Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363731353a3a2f34382d3438203d3e203136393039.roa
File: 326131343a373538343a363731353a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier: 6H0C0CyiSH9495IuutBo47wU+J3bPLN0Apz85J0EoFY=
Subject key identifier: A1:71:88:92:C9:A0:27:9A:82:9A:DE:19:93:37:BC:15:98:30:8F:95
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 291DA529BF9AFF1176A47986CFA0EBC85BDAF712
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363731353a3a2f34382d3438203d3e203136393039.roa
Signing time: Sun 25 May 2025 03:06:02 +0000
ROA not before: Sun 25 May 2025 03:01:02 +0000
ROA not after: Sun 24 May 2026 03:06:02 +0000
asID: 16909
IP address blocks: 2a14:7584:6715::/48 maxlen: 48
Validation: Failed, certificate revoked on Fri 30 May 2025 03:28:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
29:1d:a5:29:bf:9a:ff:11:76:a4:79:86:cf:a0:eb:c8:5b:da:f7:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: May 25 03:01:02 2025 GMT
Not After : May 24 03:06:02 2026 GMT
Subject: CN=A1718892C9A0279A829ADE199337BC1598308F95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:bc:a8:b6:75:26:5f:e6:8a:73:10:35:f6:9f:
92:e2:50:f5:47:c9:9d:14:9b:76:53:e3:b0:6d:02:
44:2b:71:22:5a:75:e3:cd:59:a8:0c:9f:69:d8:93:
11:c1:cb:8f:67:1a:1b:6f:c9:ab:bc:7d:d4:cd:71:
05:d8:30:0d:a2:b3:cf:c3:77:77:98:30:ad:90:57:
63:0c:4c:8c:f2:ba:7c:16:33:8d:82:30:eb:73:94:
7a:54:81:56:bd:b3:04:58:5a:e2:42:46:27:81:fd:
eb:6b:52:fc:a8:ac:37:37:97:f1:46:3c:47:e0:b9:
3e:98:60:bc:75:ef:31:af:5a:d5:73:27:a1:e1:94:
cd:f1:e3:e8:31:07:5c:59:38:19:0f:24:0b:8c:de:
17:c8:49:65:dd:5b:66:4c:86:dc:78:dd:5b:8d:b6:
70:42:74:a4:4d:1f:f1:08:03:e4:43:9f:92:9b:26:
ec:06:53:d3:ce:34:90:f0:65:d4:fa:dd:bb:d8:28:
1b:69:08:c7:6f:86:22:82:d8:5f:3b:8f:03:21:3f:
23:99:c1:db:83:51:be:77:aa:65:58:e6:eb:9c:84:
19:8f:32:08:4d:d1:51:33:4c:7b:fa:d4:cf:94:5f:
2c:2d:91:1a:11:56:48:b2:1b:28:1f:41:23:61:08:
c6:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:71:88:92:C9:A0:27:9A:82:9A:DE:19:93:37:BC:15:98:30:8F:95
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363731353a3a2f34382d3438203d3e203136393039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:6715::/48
Signature Algorithm: sha256WithRSAEncryption
79:c9:f9:58:6e:7d:16:1e:c9:38:96:88:e4:04:f8:94:56:f8:
83:b2:95:06:f3:b1:8e:de:c3:f0:6e:6c:6e:e9:57:ee:21:d7:
11:fd:07:94:fc:5e:c2:b3:43:06:1a:2c:a3:69:ea:7d:87:e8:
5d:72:6d:3d:c0:d9:b0:a9:78:3a:84:c9:d8:e3:1b:81:d2:fc:
2e:10:14:c3:63:0d:2f:a9:69:89:4a:88:b7:46:80:92:e1:fb:
49:55:6d:1c:9f:9f:ba:d5:db:6f:ea:23:b6:cc:d9:02:02:b7:
71:1d:66:f6:4b:97:d1:a9:3c:ec:41:65:81:2e:28:5d:f2:d7:
a2:40:f0:bd:37:c5:6e:4d:bc:12:3c:11:23:ff:9a:34:66:09:
63:df:a3:fa:88:5c:98:7a:89:d3:5f:ad:48:ac:8b:3b:68:07:
ca:17:3a:16:77:ad:b6:49:ad:63:1e:e5:02:4b:09:05:72:21:
4b:4f:ae:04:9b:7b:13:ca:5f:b4:f0:6f:01:87:df:d2:5c:e2:
27:c0:cd:70:be:0e:14:f5:f0:6d:85:c1:ca:df:9c:ea:cd:39:
93:d9:e1:27:17:c5:11:d0:f5:f7:7e:17:d5:71:e1:e6:49:49:
9e:dd:30:0f:3a:71:59:da:d5:55:fa:31:df:e2:25:a8:da:1d:
dd:48:a4:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 06:33:22 2025 by rpki-client