Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363337353a3a2f34382d3438203d3e203136393039.roa
File: 326131343a373538343a363337353a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier: QZYy9LUNdMIQiZDiL3K4hdl2ounp0oXYULWiUiSY10A=
Subject key identifier: F0:97:9C:55:FD:F2:3F:4F:38:13:1A:E9:93:1C:5E:87:04:26:6B:D0
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 3AD0E6C29E671EC8592B12F555CF7E912E203CBC
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363337353a3a2f34382d3438203d3e203136393039.roa
Signing time: Fri 23 May 2025 20:36:02 +0000
ROA not before: Fri 23 May 2025 20:31:02 +0000
ROA not after: Fri 22 May 2026 20:36:02 +0000
asID: 16909
IP address blocks: 2a14:7584:6375::/48 maxlen: 48
Validation: Failed, certificate revoked on Sat 24 May 2025 16:24:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3a:d0:e6:c2:9e:67:1e:c8:59:2b:12:f5:55:cf:7e:91:2e:20:3c:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: May 23 20:31:02 2025 GMT
Not After : May 22 20:36:02 2026 GMT
Subject: CN=F0979C55FDF23F4F38131AE9931C5E8704266BD0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:36:5e:e9:64:c9:0d:71:6c:10:88:d6:83:27:
81:34:e9:77:1c:16:98:7a:f4:d5:4c:4a:f3:f3:dc:
05:62:1d:62:0f:18:17:cd:e4:53:f3:31:41:67:5e:
99:92:a4:35:9b:d4:6d:11:0f:a9:e2:42:8c:88:a9:
d8:df:32:0a:8c:17:d9:9e:fc:f7:50:2f:1e:93:fe:
7c:ee:e9:38:26:40:03:5e:55:ef:07:ed:c9:87:63:
c1:7e:78:cd:ac:a5:6d:51:c2:31:63:2b:f8:d0:b6:
c2:7e:cd:64:f4:11:17:e3:22:10:ff:82:45:e0:62:
1b:3a:05:8a:88:7e:25:ab:d2:9a:be:3a:54:4b:99:
6e:d1:c5:1f:2c:2b:49:f0:c8:0b:0a:10:d4:ad:c3:
73:74:20:0b:4e:0b:e3:b1:03:61:ad:f2:36:a0:e7:
6a:78:33:c2:0b:32:e3:43:f1:87:6b:9d:0c:7f:e3:
47:d6:3a:06:a6:53:a6:99:98:89:ca:6d:e5:fe:4d:
96:08:27:f0:d7:56:51:a6:cb:ae:54:16:68:b6:af:
c8:d9:d3:43:29:ba:25:be:ad:51:33:6c:61:b7:02:
66:44:39:57:7e:31:13:7c:4c:bd:a8:65:b2:e0:52:
64:ce:68:c9:73:ef:01:6b:da:96:18:2c:3f:66:4e:
a9:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:97:9C:55:FD:F2:3F:4F:38:13:1A:E9:93:1C:5E:87:04:26:6B:D0
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363337353a3a2f34382d3438203d3e203136393039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:6375::/48
Signature Algorithm: sha256WithRSAEncryption
43:3b:d3:c1:99:f4:5d:5b:57:86:80:00:88:58:4d:da:ce:93:
f8:fc:5b:7d:f7:9d:f8:d5:70:c0:fa:ba:05:79:0a:22:0e:2e:
4a:50:b3:8f:ab:51:68:c5:31:61:a1:ff:0f:62:0c:7f:2a:d4:
9d:fc:68:30:25:cc:2f:37:91:b1:4d:45:3e:a2:98:32:e6:2b:
22:f9:94:8c:56:c8:48:3e:fd:0f:85:f2:2b:43:c0:4b:85:81:
c7:23:8c:d5:9e:ef:41:5d:e7:44:cc:df:68:c4:91:29:ea:b4:
8f:9b:78:2f:da:b9:9a:f3:48:98:03:79:6a:39:c1:5c:45:db:
bc:c6:ed:c1:55:c6:08:aa:b6:d3:a9:a9:97:42:6a:06:eb:08:
f9:28:20:4b:cc:ae:22:72:b8:f2:f6:38:89:45:bc:bb:aa:f6:
6e:ea:e6:52:11:eb:bd:d8:0b:6a:28:68:31:73:aa:4d:a3:bd:
a6:bb:af:4b:7c:bf:fa:3b:98:ae:15:a3:39:14:b1:db:5c:0d:
16:9d:5a:0d:f9:88:e6:61:c1:0c:a2:72:d3:c3:f8:22:c1:7d:
c1:6b:83:fb:a4:e8:16:f0:50:40:a7:92:fb:78:30:92:64:84:
6f:2f:93:3c:01:eb:42:d5:4c:5d:ea:df:c5:eb:5d:fc:b3:a2:
6b:25:3d:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 06:38:21 2025 by rpki-client