Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363337373a3a2f34382d3438203d3e203136393039.roa
File: 326131343a373538343a363337373a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier: QEKEfsLLNeTXD7mKRkUjtezfjVAdz8M5R40ITNDfg1s=
Subject key identifier: A9:F0:B8:E3:CD:0E:09:88:E1:BD:95:35:08:E5:3D:9D:BE:27:1D:EA
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 18D875D5B9E85E18BF80B8545E390ADFC1FD8F54
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363337373a3a2f34382d3438203d3e203136393039.roa
Signing time: Fri 23 May 2025 20:36:01 +0000
ROA not before: Fri 23 May 2025 20:31:01 +0000
ROA not after: Fri 22 May 2026 20:36:01 +0000
asID: 16909
IP address blocks: 2a14:7584:6377::/48 maxlen: 48
Validation: Failed, certificate revoked on Sun 25 May 2025 03:12:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
18:d8:75:d5:b9:e8:5e:18:bf:80:b8:54:5e:39:0a:df:c1:fd:8f:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: May 23 20:31:01 2025 GMT
Not After : May 22 20:36:01 2026 GMT
Subject: CN=A9F0B8E3CD0E0988E1BD953508E53D9DBE271DEA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:4c:94:0c:aa:62:af:45:7b:26:ff:b2:a3:40:
42:ed:fb:6d:25:5f:63:0a:8f:64:7e:bf:6a:48:9b:
41:42:7d:51:7b:c8:31:f2:2b:2a:76:c0:b2:16:18:
ff:53:00:0d:69:df:55:ea:16:e0:f9:43:79:2a:e6:
e3:26:7b:3b:f3:05:88:d1:12:e8:07:b1:c1:ba:29:
ac:ee:72:7f:18:86:3f:6f:da:ce:db:aa:5c:d4:b1:
89:19:19:38:f5:1e:42:fd:09:9f:70:e6:76:3f:8a:
b5:42:09:10:b3:ef:fe:65:a7:ff:15:a9:4c:f4:99:
d2:af:30:9e:2b:83:13:00:2b:53:9a:bd:93:0b:89:
55:4f:a2:5d:f1:a6:a7:d0:4f:f1:7f:29:20:a2:08:
de:8e:a4:4b:ab:de:b4:b8:31:ed:ec:b8:ef:08:f4:
e4:22:45:c3:98:5d:87:ad:72:92:90:b3:14:05:36:
a1:0a:59:09:9a:f5:75:42:3e:9b:ee:0d:71:16:bd:
21:8f:72:a8:27:b1:3e:81:c1:40:5b:c8:2b:eb:f6:
d0:da:08:ce:31:8f:ab:cb:ec:a9:ab:e5:5f:fd:98:
0b:6f:6d:9d:06:1b:6f:85:03:19:a4:a3:f0:3a:69:
0c:b4:67:01:bb:0d:98:9f:bc:eb:08:55:fa:35:09:
54:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:F0:B8:E3:CD:0E:09:88:E1:BD:95:35:08:E5:3D:9D:BE:27:1D:EA
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363337373a3a2f34382d3438203d3e203136393039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:6377::/48
Signature Algorithm: sha256WithRSAEncryption
74:c5:74:13:4b:f9:24:2b:f7:1e:d9:b3:46:9d:41:00:4f:e8:
fa:f2:51:4a:df:e3:4d:28:01:c8:12:a5:9b:ec:80:6d:e3:4b:
70:ee:ab:e0:e5:2d:bb:31:bb:9e:86:6a:18:6c:95:3f:9e:3c:
2c:1f:29:ce:e9:03:b0:43:e1:76:10:1c:cd:57:d5:99:f4:bd:
d1:f1:97:52:24:be:8b:2d:83:de:de:a3:73:31:73:cf:92:9e:
cf:24:69:60:4a:01:bf:b8:eb:84:93:19:0f:69:fb:f3:d5:fd:
98:11:2b:12:2a:d8:32:7c:02:a9:7c:6b:55:23:41:07:ae:bc:
67:7f:e6:d4:c4:ca:52:09:8b:e5:d3:66:51:0e:25:b8:e8:5c:
0e:88:0f:ff:4f:16:af:94:ae:40:f7:35:32:a9:61:23:c5:d0:
e0:69:10:d7:3d:c9:b3:48:00:d6:f4:a7:03:64:77:39:32:8b:
c1:fa:09:04:12:05:ce:f9:b8:53:73:3c:58:71:ad:a7:bd:01:
21:c1:e0:b6:0c:ea:2d:b2:23:b1:ae:c0:1c:b7:ab:89:5b:bf:
3f:c5:c8:f5:1c:97:9e:c0:3c:3d:17:9d:49:d1:f3:9e:60:8f:
81:05:d1:45:00:d8:74:9f:06:78:04:cf:0e:cc:8a:a4:f6:c3:
31:44:ef:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 06:42:00 2025 by rpki-client