:79:a7:eb:b6:49:b3:bb:b3:
f8:67:49:92:37:85:05:a1:5d:a7:d9:e9:0e:b2:3a:
92:6f:9a:f0:33:bc:f3:98:18:c8:28:1e:a5:c6:e3:
ba:7d:2b:8a:69:09:56:27:6c:5a:c1:e7:57:3f:ae:
f8:7a:7b:12:93:7f:66:e2:80:7b:b1:d5:4a:ae:bc:
1e:c3:3f:a9:4b:76:ed:fe:18:89:77:2e:5a:fa:8a:
33:23:7a:83:9b:f4:92:22:21:83:6f:78:88:6f:7a:
5e:f2:9c:80:6f:ee:bf:28:63:ec:7c:8f:0b:09:33:
85:5d:a0:1b:f6:0f:33:86:75:20:35:b6:09:88:39:
cc:a4:be:dd:0f:ac:91:ef:88:49:b7:ad:c5:2b:da:
72:ed:07:a9:82:f4:dd:19:f0:a6:22:01:73:d7:09:
cd:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:A2:7A:D8:1A:4C:DE:F9:BA:E7:D5:BD:90:1B:66:B7:DE:CB:7B:CD
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363335663a3a2f34382d3438203d3e203136393039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:635f::/48
Signature Algorithm: sha256WithRSAEncryption
0c:96:78:92:ad:4c:ae:71:9d:33:97:64:60:d6:06:9a:46:6d:
d6:16:12:9c:c5:23:c4:28:8c:7d:8f:ce:ff:1e:56:c5:d6:f9:
0f:77:13:9f:ca:b9:b0:90:2a:df:1a:01:fe:e0:72:73:29:01:
3c:ce:ed:87:6d:16:1d:fa:01:06:cd:d5:c1:af:87:29:19:16:
c8:fc:74:bb:58:97:4d:4d:09:cf:82:a6:76:d2:9c:4b:28:a1:
b4:ac:35:2f:17:0c:0a:06:c9:c4:cd:e9:fd:6e:4f:0a:56:1d:
98:49:92:0c:db:9c:70:c8:80:b3:8c:6a:c2:dd:3c:67:d4:53:
d1:6b:5b:1f:df:9c:b5:b2:c1:b8:6f:46:56:cb:00:90:f1:df:
ef:03:3a:93:43:2c:69:65:c0:46:b4:01:13:54:df:41:0d:b9:
7e:1e:a4:0e:c0:87:14:a2:59:c3:0a:83:96:55:a9:a2:36:01:
28:eb:1f:04:76:a6:3a:00:31:38:f8:04:75:44:13:f0:8e:41:
1f:8c:f0:f6:c4:08:39:a9:1c:5b:cf:11:22:87:c1:2c:7c:17:
12:49:08:f7:4d:b3:f2:30:49:e2:88:f5:11:84:f2:58:d5:77:
f2:6e:45:49:2d:bb:b8:50:01:8e:00:a7:06:4c:6b:80:cf:73:
55:3b:cd:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 14:37:58 2025 by rpki-client