Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363630313a3a2f34382d3438203d3e203136393039.roa
File: 326131343a373538343a363630313a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier: AJejTNPjlFUmrMoigY2ckMUZInudxtDXWU9cvadAQUs=
Subject key identifier: 9D:F2:F1:08:A3:B1:1E:03:A4:4D:22:6B:EF:10:22:76:D5:E3:1C:E4
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 11B3E838002A80F49EF6EBBA8182D110E1E45539
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363630313a3a2f34382d3438203d3e203136393039.roa
Signing time: Thu 29 May 2025 16:18:04 +0000
ROA not before: Thu 29 May 2025 16:13:04 +0000
ROA not after: Thu 28 May 2026 16:18:04 +0000
asID: 16909
IP address blocks: 2a14:7584:6601::/48 maxlen: 48
Validation: Failed, certificate revoked on Sat 31 May 2025 14:02:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
11:b3:e8:38:00:2a:80:f4:9e:f6:eb:ba:81:82:d1:10:e1:e4:55:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: May 29 16:13:04 2025 GMT
Not After : May 28 16:18:04 2026 GMT
Subject: CN=9DF2F108A3B11E03A44D226BEF102276D5E31CE4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:03:aa:97:fa:65:29:10:90:39:69:a1:d0:03:
11:db:29:02:54:af:c1:e4:a0:ba:6b:c6:a2:b3:99:
a6:f5:08:49:1e:c0:85:59:46:89:72:c0:4f:d7:0e:
fc:ca:59:37:1c:58:db:93:61:8c:1e:8c:59:c1:77:
90:78:a4:6a:d7:06:56:48:14:67:b2:7e:1c:6a:63:
ca:78:f1:65:9b:88:47:a4:ce:e3:ea:86:43:1a:f2:
57:25:03:bf:1a:40:f0:66:0f:d6:74:dc:74:fb:a0:
29:40:30:03:2b:29:6c:bb:1e:13:6f:7c:cf:a4:65:
49:d7:b6:56:1b:91:c7:ff:61:ee:4e:77:a2:93:d9:
82:85:8c:b1:f7:0e:56:24:aa:95:cf:0a:77:96:5c:
74:6d:7f:69:94:73:ae:a1:1c:0d:e5:8f:86:c8:a6:
d4:fe:2a:a4:1b:3d:14:d5:aa:e0:78:35:e8:7d:65:
fa:7e:f3:ba:30:a8:2c:ff:c1:2e:fc:f7:9d:be:a8:
e8:e1:86:6b:2b:37:3d:e1:d1:ea:9c:3c:fe:9b:57:
5f:58:56:55:0c:7b:7d:c6:0d:0c:53:62:5c:cc:18:
21:00:c6:0a:f4:f6:df:33:6f:7c:61:5f:22:41:ae:
65:d7:47:a6:cf:4e:f6:96:86:a6:68:d4:ab:37:31:
2b:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:F2:F1:08:A3:B1:1E:03:A4:4D:22:6B:EF:10:22:76:D5:E3:1C:E4
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363630313a3a2f34382d3438203d3e203136393039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:6601::/48
Signature Algorithm: sha256WithRSAEncryption
8a:ba:a7:89:35:07:cb:ac:de:c0:97:1d:2d:8e:be:0a:2f:66:
ec:8c:4e:64:04:ff:00:cd:16:19:7d:f8:10:8c:3d:d8:06:3d:
7c:84:12:5f:9c:34:46:ed:38:87:91:6c:11:02:81:70:b5:a5:
18:a7:7c:b8:fa:fe:dd:8e:11:65:59:11:fd:ed:f0:f2:9e:1c:
2a:9a:e6:e5:05:ca:e0:ea:05:0b:df:b6:d9:ed:b5:b5:8d:24:
f7:74:9c:e6:03:80:cd:dc:76:81:25:14:e0:2d:ae:60:a8:07:
36:e5:94:f1:ee:82:75:e9:58:23:c3:e6:ef:e7:7a:59:4a:aa:
5a:80:ae:ca:72:97:cc:82:53:a2:a3:48:c4:3f:22:39:a4:52:
e1:2c:06:25:f6:18:3f:ae:9c:c0:11:19:90:b9:f0:07:86:35:
40:84:ca:1c:24:55:7c:1a:63:71:5e:63:5f:cb:93:8a:33:a2:
14:1e:d1:e0:23:b6:8e:1a:df:17:90:e7:f2:14:1a:e3:1e:3a:
9a:08:5b:e8:20:2b:7f:16:02:f4:16:bb:a9:ca:94:12:26:1f:
74:a7:fa:92:21:31:91:dc:bc:65:6a:d9:d2:1a:53:0a:47:2c:
9a:19:c2:a0:f4:92:ea:29:69:17:02:13:30:ff:cd:aa:12:be:
2e:58:5b:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 04:58:19 2025 by rpki-client