Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363336393a3a2f34382d3438203d3e203136393039.roa
File: 326131343a373538343a363336393a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier: 4WbHT+hST0J8bDdy09yu67a+xQDiHyUad3K52qXRrZI=
Subject key identifier: 6C:68:73:ED:5A:BB:FB:A2:E8:A2:6E:92:85:69:27:59:BB:E2:BF:1E
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 347CC31ED0AA19F572220051935C48AD8CBBD69F
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363336393a3a2f34382d3438203d3e203136393039.roa
Signing time: Fri 23 May 2025 15:36:02 +0000
ROA not before: Fri 23 May 2025 15:31:02 +0000
ROA not after: Fri 22 May 2026 15:36:02 +0000
asID: 16909
IP address blocks: 2a14:7584:6369::/48 maxlen: 48
Validation: Failed, certificate revoked on Sat 24 May 2025 23:30:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
34:7c:c3:1e:d0:aa:19:f5:72:22:00:51:93:5c:48:ad:8c:bb:d6:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: May 23 15:31:02 2025 GMT
Not After : May 22 15:36:02 2026 GMT
Subject: CN=6C6873ED5ABBFBA2E8A26E9285692759BBE2BF1E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:59:e3:af:e7:31:38:43:03:4d:e7:27:7b:88:
b8:6a:5a:e6:7c:59:8a:1d:bf:b8:f2:21:fa:af:4e:
82:07:6c:cd:da:89:51:54:c5:9d:07:c5:15:c7:bd:
ab:66:32:13:c0:52:e1:0c:bd:5c:16:11:42:30:de:
b8:3a:0e:44:08:17:f2:42:fc:8d:d9:24:fc:86:ec:
ba:0b:32:97:00:04:96:27:f5:a5:0c:3c:87:6e:fc:
1e:83:c3:2e:03:3c:72:91:75:1c:b2:2a:a5:64:76:
0e:8d:95:9a:a2:98:05:43:1e:16:46:66:c9:7f:6c:
4d:50:37:f0:f8:7e:4a:d3:ca:59:2b:86:69:7f:8a:
f3:9a:05:c6:60:ab:02:7f:a2:e5:05:4c:d3:6b:05:
4b:a0:0a:1c:c5:17:97:36:4f:e8:05:18:6a:c5:ab:
fd:33:a5:eb:93:34:2b:98:4d:6a:f0:c5:bb:ff:c4:
50:86:ea:9e:92:9e:bd:22:73:a3:bd:a9:77:81:b3:
a0:f0:a2:53:f4:56:97:7a:58:59:d2:3a:6f:b0:af:
71:ad:1b:8d:76:c4:50:24:3e:60:4c:63:d3:0d:f0:
99:46:91:98:d7:2a:b4:dd:72:39:f0:83:7e:f4:2f:
5d:a4:53:78:d1:a0:14:f5:15:60:86:c7:0c:46:cd:
66:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:68:73:ED:5A:BB:FB:A2:E8:A2:6E:92:85:69:27:59:BB:E2:BF:1E
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363336393a3a2f34382d3438203d3e203136393039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:6369::/48
Signature Algorithm: sha256WithRSAEncryption
7f:ac:7d:03:f2:8f:34:23:b6:1c:28:a2:b2:3c:17:d2:ae:fc:
90:7e:98:59:54:7a:08:5d:73:be:59:3d:8f:cb:6d:41:1f:37:
e0:5e:0d:9f:56:3d:77:70:68:b9:82:a6:84:63:84:47:3c:fd:
a7:62:fa:0a:34:0e:44:08:23:6e:0b:38:71:6f:46:b4:10:a1:
cd:64:8b:d3:c0:e9:3c:f8:2d:d0:6f:e2:d8:e5:78:fa:71:d4:
08:4d:77:52:f8:89:13:62:20:55:b4:7c:9e:68:69:08:87:a6:
97:45:ff:a3:65:00:a1:97:6a:81:b1:c2:26:4c:00:62:41:8a:
14:b8:3a:c1:ab:e9:9a:3c:a5:de:99:5e:77:d5:e8:4d:a5:78:
86:04:0c:97:14:d0:8f:62:29:8b:97:fe:af:b7:bb:22:7f:25:
ec:49:aa:88:70:e3:06:eb:ef:3b:b1:7e:a2:57:b9:90:b3:65:
cb:d7:3e:a9:16:de:11:63:da:b0:a2:95:25:a9:6b:41:56:b7:
67:d5:e4:f5:9a:85:1d:39:98:81:60:b0:e3:8d:52:06:2b:17:
e6:99:98:fe:42:fe:b1:46:28:14:64:d3:3f:99:ff:c0:4e:37:
44:80:66:84:31:26:1a:7f:e5:a3:b7:90:fe:5d:b0:a4:5a:4a:
0a:ad:f1:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 16:39:53 2025 by rpki-client