Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363531633a3a2f34382d3438203d3e203136393039.roa
File: 326131343a373538343a363531633a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier: K/dDM9WRaEhgJvqOFfzFKp8C8pAjNjLy3yywaTyDIUU=
Subject key identifier: 9B:9C:3F:EB:96:DA:12:87:51:A8:7B:97:84:5C:D8:C0:45:A7:B2:4F
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 64B03F791BAED447B5448D31841936C089048255
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363531633a3a2f34382d3438203d3e203136393039.roa
Signing time: Sat 31 May 2025 11:12:02 +0000
ROA not before: Sat 31 May 2025 11:07:02 +0000
ROA not after: Sat 30 May 2026 11:12:02 +0000
asID: 16909
IP address blocks: 2a14:7584:651c::/48 maxlen: 48
Validation: Failed, certificate revoked on Sat 31 May 2025 17:16:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
64:b0:3f:79:1b:ae:d4:47:b5:44:8d:31:84:19:36:c0:89:04:82:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: May 31 11:07:02 2025 GMT
Not After : May 30 11:12:02 2026 GMT
Subject: CN=9B9C3FEB96DA128751A87B97845CD8C045A7B24F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:ce:b3:f9:68:a3:a8:16:f2:78:45:18:f8:9e:
80:93:6c:09:2b:bb:de:b3:3b:01:40:4c:84:9c:69:
aa:01:78:f3:cb:f4:62:d1:63:ce:38:b2:33:e1:32:
6e:c2:85:ed:5b:3b:a1:8b:cc:6b:b6:31:d0:3f:65:
e0:2c:3e:16:4e:0a:58:2f:c0:a8:09:45:f3:b8:cf:
18:e6:b8:8f:e4:a4:25:ac:b0:9a:f1:53:f2:99:df:
5b:97:66:a6:68:93:f3:6b:0f:05:55:f1:10:06:04:
f8:61:cb:97:ab:2b:b2:c3:cc:16:49:2e:ed:74:c3:
6e:9a:99:01:e3:41:26:c9:03:a6:0b:68:b1:2d:94:
38:7d:6b:a1:fd:ab:30:db:02:5c:f9:61:ff:13:d6:
4c:bf:52:40:b2:81:92:fb:e9:45:03:be:ce:15:be:
4a:22:b5:43:af:40:36:4d:44:fe:e1:45:d5:60:7a:
58:3b:83:8b:24:75:9d:69:90:5d:d1:d4:ef:e8:76:
1c:a7:db:28:b7:33:54:0a:56:25:ce:61:8d:7f:d0:
a7:46:a7:cd:6c:14:36:57:d5:d5:07:ae:c5:69:b0:
a1:5a:24:3a:e2:38:aa:73:16:2e:56:23:79:0b:27:
9a:2d:77:83:51:2a:5d:df:b0:02:39:50:84:85:95:
2f:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:9C:3F:EB:96:DA:12:87:51:A8:7B:97:84:5C:D8:C0:45:A7:B2:4F
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363531633a3a2f34382d3438203d3e203136393039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:651c::/48
Signature Algorithm: sha256WithRSAEncryption
16:2e:59:80:4e:8e:c6:53:a6:7a:92:08:86:5e:c9:9b:32:f0:
c1:ab:88:9a:60:ea:d0:42:1f:0a:98:21:fe:57:b3:bb:7b:15:
86:42:89:5f:79:fb:38:9f:df:75:70:0f:88:8d:e7:71:b7:2a:
6c:49:6d:a2:f1:ab:12:3a:c1:fc:cd:22:09:da:55:1f:d6:da:
d3:1d:d9:29:9e:57:4f:80:48:2d:a0:11:d2:98:31:21:52:88:
c0:f3:bb:0b:35:a6:4e:0d:77:91:30:ec:70:85:34:92:2e:19:
62:65:ef:8a:7d:8a:48:8f:45:8c:b6:dc:e0:0e:f1:fa:61:5b:
00:82:d1:6d:50:8c:38:11:26:11:9d:fc:9e:2e:13:9b:03:05:
ec:6e:32:5a:e7:e9:da:b3:ea:1e:ac:3a:66:ea:94:47:a4:d5:
6c:9e:1d:c3:d3:90:e2:5f:60:aa:8d:32:36:56:18:d1:86:7c:
1a:b3:80:80:4f:17:31:ba:8d:de:e0:68:75:b8:bd:07:f6:25:
9f:9a:f8:d1:ba:0a:09:ec:a0:91:13:fb:33:85:35:c7:28:af:
7f:be:59:98:77:fc:7c:97:57:fd:bb:2b:ee:43:e2:45:f6:dc:
e8:aa:44:bd:15:92:7a:26:3d:f5:d3:81:35:45:a0:38:1e:69:
cb:c0:96:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 02:41:27 2025 by rpki-client