Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363733383a3a2f34382d3438203d3e203136393039.roa
File: 326131343a373538343a363733383a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier: uqZwpJxw0ApBtFgdq1PNXu2q/AtOgoh3wSNVr1k+EOQ=
Subject key identifier: 8F:11:F1:F5:72:C6:A9:81:B4:85:A5:B1:29:E2:6F:C1:83:77:0A:A7
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 421B8A5439727D747BC789AD4AB87FD503F28780
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363733383a3a2f34382d3438203d3e203136393039.roa
Signing time: Fri 30 May 2025 17:54:01 +0000
ROA not before: Fri 30 May 2025 17:49:01 +0000
ROA not after: Fri 29 May 2026 17:54:01 +0000
asID: 16909
IP address blocks: 2a14:7584:6738::/48 maxlen: 48
Validation: Failed, certificate revoked on Sat 31 May 2025 17:16:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
42:1b:8a:54:39:72:7d:74:7b:c7:89:ad:4a:b8:7f:d5:03:f2:87:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: May 30 17:49:01 2025 GMT
Not After : May 29 17:54:01 2026 GMT
Subject: CN=8F11F1F572C6A981B485A5B129E26FC183770AA7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:74:64:01:50:1f:29:07:62:dd:36:b4:91:c3:
df:c6:98:a0:59:1b:a3:31:d5:62:99:31:1a:f6:41:
3c:50:8a:89:e0:7b:b5:b3:37:b0:e9:fb:33:6c:51:
c4:4f:83:48:58:07:6d:e1:b3:63:2b:5c:80:02:2e:
93:e7:c7:7d:e6:c3:4d:6a:9a:ae:fd:ea:ef:b7:6b:
6d:fe:19:c0:3a:c0:b4:1e:67:82:c9:67:cd:d1:5a:
f7:7b:45:9b:b5:df:29:2a:97:6a:3b:c7:2d:51:58:
a2:bf:87:e3:71:03:c1:50:94:b6:2b:2c:a7:83:16:
c0:e6:ba:91:27:d5:c6:48:71:9c:db:7a:71:37:e5:
cc:4b:17:29:c9:0d:5d:62:ed:28:5e:5e:cd:c4:f7:
58:ac:7e:50:cb:a5:8e:68:f4:01:92:13:b0:d3:fa:
d4:5c:b4:bc:e8:e2:5e:80:2e:ca:ef:40:46:b7:32:
7a:18:3a:55:7b:bb:a7:cd:67:a6:46:87:92:c1:6a:
56:d1:c6:6c:c0:e5:9a:bc:c4:d0:37:c8:bd:2e:cc:
e5:d3:e8:2c:5d:f0:65:a9:bb:ff:2b:58:08:06:38:
e3:99:f2:21:c6:56:59:26:e3:bf:de:07:97:88:88:
fe:ad:f4:63:9b:40:89:28:02:d3:d8:05:e7:80:a8:
cd:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:11:F1:F5:72:C6:A9:81:B4:85:A5:B1:29:E2:6F:C1:83:77:0A:A7
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363733383a3a2f34382d3438203d3e203136393039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:6738::/48
Signature Algorithm: sha256WithRSAEncryption
92:36:cb:49:aa:c2:0c:1e:00:90:6e:10:31:6d:83:24:4e:a8:
43:a3:30:af:95:20:bd:f4:26:3d:8f:8a:42:50:14:41:7c:fc:
9e:d5:43:e2:64:99:36:6e:e8:9e:80:58:86:b4:55:b4:d3:6b:
00:c1:61:4c:e3:02:8c:dd:2f:83:99:d9:ed:4d:4c:88:c9:4c:
2c:42:a8:09:97:f3:55:03:ff:71:7f:24:42:76:56:c4:f3:1a:
cf:dd:78:08:1b:96:70:d1:40:14:e6:39:77:2f:2a:2d:aa:ed:
0e:67:43:13:84:cb:3c:55:5f:85:f1:26:33:70:cb:d9:e6:e7:
0c:f2:ce:af:f8:68:ea:02:32:90:33:33:6c:4b:9f:18:df:df:
ab:0b:8c:77:88:86:cd:21:82:47:2d:fd:c8:20:43:bf:24:a4:
1c:45:d2:56:27:c0:3f:f4:0f:78:7c:37:73:3d:10:9b:e9:c8:
b7:c8:d6:d9:b3:a9:28:e0:96:52:1f:fb:a5:d6:8e:5c:19:44:
e4:2a:8e:c6:7c:1b:a0:db:40:92:27:05:89:3f:aa:a0:af:8b:
40:9c:47:43:5b:d2:a9:85:c9:02:9e:ba:90:22:75:39:3f:47:
b4:59:28:1b:7f:2f:e4:89:9b:25:88:8f:7b:07:1b:cd:77:a9:
4f:75:09:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 06:02:26 2025 by rpki-client