Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363337333a3a2f34382d3438203d3e203136393039.roa
File: 326131343a373538343a363337333a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier: lC2fsVD6JYOSBUFJLxeQxbmo92HCWZdrTfqWxbwIOPA=
Subject key identifier: 1B:83:50:2F:77:0B:55:E3:D4:24:22:D8:41:B2:7B:D9:14:07:2F:7F
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 10A906942EA48378AE65163978AD031DFBAB3BEA
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363337333a3a2f34382d3438203d3e203136393039.roa
Signing time: Fri 23 May 2025 20:30:02 +0000
ROA not before: Fri 23 May 2025 20:25:02 +0000
ROA not after: Fri 22 May 2026 20:30:02 +0000
asID: 16909
IP address blocks: 2a14:7584:6373::/48 maxlen: 48
Validation: Failed, certificate revoked on Sat 24 May 2025 18:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
10:a9:06:94:2e:a4:83:78:ae:65:16:39:78:ad:03:1d:fb:ab:3b:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: May 23 20:25:02 2025 GMT
Not After : May 22 20:30:02 2026 GMT
Subject: CN=1B83502F770B55E3D42422D841B27BD914072F7F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:ad:97:53:72:44:90:13:7e:9c:af:58:2c:93:
d5:8e:4c:66:ed:4f:4f:3c:6f:a3:b6:0d:73:cc:e9:
13:15:4f:62:cd:67:29:5d:6c:5d:0f:0d:0e:f3:09:
b0:5d:63:80:f0:2f:8b:80:c8:34:21:bd:84:0d:4e:
ad:27:3e:ce:3a:64:fe:ad:d9:2f:16:a9:dc:2b:e1:
14:27:b1:cf:f5:ba:4c:c4:e1:28:a6:16:67:78:cf:
99:f2:83:de:65:2a:32:82:8d:e2:f9:a4:14:33:09:
7b:6a:be:6a:7a:d6:41:2f:f3:c4:a2:99:2d:1d:7a:
6e:f8:ec:f4:01:46:69:be:f9:3f:64:69:2a:5e:75:
48:a7:b4:ef:f5:37:3d:c4:10:b4:48:7e:f6:cc:de:
1f:a6:d0:29:59:8f:ff:4b:58:0b:77:cc:51:5d:47:
4a:19:1f:8b:dd:18:96:cc:5b:6b:05:1a:de:f3:87:
ee:e0:02:de:1b:8e:bc:c5:7d:6e:51:8f:aa:24:dc:
f9:43:ee:31:2d:6a:9c:1d:08:08:20:24:ca:e2:14:
15:db:a0:c3:8f:b9:84:e0:00:67:c4:00:48:f1:3b:
fc:e6:d7:31:21:7f:4c:bd:d4:ef:a0:2f:02:7d:fd:
ad:06:9c:55:32:23:f4:62:bc:ec:15:eb:63:db:a3:
87:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:83:50:2F:77:0B:55:E3:D4:24:22:D8:41:B2:7B:D9:14:07:2F:7F
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363337333a3a2f34382d3438203d3e203136393039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:6373::/48
Signature Algorithm: sha256WithRSAEncryption
8e:33:9c:52:f4:3e:f7:c4:fe:62:d9:f5:5f:10:81:df:f5:12:
08:6c:f5:ce:ec:4e:93:ad:55:d6:3a:e0:8a:0d:a5:86:07:09:
c3:04:6a:7f:45:07:60:7a:f0:60:f4:33:1e:e1:3e:fe:bd:05:
5a:db:09:80:2e:e7:a7:b0:7d:64:b1:67:f1:21:11:ea:0b:0b:
8d:f8:93:77:ba:3e:f6:d2:56:bf:14:c9:cd:bd:a8:45:b7:ad:
0c:7b:26:34:55:2c:9a:93:5e:55:ce:9b:57:7d:51:4f:1c:62:
46:6a:4e:f5:e9:a1:29:33:6b:93:9a:89:db:09:ba:36:62:e6:
f1:88:99:f4:0d:82:0b:2a:b9:c8:18:78:af:dd:e2:13:e4:1e:
0d:1c:97:14:e4:1c:a9:06:44:c4:58:3f:a9:ad:96:c6:4b:2e:
68:57:52:4d:f0:af:a9:a8:32:09:5d:10:f6:30:bf:bd:63:a7:
d3:a5:d1:41:85:47:26:d0:1c:9c:99:e1:5b:42:30:5d:79:10:
da:88:f7:ac:3d:bf:4d:3c:e5:93:08:e9:ef:48:48:6a:09:1c:
a5:3b:1d:e8:d2:0c:51:34:1b:6d:81:19:d4:97:18:ec:e6:ba:
26:fb:84:41:f9:c5:2a:b4:18:bb:c6:3e:28:98:93:8a:81:88:
c9:7f:e6:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 06:43:08 2025 by rpki-client