Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363337313a3a2f34382d3438203d3e203136393039.roa
File: 326131343a373538343a363337313a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier: sClPVKW4jPEystaawrYWnV3ZljWjrMUw0GWhIvxqxP4=
Subject key identifier: 72:71:7D:81:70:60:58:83:39:A7:88:13:F2:9B:D2:39:F1:9C:41:24
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 6083D4E13FED05B624017EAD731371BB2DB640BD
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363337313a3a2f34382d3438203d3e203136393039.roa
Signing time: Fri 23 May 2025 20:30:02 +0000
ROA not before: Fri 23 May 2025 20:25:02 +0000
ROA not after: Fri 22 May 2026 20:30:02 +0000
asID: 16909
IP address blocks: 2a14:7584:6371::/48 maxlen: 48
Validation: Failed, certificate revoked on Sat 24 May 2025 16:54:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
60:83:d4:e1:3f:ed:05:b6:24:01:7e:ad:73:13:71:bb:2d:b6:40:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: May 23 20:25:02 2025 GMT
Not After : May 22 20:30:02 2026 GMT
Subject: CN=72717D817060588339A78813F29BD239F19C4124
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:df:8b:4d:a8:60:31:cf:9f:19:16:97:33:2a:
27:86:2d:fa:ed:e6:37:b2:98:16:03:59:f1:a1:cf:
8c:82:11:b3:7a:a1:00:d8:de:f4:d1:5e:d6:c1:5e:
bf:b9:7f:5e:58:da:6c:45:b1:e9:de:10:59:43:d4:
17:59:be:7f:39:2d:ce:9a:7f:f1:44:0a:7f:80:7d:
2f:36:b5:cc:ec:2e:aa:60:eb:55:a9:f7:4e:6a:f0:
96:0a:58:4e:cf:de:4a:f0:92:cf:c5:26:0d:70:5a:
1d:20:3d:79:a8:45:76:6d:23:a5:a7:28:30:60:ac:
95:27:8e:1c:9c:79:23:a8:91:78:a9:05:bf:3e:e7:
ef:d8:50:2e:a7:ec:62:7b:b4:7c:d0:78:93:12:c9:
c7:6a:24:15:18:76:97:a7:40:a3:4b:81:31:8e:61:
6f:80:d3:7a:22:63:5b:fc:87:3a:fa:30:51:21:a2:
85:21:b2:42:30:5e:2c:3b:8e:5f:7d:1c:00:1e:b2:
c8:51:00:76:26:aa:2a:56:9c:0a:29:58:42:47:da:
60:19:0c:eb:3e:63:15:61:45:c5:25:e2:ff:19:f5:
83:a1:88:c8:0b:6e:ab:67:ce:a6:2d:30:4e:7c:9a:
15:64:fc:7f:61:59:8a:a5:c1:5f:c3:9f:e0:4a:8d:
ae:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:71:7D:81:70:60:58:83:39:A7:88:13:F2:9B:D2:39:F1:9C:41:24
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363337313a3a2f34382d3438203d3e203136393039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:6371::/48
Signature Algorithm: sha256WithRSAEncryption
55:0b:3e:a3:25:3a:4a:8b:98:80:ad:98:5f:ac:a1:e9:a7:3c:
1b:a7:c1:6d:bd:ce:f8:c4:2c:e7:e8:1d:8a:be:52:93:f3:bc:
20:7d:da:41:70:78:9a:78:e4:c5:ee:13:f4:b4:e3:b8:a3:34:
14:30:e1:c9:e2:ab:4f:08:a1:ed:fc:41:03:34:53:09:ac:41:
15:cf:c6:74:ed:4d:45:e4:0c:9a:7f:63:d5:ae:9d:6a:ff:36:
31:17:df:f9:8f:e5:6a:57:a5:c2:b2:ce:65:63:01:f2:45:38:
02:47:c5:96:96:fb:95:20:5f:ad:83:1d:82:1a:7c:c9:d6:a1:
89:01:a3:d2:9b:03:a3:7e:ce:0c:36:08:5c:20:c4:ed:17:4a:
ad:cc:3b:c2:86:1b:bb:03:b1:ea:33:68:20:7a:f8:8e:16:78:
40:00:d5:01:4a:38:a7:38:54:7c:d2:4e:7e:25:43:61:b4:39:
82:68:45:12:a5:15:45:4e:c9:3c:75:bb:77:af:cb:ac:55:2c:
ca:7b:1a:33:f6:bd:31:56:cd:ff:80:88:af:7b:f3:35:53:f3:
8a:53:bd:1f:68:ef:a2:c3:44:84:3f:6c:69:49:dc:c4:1b:fd:
ed:f6:01:be:06:70:03:1b:bb:20:b0:6a:a6:aa:69:c6:48:08:
7b:e8:75:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 06:34:24 2025 by rpki-client