Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363365363a3a2f34382d3438203d3e203136393039.roa
File: 326131343a373538343a363365363a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier: p1rZJxL9/qQAR/qa5hl8zv+IoGiAJ4viTPjRi9p9t1E=
Subject key identifier: CF:0B:55:06:05:39:72:3B:6D:9E:0B:E5:55:69:FB:3C:4E:DB:84:01
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 69D7826F2B599B46327CDDCA658E21C4362A643C
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363365363a3a2f34382d3438203d3e203136393039.roa
Signing time: Sun 25 May 2025 13:48:02 +0000
ROA not before: Sun 25 May 2025 13:43:02 +0000
ROA not after: Sun 24 May 2026 13:48:02 +0000
asID: 16909
IP address blocks: 2a14:7584:63e6::/48 maxlen: 48
Validation: Failed, certificate revoked on Tue 27 May 2025 22:18:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
69:d7:82:6f:2b:59:9b:46:32:7c:dd:ca:65:8e:21:c4:36:2a:64:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: May 25 13:43:02 2025 GMT
Not After : May 24 13:48:02 2026 GMT
Subject: CN=CF0B55060539723B6D9E0BE55569FB3C4EDB8401
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:1a:7d:d3:da:f4:f6:6c:d0:72:7a:d6:db:71:
8c:6a:bb:6f:d4:4f:c4:3a:e8:f8:7a:b5:6c:74:9c:
82:a7:b8:4e:95:5d:5e:e0:92:98:21:0f:74:0f:59:
6a:87:41:3b:26:ff:90:65:11:00:fb:d1:cb:69:e5:
1e:0c:d7:19:f6:42:49:98:7f:41:de:c3:32:a4:15:
58:7f:08:94:77:ba:59:d5:01:1d:27:17:62:7a:7a:
0e:c0:90:02:35:59:4b:63:22:40:6c:81:10:b4:4a:
0a:07:ae:5a:26:d8:1a:63:81:32:7e:2f:a2:1f:80:
12:5a:f8:46:67:d4:98:5d:e4:9a:93:0f:f0:22:ab:
aa:81:94:08:54:37:91:45:46:9f:e0:f3:4c:38:81:
20:38:d5:1f:68:ee:c4:d4:d8:5e:0e:54:91:9f:b8:
b3:f0:28:77:83:e9:61:05:bd:43:f6:3e:c6:f2:bd:
ef:b1:81:cf:d2:e5:1a:15:3b:ec:98:84:13:ef:34:
37:7e:b8:48:8e:ac:1e:7c:4b:aa:68:0f:46:74:a3:
5d:ae:ce:43:95:82:3b:a9:d6:4f:c4:d5:5d:51:bb:
4c:17:37:c9:27:16:82:fa:88:69:84:96:2b:2e:01:
e9:0d:5b:e9:d2:b4:d2:25:fc:99:85:33:6c:74:f3:
a8:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:0B:55:06:05:39:72:3B:6D:9E:0B:E5:55:69:FB:3C:4E:DB:84:01
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363365363a3a2f34382d3438203d3e203136393039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:63e6::/48
Signature Algorithm: sha256WithRSAEncryption
81:0a:93:d6:8c:e0:cd:59:f8:cb:6a:fc:b8:bb:26:41:bf:f2:
fd:74:19:95:06:55:27:ec:cb:c2:86:2c:b5:d8:4a:61:93:62:
53:9a:5d:91:56:01:74:1c:d7:f9:16:bb:6a:1a:3b:9d:b6:19:
f5:a8:1a:73:b6:ce:2e:76:28:dd:22:76:4a:50:f4:b2:61:4a:
30:86:08:1f:5f:94:1a:f5:fc:f7:89:d9:8b:e6:7f:f1:c7:b1:
42:77:bd:4e:ea:61:98:51:8f:34:78:bc:31:74:af:b2:f9:79:
ca:19:2c:89:e8:2e:5f:e7:ba:11:2d:b6:57:49:ba:80:57:5d:
b3:04:c2:43:b2:8b:b4:cc:ec:44:3e:33:e2:b9:91:8f:ce:3d:
90:e3:e7:80:c7:54:56:98:24:20:88:0f:14:48:bd:5e:82:55:
e2:09:30:e3:f8:5d:bf:92:76:d5:d6:15:32:ff:a4:da:88:42:
66:6d:9c:2f:ab:19:c8:ea:c4:3b:79:de:a8:96:45:88:2b:75:
54:ea:c4:3a:3f:cc:09:58:85:10:fc:81:7c:93:c8:a1:b5:e5:
16:f3:04:86:46:e0:47:1c:21:41:c5:0c:61:fc:1b:44:2b:09:
e3:c4:da:af:96:28:26:e8:a5:2b:ac:f1:76:7c:e7:24:79:8f:
9d:3a:ee:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 11:11:23 2025 by rpki-client