Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363336323a3a2f34382d3438203d3e203136393039.roa
File: 326131343a373538343a363336323a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier: 3BT0rV9LwNdVWfZPg+mg9ODYCZAmzJgkWvkG/TDtLqM=
Subject key identifier: E8:0D:36:55:C9:2E:70:C1:D7:73:92:DC:F4:27:87:20:DE:A7:31:63
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 18FC9959019617B1D25DA1D778293E4CB4E5AF3B
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363336323a3a2f34382d3438203d3e203136393039.roa
Signing time: Fri 23 May 2025 05:18:02 +0000
ROA not before: Fri 23 May 2025 05:13:02 +0000
ROA not after: Fri 22 May 2026 05:18:02 +0000
asID: 16909
IP address blocks: 2a14:7584:6362::/48 maxlen: 48
Validation: Failed, certificate revoked on Sat 24 May 2025 18:06:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
18:fc:99:59:01:96:17:b1:d2:5d:a1:d7:78:29:3e:4c:b4:e5:af:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: May 23 05:13:02 2025 GMT
Not After : May 22 05:18:02 2026 GMT
Subject: CN=E80D3655C92E70C1D77392DCF4278720DEA73163
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:ef:f3:cc:ad:57:6f:47:e2:ec:51:67:5c:35:
5c:26:d4:66:fb:3c:b4:0e:62:0b:51:36:d0:02:39:
4c:8d:4e:65:db:40:87:1c:c3:07:33:85:02:64:f0:
d8:72:b3:d6:61:5a:ca:e0:56:94:0d:48:1e:e4:cb:
f4:8d:f4:7a:9d:7b:f1:00:12:48:20:a5:89:44:41:
4a:e1:58:8f:9e:f8:bc:02:4f:9f:50:27:17:b3:a1:
c0:c7:73:63:7c:5f:8f:ba:1f:51:1d:98:d4:6a:87:
a0:69:d5:e1:22:93:9b:31:d1:9a:5a:80:22:c9:97:
43:0e:8e:7c:9c:5e:e3:82:76:b7:35:51:b6:84:1e:
0f:53:56:a8:f9:81:56:8c:89:f0:47:83:df:81:cb:
1a:a6:e4:c0:bc:0c:b9:96:21:c6:7f:c6:a0:c8:60:
35:1f:21:be:d1:47:2c:a0:5c:64:ea:b7:50:cd:c0:
c2:bb:17:d8:c2:41:e5:cc:db:82:9d:33:02:33:21:
d9:ff:e0:e8:ba:82:a5:d3:ae:61:9d:b6:22:6c:08:
74:c8:41:8f:ad:4e:f3:98:ef:ff:5d:aa:09:9a:90:
58:b0:22:20:7c:c6:d6:5d:33:6d:44:86:db:86:b8:
13:25:5d:2d:bd:3d:fb:6b:7b:11:21:bb:2a:33:b8:
1e:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:0D:36:55:C9:2E:70:C1:D7:73:92:DC:F4:27:87:20:DE:A7:31:63
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363336323a3a2f34382d3438203d3e203136393039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:6362::/48
Signature Algorithm: sha256WithRSAEncryption
7c:cc:f8:e9:79:66:55:dd:64:0e:3b:d0:94:88:92:ab:50:c9:
db:41:e0:19:92:9b:47:cd:be:0e:e2:fd:cb:92:d1:03:c0:f0:
89:65:28:ef:20:a1:fb:1f:97:88:1b:97:bb:cc:6d:55:df:87:
2e:8b:20:de:2d:08:59:35:7b:42:a9:0b:09:a3:70:1e:ca:99:
c4:90:c9:79:85:c9:fb:84:65:b0:ea:ec:a8:45:2b:88:3f:0c:
ad:62:0c:3e:44:bf:26:50:54:b9:01:c6:98:74:5b:cc:ad:74:
63:a3:1c:93:d7:5e:11:65:e6:27:2b:a8:35:05:d1:28:d6:01:
78:8c:e5:25:35:ca:27:3b:49:c4:ea:2c:28:19:57:81:b9:a2:
ce:ef:1c:8f:26:4b:01:e0:82:66:fc:2c:d9:01:66:61:21:9d:
7e:df:94:1d:70:df:03:2e:28:de:51:cd:e7:ea:c0:17:01:85:
aa:7a:da:ac:9e:53:d1:82:72:74:df:92:f6:2d:97:04:df:83:
ab:86:d5:95:8f:f0:cb:32:2d:1f:3a:02:8d:3c:32:9d:c6:35:
3c:5b:ae:1f:b6:89:87:70:6a:d1:a7:f5:19:c1:d4:bc:3d:ec:
e0:eb:88:66:eb:a9:b3:8b:41:59:05:d3:ec:ed:94:25:46:5a:
a8:da:5a:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 06:38:33 2025 by rpki-client