Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363665633a3a2f34382d3438203d3e203136393039.roa
File: 326131343a373538343a363665633a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier: 815yAmhbKqkDgu/+BPnkZW8FjhWbOrTNuN8UKkmxiZs=
Subject key identifier: CF:2A:0C:58:29:1A:5C:7E:8E:4C:52:E6:5A:10:E5:38:9D:F8:FF:C2
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 199CBB934B28EF0591821D40964FDBDFB62BB3E8
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363665633a3a2f34382d3438203d3e203136393039.roa
Signing time: Thu 29 May 2025 13:24:01 +0000
ROA not before: Thu 29 May 2025 13:19:01 +0000
ROA not after: Thu 28 May 2026 13:24:01 +0000
asID: 16909
IP address blocks: 2a14:7584:66ec::/48 maxlen: 48
Validation: Failed, certificate revoked on Sat 31 May 2025 17:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
19:9c:bb:93:4b:28:ef:05:91:82:1d:40:96:4f:db:df:b6:2b:b3:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: May 29 13:19:01 2025 GMT
Not After : May 28 13:24:01 2026 GMT
Subject: CN=CF2A0C58291A5C7E8E4C52E65A10E5389DF8FFC2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:e6:82:22:28:04:c6:00:0e:82:1d:21:3c:98:
08:dc:b9:4b:bd:ae:78:36:be:9d:af:73:73:29:dc:
22:57:fa:14:37:9a:17:da:d0:26:9b:7e:ee:7b:6a:
04:3c:5c:71:d2:6b:17:5b:a1:45:4b:6e:e0:0a:c0:
2d:2b:56:ce:e6:ec:7f:24:12:9b:b9:b5:72:92:9b:
8b:9e:d6:d2:6c:98:37:aa:21:e8:a3:89:51:d7:7b:
e4:8e:c3:f7:db:28:5c:d2:c4:a9:fb:1c:99:c9:f0:
12:80:b5:d1:21:06:f5:d0:1c:fb:48:20:78:3c:4a:
91:06:2f:4f:a3:c1:51:eb:b4:20:1b:66:51:60:c4:
a6:6f:5d:6a:88:cc:bd:af:8c:e4:26:e4:1c:b2:d2:
32:20:62:51:a7:5e:43:e9:18:cc:c9:de:71:b2:02:
e4:16:84:e2:0a:c9:53:56:c7:be:c6:73:1c:5a:89:
eb:6a:61:43:2e:ec:58:1e:86:2b:f4:d1:e5:71:a9:
54:7b:d4:9a:1c:86:0b:bc:28:83:4a:33:e4:61:60:
82:b7:dc:9f:e2:38:60:35:8a:1f:7f:32:7f:02:52:
77:4a:c1:e9:46:81:4c:0f:6e:0b:2a:f8:3b:f1:4d:
a4:7c:fd:11:b7:2d:c4:d4:9b:04:de:30:9e:23:22:
b8:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:2A:0C:58:29:1A:5C:7E:8E:4C:52:E6:5A:10:E5:38:9D:F8:FF:C2
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363665633a3a2f34382d3438203d3e203136393039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:66ec::/48
Signature Algorithm: sha256WithRSAEncryption
1a:6e:99:9d:c8:a2:13:d7:62:f3:3a:fc:0f:6b:6e:e9:64:1d:
9a:26:af:ad:26:56:fd:06:03:91:be:21:7c:ce:f6:47:9b:d9:
43:b7:60:e8:8d:00:fc:41:66:39:2a:99:fe:b7:a0:70:8e:42:
a7:62:7b:d2:1a:15:ea:f8:9d:e2:f6:e0:88:15:c7:5e:2b:a7:
67:7f:e2:b4:26:f6:44:37:4c:5b:1d:51:c4:6e:36:2a:89:ba:
c5:7d:6d:01:47:30:4c:b5:7c:d4:3d:73:e0:f3:d7:c3:bf:19:
42:17:92:fd:21:81:4b:3a:21:a7:e6:76:ae:27:92:15:3b:02:
55:49:70:23:f8:78:3f:e0:72:90:45:96:6f:39:6f:57:c4:a1:
f4:a6:3f:80:19:8a:eb:1d:ee:1b:04:16:72:c5:5a:b6:7d:c9:
c7:12:74:38:51:4b:d9:30:e1:04:0c:4f:a6:83:1c:3f:23:82:
1b:51:07:5c:c5:59:04:99:27:2a:02:f8:44:2d:4e:0b:ea:f2:
82:14:ff:0f:85:85:9a:df:44:f3:dd:53:64:c1:49:47:e3:69:
08:81:4e:a0:f1:82:5f:b4:41:ee:b2:fb:e3:c5:cf:b6:d9:1a:
84:aa:fe:bb:69:93:de:35:fd:56:cb:f0:6d:92:41:b5:c6:3f:
40:34:e3:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 06:01:35 2025 by rpki-client