Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363337393a3a2f34382d3438203d3e203136393039.roa
File: 326131343a373538343a363337393a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier: Emu37aUqxn83iOuAxgPYDvxhDwRyNJMmxjYfF3Z416Y=
Subject key identifier: 76:CA:31:65:CE:48:2E:EC:5C:8F:C6:EC:12:A7:01:E2:B7:79:D9:7E
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 1EA5F8F1D37B88C34E3402A513952D6ED5F71ADA
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363337393a3a2f34382d3438203d3e203136393039.roa
Signing time: Fri 23 May 2025 20:42:02 +0000
ROA not before: Fri 23 May 2025 20:37:02 +0000
ROA not after: Fri 22 May 2026 20:42:02 +0000
asID: 16909
IP address blocks: 2a14:7584:6379::/48 maxlen: 48
Validation: Failed, certificate revoked on Sun 25 May 2025 02:42:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1e:a5:f8:f1:d3:7b:88:c3:4e:34:02:a5:13:95:2d:6e:d5:f7:1a:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: May 23 20:37:02 2025 GMT
Not After : May 22 20:42:02 2026 GMT
Subject: CN=76CA3165CE482EEC5C8FC6EC12A701E2B779D97E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:35:25:de:65:6f:d4:3f:a1:4b:3c:c7:87:28:
22:86:54:6d:3a:28:59:d0:4b:d9:80:64:a2:2a:5e:
10:8d:41:c1:79:c9:d5:68:56:31:34:6c:2f:be:3d:
77:1a:0f:61:c9:ee:19:3b:6c:23:8f:f1:09:3a:4b:
eb:f5:d6:d8:ed:4a:36:7e:db:e9:fd:b1:bb:09:87:
93:3e:f9:40:bb:93:f6:f3:e8:37:f8:ed:7a:f6:a5:
d2:10:e4:17:08:5f:99:a8:b3:f2:85:c7:f2:83:89:
54:06:7e:78:38:c5:2b:f6:45:5d:ed:83:3c:c7:08:
9b:e8:99:25:87:ad:c3:dc:18:6a:e5:be:51:06:8d:
17:e3:4b:57:c9:db:e2:73:df:45:ab:8a:69:cd:f5:
86:aa:9c:38:e9:43:0b:ba:93:0a:47:d0:e3:2c:e7:
ce:06:b5:22:53:e2:d5:29:0e:3b:4a:a0:66:f5:57:
5d:17:6c:f2:7b:09:ab:c1:71:76:e7:5b:a7:03:7a:
c1:94:5a:31:3c:40:1e:d0:dc:8c:0c:18:c2:19:71:
7a:d4:97:90:9e:90:21:9f:bd:98:55:54:44:c9:55:
17:77:a2:e5:5e:b5:17:db:5a:d3:d0:a5:2d:fb:42:
49:93:58:b3:fa:42:a7:fb:c2:05:a2:76:90:e6:21:
c1:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:CA:31:65:CE:48:2E:EC:5C:8F:C6:EC:12:A7:01:E2:B7:79:D9:7E
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363337393a3a2f34382d3438203d3e203136393039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:6379::/48
Signature Algorithm: sha256WithRSAEncryption
b7:c9:2f:8b:6d:f2:58:81:04:5c:9e:eb:54:11:b7:9d:e0:4f:
25:59:ed:22:05:6e:ae:74:1a:42:56:66:e2:0b:6d:3d:31:2b:
3f:5f:85:5c:73:b1:63:d5:df:d9:d5:01:b9:d3:32:5e:90:07:
80:f1:71:67:7f:ad:ed:ab:62:87:a7:5f:1f:8d:9a:fb:ff:49:
f8:d9:a8:15:cb:06:67:01:de:a4:33:a6:59:e9:82:e2:80:81:
71:5f:81:22:aa:ef:d5:c3:da:35:a5:b5:cf:af:14:a7:3d:1c:
3f:b3:6d:44:45:1e:b1:69:57:b1:3c:c9:96:11:38:ee:3f:0d:
bb:ad:14:d7:25:42:97:79:dc:4c:7d:e4:4d:06:96:eb:6c:e3:
a7:47:52:ec:f9:10:4c:e2:71:38:9a:30:22:b9:7a:d7:3d:40:
48:15:4f:c8:36:14:78:5a:a8:9b:55:10:9a:44:eb:63:8e:e3:
c6:bf:1e:c9:48:a2:f8:0b:a1:68:ec:a7:0f:43:16:e7:0d:5f:
5c:0c:9d:07:53:57:16:34:1a:23:5a:ba:7c:51:c5:3d:c8:b9:
a1:d6:91:b6:bb:5d:dd:48:d3:7b:7b:5b:32:0d:07:71:c8:dc:
19:71:a3:da:e2:b0:c9:8e:b2:e1:a2:44:d8:83:f0:63:e6:b8:
e8:61:6b:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 07:48:33 2025 by rpki-client