Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363665313a3a2f34382d3438203d3e203136393039.roa
File: 326131343a373538343a363665313a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier: R85udTBoyrMaodf2/eY7LTIkQN6LLxfnj6bwubETc1U=
Subject key identifier: 17:72:E2:0B:82:16:2B:8C:E2:8E:65:36:95:6A:3D:58:01:ED:F7:D4
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 736FE09CB9DDAF3CF25F58A4955CDE7DA4BF1D8C
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363665313a3a2f34382d3438203d3e203136393039.roa
Signing time: Sat 24 May 2025 16:30:01 +0000
ROA not before: Sat 24 May 2025 16:25:01 +0000
ROA not after: Sat 23 May 2026 16:30:01 +0000
asID: 16909
IP address blocks: 2a14:7584:66e1::/48 maxlen: 48
Validation: Failed, certificate revoked on Sun 25 May 2025 13:50:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
73:6f:e0:9c:b9:dd:af:3c:f2:5f:58:a4:95:5c:de:7d:a4:bf:1d:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: May 24 16:25:01 2025 GMT
Not After : May 23 16:30:01 2026 GMT
Subject: CN=1772E20B82162B8CE28E6536956A3D5801EDF7D4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:df:77:dd:a4:1b:0d:7c:5b:82:54:30:3f:c0:
6a:22:fd:4f:a7:7b:69:ec:56:dd:e2:7a:69:88:06:
40:d0:a3:15:34:ab:d2:0e:5d:13:17:ea:f3:a0:26:
1f:c9:d9:57:e2:06:cb:3d:f3:b8:af:c0:b9:0d:66:
52:a5:19:c5:d5:df:7c:ec:25:32:fe:68:73:30:15:
61:4a:2c:d4:81:dc:49:14:17:6d:5f:00:df:87:81:
fc:51:ee:97:b8:2b:72:8d:5f:33:ec:aa:b2:81:c4:
ee:5f:4f:77:cb:46:b0:d1:cd:c9:b8:43:b3:12:23:
43:04:33:ee:6d:54:b5:cd:29:a7:60:77:88:0e:2d:
17:bd:e1:78:44:41:ea:c8:e5:63:27:24:dd:41:4f:
f2:12:3e:71:87:35:ad:f0:07:0e:dd:2d:16:b4:73:
9a:85:dd:55:97:5b:c8:16:af:67:82:12:0a:8e:47:
b9:50:3c:ab:d1:f7:2b:26:f2:a2:30:ad:e4:cf:3e:
2d:98:99:6f:d6:e4:af:84:b8:44:e2:d9:3c:a9:72:
e3:56:90:d3:11:c8:67:77:aa:dd:c4:f9:d5:ea:f4:
77:18:70:7d:0c:cd:ce:ff:a0:b5:ff:9e:a4:82:d2:
cb:f8:82:7d:7b:32:f2:56:eb:5b:48:b2:33:f5:ee:
f7:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:72:E2:0B:82:16:2B:8C:E2:8E:65:36:95:6A:3D:58:01:ED:F7:D4
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363665313a3a2f34382d3438203d3e203136393039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:66e1::/48
Signature Algorithm: sha256WithRSAEncryption
2c:8a:c2:93:a5:f6:1a:33:3a:3e:d2:12:aa:4c:35:31:09:f0:
ff:14:ed:34:ea:c2:71:95:67:bc:1c:d6:42:6d:aa:81:13:0f:
bb:9a:31:9c:74:12:b7:53:e4:75:24:ae:63:34:78:0f:7d:0a:
03:89:32:8b:90:ff:8f:f5:3c:95:b7:e8:ee:c3:8a:c2:72:34:
e9:25:3c:96:f1:b1:a7:2d:b7:59:e2:c1:8e:b0:73:ca:93:8f:
e5:e7:5b:05:53:38:ca:3e:77:0a:57:b7:66:23:53:f5:3c:8b:
56:f7:0d:4e:30:a9:04:32:ae:18:80:ea:df:d6:98:07:42:57:
8d:9f:1b:56:db:21:01:a2:0d:bd:46:77:dd:f5:2b:52:2a:9b:
5d:50:d9:63:8a:c6:ba:3a:d1:58:e3:42:a1:1b:c3:53:9e:12:
5d:0d:b4:25:6b:14:49:43:16:1c:fc:02:95:58:a8:bc:64:a7:
f5:f2:71:d6:64:21:7f:c0:cc:ad:b2:a9:4b:7a:e0:77:29:db:
79:17:7f:39:67:95:e9:6d:18:48:fd:f7:53:d1:bf:21:4f:e0:
d2:67:24:88:dd:14:ec:65:5b:05:5f:5c:ff:0a:c9:b7:c2:71:
82:c4:1c:d6:2c:8c:a8:f4:84:a5:e2:e5:66:8c:9a:ee:30:f2:
46:4a:1f:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 06:30:19 2025 by rpki-client