Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363438343a3a2f34382d3438203d3e203136393039.roa
File: 326131343a373538343a363438343a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier: QQz60ACvaKlqwz+73CLkm895y8azEfL2hPKAaxsRYdo=
Subject key identifier: 67:0D:3E:90:A7:BB:63:57:BA:19:DD:67:C7:17:89:CC:B4:96:A1:3E
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 3A348137F87677B04368D67273BED05FADBFDA12
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363438343a3a2f34382d3438203d3e203136393039.roa
Signing time: Sat 24 May 2025 18:42:01 +0000
ROA not before: Sat 24 May 2025 18:37:01 +0000
ROA not after: Sat 23 May 2026 18:42:01 +0000
asID: 16909
IP address blocks: 2a14:7584:6484::/48 maxlen: 48
Validation: Failed, certificate revoked on Sun 25 May 2025 21:54:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3a:34:81:37:f8:76:77:b0:43:68:d6:72:73:be:d0:5f:ad:bf:da:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: May 24 18:37:01 2025 GMT
Not After : May 23 18:42:01 2026 GMT
Subject: CN=670D3E90A7BB6357BA19DD67C71789CCB496A13E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:65:50:68:b2:e7:0c:88:c6:a2:22:51:e9:9c:
18:40:91:cf:7e:80:60:a5:e4:ff:49:fc:14:f5:c1:
6b:50:8e:f2:4b:b4:58:8d:19:ee:0a:84:9a:cd:50:
08:36:a3:09:04:9e:27:d7:4a:c3:e4:71:a6:3d:25:
a6:6f:35:55:3f:69:da:aa:6d:93:de:66:84:eb:06:
65:8e:d0:1d:72:06:54:a1:ae:a3:67:99:7c:e3:b4:
b5:86:76:ae:2b:d6:a6:07:da:f8:7e:b2:00:99:65:
48:54:cf:48:a4:50:e8:4b:74:31:03:f0:a1:81:45:
94:56:e2:6a:2c:32:1a:ce:d9:c5:62:a3:44:21:51:
46:03:f2:65:78:f8:c8:e2:22:92:5b:77:da:d6:ed:
04:5a:5e:a8:03:c6:52:16:16:8e:ed:17:7c:d6:e0:
32:79:a8:7e:6f:e3:c3:aa:1d:3e:2b:ff:64:89:70:
5e:52:6e:9f:c8:94:a2:e5:8b:e5:1a:dd:15:bd:8b:
5d:c3:49:2c:98:da:9b:54:35:f0:ad:a1:4f:3a:9b:
a2:43:7f:cc:43:86:d8:77:ae:b5:51:7e:ae:52:12:
13:7f:19:d0:c7:3e:8f:aa:7c:3f:49:3e:ff:65:ed:
8b:ad:f1:52:43:f7:44:9b:7e:fc:c8:d0:0f:69:5b:
d7:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:0D:3E:90:A7:BB:63:57:BA:19:DD:67:C7:17:89:CC:B4:96:A1:3E
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363438343a3a2f34382d3438203d3e203136393039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:6484::/48
Signature Algorithm: sha256WithRSAEncryption
80:5f:da:1b:5b:24:16:e6:57:0e:42:67:b7:86:77:db:d6:f2:
28:df:71:2f:40:a7:9a:7e:fc:96:7a:6d:4d:ce:2c:99:fa:6d:
13:9b:8e:df:bd:d0:8d:9a:12:8a:23:64:91:fe:ce:b5:47:6c:
e7:3f:f5:8b:2b:83:06:27:56:ed:77:b4:8f:5f:bd:90:ac:55:
89:69:b2:48:9a:55:d2:9b:13:f5:b9:92:0f:e6:65:99:3d:6c:
2a:33:39:0b:0c:6f:fe:57:bf:7c:a1:70:5c:21:59:7d:e0:69:
b0:0e:96:37:19:8e:0a:54:31:f3:30:05:fe:b8:63:ab:5e:39:
44:11:01:ea:2e:fd:f2:46:35:01:2a:8f:b3:4d:60:0d:eb:b7:
c2:1a:6e:50:3e:a5:a0:fa:12:e4:eb:6d:b0:85:2d:42:d2:1c:
fd:d5:2b:21:78:c5:bb:84:17:90:4d:0e:08:cd:8f:39:03:3f:
13:23:4d:4d:1f:0c:4d:5e:cf:ce:5f:22:47:c6:f1:91:85:9d:
ce:0c:7a:bc:a4:5d:e7:af:fb:56:06:dc:c4:51:3f:1e:78:56:
be:a6:74:f8:ab:9f:66:db:6b:0c:eb:a5:21:3e:29:6b:c1:48:
4d:04:3d:ef:5d:53:55:7d:f7:0a:6c:98:7f:4b:b0:c6:04:e2:
bc:6f:3f:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 05:59:49 2025 by rpki-client