Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363336383a3a2f34382d3438203d3e203136393039.roa
File: 326131343a373538343a363336383a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier: gasERhREA75pfCgY2fM07z6JWZyN8HRSDyqsR/QpTGg=
Subject key identifier: D5:DC:D9:AD:6A:F2:3A:AD:0D:AA:E4:A6:D7:78:29:58:C6:E5:66:11
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 6712E4CBDCC90865159207457BF6FF89FC44098B
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363336383a3a2f34382d3438203d3e203136393039.roa
Signing time: Fri 23 May 2025 15:36:02 +0000
ROA not before: Fri 23 May 2025 15:31:02 +0000
ROA not after: Fri 22 May 2026 15:36:02 +0000
asID: 16909
IP address blocks: 2a14:7584:6368::/48 maxlen: 48
Validation: Failed, certificate revoked on Sat 24 May 2025 18:00:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
67:12:e4:cb:dc:c9:08:65:15:92:07:45:7b:f6:ff:89:fc:44:09:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: May 23 15:31:02 2025 GMT
Not After : May 22 15:36:02 2026 GMT
Subject: CN=D5DCD9AD6AF23AAD0DAAE4A6D7782958C6E56611
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:d8:30:18:8e:0d:1a:36:ec:4b:ea:28:08:4f:
5d:e2:e7:23:82:1b:51:64:f3:8d:f9:1c:2d:5d:ae:
93:f9:4c:b3:bd:a7:cc:a1:41:36:f3:76:ae:76:1e:
5a:05:b7:57:81:63:34:6d:64:44:00:bc:38:72:b1:
c4:cc:31:72:58:79:d5:cf:09:d8:3d:90:1a:67:43:
4a:69:50:b5:d1:81:9f:46:6b:f2:0d:59:00:ce:7c:
5f:d7:22:45:17:62:b3:85:5e:37:13:cb:29:60:5f:
1b:0b:34:b2:e6:df:19:28:90:f1:23:a1:ee:17:bb:
3a:63:57:c1:c4:69:36:79:7c:98:ad:65:29:50:36:
40:e2:ec:b9:b1:d7:01:d3:c3:4b:ce:8e:b9:5b:79:
8b:40:16:8e:c3:f9:8f:d3:4f:22:60:2a:53:07:7a:
20:0d:0b:7b:50:ac:67:12:4d:89:fb:d7:db:1e:0c:
7d:41:eb:03:c0:bc:b3:4f:07:bd:93:b9:8b:56:ea:
38:3a:eb:46:7c:aa:aa:09:70:fe:34:44:b9:e6:85:
c6:2d:7b:30:c1:ed:d7:28:64:bb:6f:f0:2f:d4:d7:
5c:cd:2d:57:a9:76:59:cd:3a:3f:21:4e:15:8f:d3:
eb:29:d4:df:71:33:e0:57:eb:4d:cd:ad:96:b1:d5:
6f:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:DC:D9:AD:6A:F2:3A:AD:0D:AA:E4:A6:D7:78:29:58:C6:E5:66:11
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363336383a3a2f34382d3438203d3e203136393039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:6368::/48
Signature Algorithm: sha256WithRSAEncryption
37:32:81:e4:f4:09:48:50:f4:b3:84:35:3d:1a:da:63:72:81:
11:ed:46:db:37:5e:5b:aa:b5:af:18:5b:29:72:ee:47:dc:b2:
ce:13:7e:58:64:f6:c8:a6:31:44:e6:93:69:64:56:50:0d:94:
4e:1c:97:49:e8:b0:12:6a:6e:2d:d9:28:07:73:6b:34:28:80:
76:6a:1d:7e:c7:c0:1d:97:49:e7:3d:39:6f:6c:f8:f9:6b:a6:
14:46:3c:c7:93:cc:40:f3:29:31:da:b6:e5:63:6c:bd:14:e2:
06:75:97:b7:81:05:03:60:8a:f0:b6:30:e9:1c:b8:a5:b0:d0:
89:6e:15:99:f3:bc:45:0b:8b:4a:db:a4:f2:e7:23:de:c1:0d:
23:7f:b3:eb:d4:c0:6c:6b:8b:f2:5d:07:10:87:1b:50:e0:2b:
9e:91:2e:4b:12:52:eb:f1:fa:49:bb:92:75:c6:dc:d0:8a:70:
1f:d6:e8:15:fe:dc:11:f3:59:b7:ea:e7:3f:88:14:b4:d4:b0:
65:f6:5f:c0:07:60:ce:e8:b9:c9:f3:d7:49:e5:0b:c6:a4:67:
b7:ec:1c:75:61:d9:2b:4a:8d:cf:fc:ac:56:45:c7:4d:ea:c0:
84:31:be:fd:ca:9a:95:93:22:e4:a2:95:a8:c7:a0:59:52:45:
ca:f7:ba:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 07:44:34 2025 by rpki-client