Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363566373a3a2f34382d3438203d3e203136393039.roa
File: 326131343a373538343a363566373a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier: U5hIcDzgSKEZQwnmvv0gI6b3irjXv+izpW9vDX3JEGA=
Subject key identifier: D9:24:E1:08:34:F8:5D:C8:03:42:88:AD:A7:13:BF:26:08:C8:A1:E8
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 6ADC727300C4CE82F04AF7F819DC7889E72B43BD
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363566373a3a2f34382d3438203d3e203136393039.roa
Signing time: Sat 24 May 2025 17:10:16 +0000
ROA not before: Sat 24 May 2025 17:05:16 +0000
ROA not after: Sat 23 May 2026 17:10:16 +0000
asID: 16909
IP address blocks: 2a14:7584:65f7::/48 maxlen: 48
Validation: Failed, certificate revoked on Thu 29 May 2025 10:30:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6a:dc:72:73:00:c4:ce:82:f0:4a:f7:f8:19:dc:78:89:e7:2b:43:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: May 24 17:05:16 2025 GMT
Not After : May 23 17:10:16 2026 GMT
Subject: CN=D924E10834F85DC8034288ADA713BF2608C8A1E8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:63:e2:2e:20:c6:b7:d5:24:92:ba:69:75:f9:
32:0b:ce:7d:24:60:1d:c3:55:cc:e5:de:24:23:9c:
7d:7d:37:80:57:f4:e9:05:37:00:21:34:90:3e:79:
fa:4c:b6:c8:f9:3c:3e:3f:6d:15:a1:83:5d:19:9a:
50:31:57:b6:3c:25:b3:cf:53:a8:53:1c:2c:1a:53:
3c:90:03:ca:e9:7d:1e:91:7b:be:15:56:83:61:08:
11:f4:ce:0b:fb:17:6a:44:25:c1:3e:a8:7e:d6:7c:
ef:45:0c:b7:90:67:16:be:05:98:d2:70:45:41:a0:
49:6d:09:6c:de:e2:9f:38:94:a8:d4:1a:a8:34:9f:
18:08:ba:6f:f4:5d:b5:78:78:c0:cb:c9:91:7d:c1:
a4:a7:34:d9:62:69:1a:56:dd:b8:a9:5d:65:31:be:
b8:22:30:e9:0e:20:0c:c0:0f:3a:45:d1:17:ca:d4:
8d:7d:80:e0:49:9c:6b:ec:12:bd:c5:26:e4:96:e0:
3f:b6:c5:c9:7b:25:53:18:04:50:16:75:9e:99:ec:
4b:52:03:c6:e6:dc:59:7f:ef:c0:a3:e5:80:94:6a:
7b:70:bc:8a:0d:5f:44:01:35:9f:d2:01:21:41:97:
80:b3:52:17:7c:6f:f7:0b:47:b7:f9:e2:13:24:26:
8c:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:24:E1:08:34:F8:5D:C8:03:42:88:AD:A7:13:BF:26:08:C8:A1:E8
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363566373a3a2f34382d3438203d3e203136393039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:65f7::/48
Signature Algorithm: sha256WithRSAEncryption
3e:42:5e:4d:3f:8c:22:3e:1c:b9:72:be:6b:88:cb:da:6b:5f:
fd:0d:15:d4:97:3a:b4:29:8d:47:06:64:40:99:4f:58:b6:67:
2c:43:e5:fb:f2:8c:39:25:b0:2d:7d:29:ae:1f:2d:52:07:84:
75:7e:50:4a:16:b5:4f:f6:a7:cf:85:98:28:f9:46:ff:f9:06:
71:98:96:a6:b4:95:c6:73:fe:96:21:ca:01:ef:4b:84:9a:1c:
73:02:89:c5:2e:2f:00:1f:94:a3:c1:82:35:91:7f:3b:1c:95:
99:b4:82:8a:0e:76:6f:42:af:2c:20:3d:df:65:f6:71:35:dc:
9c:a9:22:35:b5:81:3a:cd:e4:22:4a:46:3d:90:b1:7b:2a:e9:
f1:d5:3f:1b:9b:1c:3b:00:b2:27:16:98:d6:05:ab:4c:f3:d1:
f5:d9:e5:20:d9:64:a7:78:21:ea:88:64:68:37:c0:d9:0c:57:
60:34:16:5b:2c:f9:7b:f5:23:c8:16:2f:9d:14:6e:d0:ad:e3:
7a:58:5a:38:18:81:ad:73:a7:85:75:19:34:4c:d0:6a:2b:3b:
8f:b7:e9:57:17:7d:47:26:49:8e:07:32:1d:56:05:3c:90:74:
0b:d7:7a:1a:d8:8a:1b:e0:98:1e:07:9d:64:4c:16:19:55:58:
d3:18:73:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 06:06:03 2025 by rpki-client