Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363566633a3a2f34382d3438203d3e203136393039.roa
File: 326131343a373538343a363566633a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier: kpuc7ER7Bk1zSBcmTieDCOO6/05AP0epdhKIqEGOZ6g=
Subject key identifier: 33:38:46:44:83:91:7E:05:AC:B8:8D:0F:DB:B1:07:3C:E1:AF:77:19
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 67C414293F134D988FC1CABB37D7F55F8CD5BB12
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363566633a3a2f34382d3438203d3e203136393039.roa
Signing time: Sat 31 May 2025 14:13:45 +0000
ROA not before: Sat 31 May 2025 14:08:45 +0000
ROA not after: Sat 30 May 2026 14:13:45 +0000
asID: 16909
IP address blocks: 2a14:7584:65fc::/48 maxlen: 48
Validation: Failed, certificate revoked on Sat 31 May 2025 17:16:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
67:c4:14:29:3f:13:4d:98:8f:c1:ca:bb:37:d7:f5:5f:8c:d5:bb:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: May 31 14:08:45 2025 GMT
Not After : May 30 14:13:45 2026 GMT
Subject: CN=3338464483917E05ACB88D0FDBB1073CE1AF7719
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:f5:9f:41:a9:fe:ef:de:19:a0:7d:74:f8:4a:
50:ad:50:0c:6e:fa:a2:d2:4c:8f:6c:3f:c5:72:1d:
53:91:81:0e:1d:17:67:ce:a4:1b:4e:61:a9:73:7a:
c7:11:c2:be:58:cc:76:98:d1:d1:3d:a1:b2:c9:6c:
4c:27:1c:2b:a1:b9:c1:1a:04:b2:2c:83:14:a6:f7:
5e:8b:3e:8d:fe:24:6e:de:63:70:33:3a:93:d2:e3:
92:4a:9e:bd:85:50:49:a9:f9:37:f3:41:be:0b:ca:
89:07:0e:80:12:5a:ed:b2:4e:eb:9f:c3:77:48:93:
88:11:23:5c:e8:86:41:a3:5f:dc:47:0e:ea:1c:79:
e7:f8:ee:73:40:2b:2c:49:69:34:d8:42:79:78:52:
bc:2b:3f:f0:b4:fa:a5:60:7e:39:9f:fc:c0:c8:5a:
e0:02:0c:b4:7f:66:3d:c3:52:d9:f6:27:60:45:f0:
b3:5f:8c:ec:c2:f1:cc:ad:05:b4:2b:1c:74:f7:f8:
c4:90:b9:a7:e8:11:09:31:c8:c5:47:d8:d8:3d:6d:
05:d1:f9:45:be:5f:e3:59:8e:13:cd:f7:1c:be:b3:
9b:86:0d:7a:67:b3:3d:6b:6e:3c:45:52:28:69:ed:
06:79:db:dd:1f:17:5b:7a:3a:75:9b:b0:5f:0e:d0:
95:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:38:46:44:83:91:7E:05:AC:B8:8D:0F:DB:B1:07:3C:E1:AF:77:19
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363566633a3a2f34382d3438203d3e203136393039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:65fc::/48
Signature Algorithm: sha256WithRSAEncryption
2f:7a:51:18:71:6e:e7:e8:f2:98:de:ea:9a:97:50:e5:e7:da:
a2:5f:4d:ef:2b:20:af:b4:29:e4:b7:80:58:f7:ab:98:81:4f:
16:0e:26:57:1c:aa:0f:45:41:c8:7e:7e:c5:dd:82:43:2a:61:
3b:9d:41:c0:0e:03:78:eb:a5:17:d9:7e:ef:fa:c4:ae:db:c7:
09:78:86:2c:0f:8f:8e:06:52:a3:bc:0f:25:7b:a7:d4:90:d0:
14:eb:aa:6b:69:2e:eb:10:b7:5f:ee:5c:5d:ff:e5:8b:02:49:
fe:1b:51:cd:73:52:23:13:6e:2a:55:1d:e0:11:0e:d7:ac:ac:
54:f5:54:b5:f4:b0:b5:6c:2d:4f:bc:66:b6:10:91:e0:8e:3c:
d8:95:93:b5:59:d3:1f:b1:16:fd:7a:dc:73:d3:1f:49:8d:0a:
dc:b9:52:4d:7c:dd:d9:d6:51:03:54:30:90:73:fa:b8:8c:e5:
b3:12:5b:12:b8:13:12:cd:80:fc:25:7d:26:8b:49:43:1f:b1:
66:51:19:db:bf:63:3a:3b:b9:b5:34:5e:1b:c4:bd:24:df:86:
f7:0f:c8:37:4f:d1:0b:08:71:f9:bd:0a:26:1f:9e:99:29:2c:
f2:35:83:ab:c2:91:8b:1d:bc:28:58:1c:d8:00:16:ab:e0:82:
fa:c1:97:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 01:17:10 2025 by rpki-client