Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363735643a3a2f34382d3438203d3e203136393039.roa
File: 326131343a373538343a363735643a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier: o3jRg4IR+Fil5dLH3hd1GbPOwOhHz6cza8sSYJxhfK0=
Subject key identifier: 85:5F:86:B6:5E:24:9E:4B:CB:9C:A4:34:6B:9A:57:2A:3B:2F:2E:25
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 26E1DEA18B5979630ED0F31FC2F398EC7545C447
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363735643a3a2f34382d3438203d3e203136393039.roa
Signing time: Sun 25 May 2025 06:18:01 +0000
ROA not before: Sun 25 May 2025 06:13:01 +0000
ROA not after: Sun 24 May 2026 06:18:01 +0000
asID: 16909
IP address blocks: 2a14:7584:675d::/48 maxlen: 48
Validation: Failed, certificate revoked on Tue 27 May 2025 21:18:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
26:e1:de:a1:8b:59:79:63:0e:d0:f3:1f:c2:f3:98:ec:75:45:c4:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: May 25 06:13:01 2025 GMT
Not After : May 24 06:18:01 2026 GMT
Subject: CN=855F86B65E249E4BCB9CA4346B9A572A3B2F2E25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:bf:e5:26:21:e6:aa:79:1f:78:4d:86:4f:97:
0f:9e:aa:3e:eb:d1:dc:07:95:b1:af:eb:90:58:ed:
ae:9b:bf:61:ab:87:e0:37:c5:cb:b8:8d:02:b6:d7:
65:ef:ef:a2:34:34:d6:4a:2e:34:bb:65:f9:72:ad:
72:66:ac:26:5f:a0:71:c2:b6:11:43:79:2f:1d:ca:
00:06:97:eb:d5:e5:a1:f9:60:90:fa:8f:30:7c:80:
ed:8f:06:da:b8:c2:01:16:bc:c6:4a:7d:82:52:2b:
94:78:4b:1b:c0:b3:ce:52:53:fa:2e:69:80:1e:8f:
74:32:17:79:97:60:0a:b7:86:f7:ad:a3:86:fa:fa:
3a:ce:20:bb:fd:63:77:bf:56:f6:bc:99:22:ab:d0:
52:a3:48:a3:92:a8:42:74:84:25:d7:2e:5e:b6:d7:
df:7a:9a:05:6f:98:57:2a:86:37:31:d2:cf:93:03:
99:64:a1:f3:26:a2:06:95:50:6c:fa:ff:48:2e:93:
43:aa:c0:09:45:32:ff:6e:30:e2:f3:5c:c6:91:17:
d4:db:b2:30:15:d3:5a:ef:d4:8d:42:14:12:69:68:
40:84:4e:0e:c3:a6:0b:80:c7:d4:9b:8c:ea:af:16:
6c:27:f2:31:f7:1d:a9:06:34:03:db:72:c3:fb:c8:
12:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:5F:86:B6:5E:24:9E:4B:CB:9C:A4:34:6B:9A:57:2A:3B:2F:2E:25
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363735643a3a2f34382d3438203d3e203136393039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:675d::/48
Signature Algorithm: sha256WithRSAEncryption
12:f0:65:22:89:63:ef:df:c1:d0:94:10:29:98:86:03:ca:27:
d4:72:ad:90:14:82:f6:33:19:42:ea:43:d8:c6:a1:c3:61:6c:
37:e3:59:15:74:61:bb:c8:b9:df:2e:3d:9b:33:76:f7:f3:f0:
c2:b6:af:d5:a0:8a:52:09:76:5e:0c:73:15:18:b2:14:72:7e:
3d:b0:59:e2:9d:09:e0:01:f7:d6:14:34:b7:0d:52:dd:7c:2a:
0c:98:1e:35:36:c7:7b:90:52:22:19:76:00:fb:00:c0:48:60:
7a:cb:88:d3:8d:49:1b:ae:42:d0:28:9f:65:5c:15:fc:96:0d:
a0:63:b1:28:12:be:33:68:30:02:d0:ef:26:4f:ca:dc:9e:f0:
db:95:32:3d:9c:a8:58:9d:0a:b9:ad:44:d5:aa:1a:28:5d:ba:
ef:70:99:97:aa:fc:4f:56:08:22:73:12:92:22:be:90:cc:14:
6d:34:0e:41:0e:7d:79:70:01:da:3c:0d:bc:45:b5:e6:86:05:
2f:9d:79:c0:90:03:18:4e:44:a1:d3:64:b4:26:3b:9a:47:dc:
14:98:a4:3d:bc:91:20:ae:85:9b:50:d6:48:5e:1c:c0:85:be:
06:ea:d1:1a:a4:85:e1:35:ee:59:79:02:84:de:35:1f:5f:c6:
2e:27:5a:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 01:03:17 2025 by rpki-client