Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363337323a3a2f34382d3438203d3e203136393039.roa
File: 326131343a373538343a363337323a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier: 4Y1IfQLBtRX5oJrGgiu1Bth6kKVVI7hiittiTGIYmbo=
Subject key identifier: AF:C0:C8:AC:E8:C6:DB:6E:6C:89:44:59:DC:A6:8F:0A:F0:71:01:23
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 276DA0C0D550104FC714ADFCE9A9104DA678A7D6
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363337323a3a2f34382d3438203d3e203136393039.roa
Signing time: Fri 23 May 2025 20:30:02 +0000
ROA not before: Fri 23 May 2025 20:25:02 +0000
ROA not after: Fri 22 May 2026 20:30:02 +0000
asID: 16909
IP address blocks: 2a14:7584:6372::/48 maxlen: 48
Validation: Failed, certificate revoked on Sun 25 May 2025 03:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
27:6d:a0:c0:d5:50:10:4f:c7:14:ad:fc:e9:a9:10:4d:a6:78:a7:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: May 23 20:25:02 2025 GMT
Not After : May 22 20:30:02 2026 GMT
Subject: CN=AFC0C8ACE8C6DB6E6C894459DCA68F0AF0710123
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:e8:eb:0b:18:2d:8a:1f:1c:bd:64:ec:19:10:
5e:3b:03:b2:62:e1:77:61:09:4a:c7:5b:9b:f6:2d:
90:96:fd:46:25:46:f0:44:d2:4a:da:4a:17:6d:c0:
9c:e4:e6:dc:15:18:ea:46:c7:16:17:b5:55:45:94:
d9:e7:f5:0d:d7:fb:62:ea:5d:4a:67:3a:69:e6:d9:
d6:04:b1:65:ec:28:c8:c8:31:89:19:12:de:16:9b:
bc:f5:96:a8:ff:52:76:00:78:08:e8:ba:1e:fb:1b:
08:aa:b4:8c:c1:79:6f:15:59:69:44:11:45:d2:7a:
e6:41:33:b9:31:c9:b0:66:6a:20:97:2c:1d:4f:b3:
44:3d:00:01:3d:75:76:03:25:b9:34:23:a0:19:cb:
f0:fd:ec:3c:0c:78:2a:fc:15:2b:30:ff:e8:f3:d8:
d0:53:aa:9a:51:db:85:51:b8:3f:f9:b5:23:55:7c:
4f:d6:a8:55:fe:c4:05:b4:62:78:b4:84:7a:72:5c:
87:95:6e:d1:34:d6:58:eb:c8:44:0c:33:ea:e3:bb:
85:9d:c2:4e:cb:92:c5:05:9d:b8:69:96:41:ac:f7:
bc:c8:bd:d5:6c:43:1b:72:65:4e:e4:0a:f8:77:2f:
77:a2:ab:bf:b3:d6:8a:99:8d:c3:b9:dc:cf:54:ae:
1e:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:C0:C8:AC:E8:C6:DB:6E:6C:89:44:59:DC:A6:8F:0A:F0:71:01:23
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363337323a3a2f34382d3438203d3e203136393039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:6372::/48
Signature Algorithm: sha256WithRSAEncryption
10:2c:1b:89:c5:dd:ae:ea:ba:6e:73:21:38:c2:40:4d:eb:15:
6c:54:03:bd:b4:b5:95:dd:94:55:b3:bc:a8:d1:dd:f2:95:b3:
7a:70:ec:40:f1:f2:2b:f0:bc:70:20:44:53:26:12:70:21:68:
15:09:3c:95:d7:58:9b:c5:63:ef:5d:fa:8f:bb:87:f7:bb:9d:
40:9e:d6:cb:71:0d:63:13:a8:e5:9d:2f:65:cd:dc:10:32:f3:
51:2b:06:8e:fd:57:16:68:df:17:04:20:df:cb:c9:d7:c7:58:
aa:28:75:26:05:09:a8:55:ff:1f:5e:e8:95:8c:42:5f:3c:22:
be:67:57:6c:0b:df:6f:fb:3f:7a:8d:a0:04:44:5c:92:37:4c:
30:61:8b:30:b5:c6:da:1d:9b:11:5c:d4:c7:93:d3:2e:37:23:
05:57:2a:e2:4a:89:1c:05:e1:67:b5:30:fa:ac:7a:7e:88:f4:
c4:d4:de:85:68:97:18:30:4a:95:e7:6e:3e:38:7b:35:90:c8:
a8:e3:cf:73:0f:2a:0f:53:64:84:92:fe:08:14:d3:df:f7:fb:
5f:21:c3:5f:cb:5f:fd:a3:4e:e9:58:6a:33:99:68:09:1f:cd:
39:23:6c:d6:a9:ab:d9:2a:33:c0:d9:20:09:bc:f0:47:a1:c0:
15:97:84:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 06:38:41 2025 by rpki-client