Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363363613a3a2f34382d3438203d3e203136393039.roa
File: 326131343a373538343a363363613a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier: mNFBrKPfQycsBOG0ZgU6OhlaWBEuQQi/LTANo2kO5Fw=
Subject key identifier: 07:03:A1:38:A6:F6:FD:1B:BD:8C:DF:CB:41:44:F1:B2:FC:AE:45:0E
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 0B9A61D0DC0E12E12A5BE260D9438B3AC9E8B6C2
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363363613a3a2f34382d3438203d3e203136393039.roa
Signing time: Sat 24 May 2025 18:00:01 +0000
ROA not before: Sat 24 May 2025 17:55:01 +0000
ROA not after: Sat 23 May 2026 18:00:01 +0000
asID: 16909
IP address blocks: 2a14:7584:63ca::/48 maxlen: 48
Validation: Failed, certificate revoked on Sun 25 May 2025 05:48:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0b:9a:61:d0:dc:0e:12:e1:2a:5b:e2:60:d9:43:8b:3a:c9:e8:b6:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: May 24 17:55:01 2025 GMT
Not After : May 23 18:00:01 2026 GMT
Subject: CN=0703A138A6F6FD1BBD8CDFCB4144F1B2FCAE450E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:dd:5e:1a:98:54:b2:ad:ea:02:de:29:98:33:
e9:1e:1f:29:61:ec:83:8a:55:34:84:e2:27:56:4c:
31:54:5a:20:d4:e6:d4:df:bc:d9:80:15:6e:02:fb:
72:25:e9:23:cf:6f:3e:f4:7d:75:70:b4:c0:5a:de:
09:cf:7d:08:d3:b0:87:7e:90:8b:64:69:b2:75:a6:
9b:39:f6:d4:d6:7b:f3:27:11:a7:ca:e5:9f:34:9c:
8f:17:11:86:d7:7c:8f:d3:af:6c:5a:e6:16:2e:3e:
91:a6:94:c5:88:99:ef:f5:6c:50:28:e9:f1:ac:9f:
86:a3:47:6e:9a:f0:09:82:da:26:75:95:85:dc:c0:
2c:f2:4a:d5:8a:fe:80:2d:54:05:2c:fb:c8:77:1f:
76:56:8b:63:de:f1:49:d1:cd:35:41:11:60:94:24:
cb:8e:21:45:fc:b2:c5:60:e4:6b:82:c0:c2:e1:c5:
1b:48:f0:e6:5e:18:34:6e:34:c5:1f:eb:c0:b4:d8:
af:68:f9:6b:ad:14:80:36:f6:84:7d:78:0a:18:3a:
90:79:3b:ae:25:20:0c:31:ce:6b:68:a7:64:91:3d:
36:ef:ef:c7:60:6b:24:47:ff:dd:18:1d:35:74:c9:
46:cc:ee:bf:8b:b0:4d:f7:d4:b1:3c:ae:3e:68:bb:
b3:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:03:A1:38:A6:F6:FD:1B:BD:8C:DF:CB:41:44:F1:B2:FC:AE:45:0E
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363363613a3a2f34382d3438203d3e203136393039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:63ca::/48
Signature Algorithm: sha256WithRSAEncryption
b7:a4:99:06:0b:cf:e7:12:f2:aa:3e:49:c6:0b:82:89:39:a7:
04:8a:0d:01:5e:5d:da:92:40:df:c1:59:13:e0:16:55:04:aa:
89:2c:16:65:73:8e:27:b0:c6:e2:76:89:69:45:75:6a:b4:00:
85:64:ad:cc:ad:bd:02:d2:ee:f8:cc:92:03:6b:20:37:e2:8d:
b6:fa:66:d9:be:92:95:a0:c6:19:0b:31:ad:78:01:0a:f3:2a:
20:06:d0:a2:de:60:5e:2e:80:fe:42:7e:a7:38:60:8a:ee:10:
d9:93:35:8e:25:a6:a0:1f:bb:d7:2f:fb:51:50:6c:26:7a:ff:
a6:36:d3:3c:66:aa:66:97:93:7e:59:f0:47:b0:49:f3:ae:8b:
fd:14:94:81:5d:dc:e5:23:2c:d9:5c:cc:86:7b:f9:6e:32:24:
8c:ae:63:36:ca:46:1d:ee:f4:da:9f:da:5c:83:c0:9c:9e:c1:
c8:43:a3:aa:81:4a:83:1c:09:2a:59:0d:b5:87:59:0a:8a:75:
04:e6:12:80:d3:3f:32:3c:82:a9:27:dd:f8:04:d4:73:33:06:
ab:66:2e:04:15:0e:d5:c5:ea:1e:78:bc:f3:b6:04:fd:8b:0a:
9b:23:25:81:87:c6:fd:fc:ad:75:2c:98:97:be:e4:0e:0c:a2:
3e:57:44:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 06:11:15 2025 by rpki-client