Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363737613a3a2f34382d3438203d3e203136393039.roa
File: 326131343a373538343a363737613a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier: xuxBfgqPUKnYpzk9CFDbVcf7VLRhcHBpxpO5ORitLrI=
Subject key identifier: 7D:B1:F5:12:88:F9:D6:0C:D5:40:47:DB:94:62:44:3B:67:A3:8A:61
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 042FC1A27F4D39A9CB63609B6EBD7B2B36B27E7F
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363737613a3a2f34382d3438203d3e203136393039.roa
Signing time: Sat 24 May 2025 06:12:01 +0000
ROA not before: Sat 24 May 2025 06:07:01 +0000
ROA not after: Sat 23 May 2026 06:12:01 +0000
asID: 16909
IP address blocks: 2a14:7584:677a::/48 maxlen: 48
Validation: Failed, certificate revoked on Sun 25 May 2025 05:18:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
04:2f:c1:a2:7f:4d:39:a9:cb:63:60:9b:6e:bd:7b:2b:36:b2:7e:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: May 24 06:07:01 2025 GMT
Not After : May 23 06:12:01 2026 GMT
Subject: CN=7DB1F51288F9D60CD54047DB9462443B67A38A61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:6e:72:c2:9e:5f:01:ad:5a:70:ab:bb:2f:68:
d4:ec:f7:0a:68:3c:77:92:0a:3a:a7:33:dc:40:1c:
09:da:37:35:98:7b:b6:fc:9c:b2:a6:a7:59:03:1b:
2e:b0:81:07:f3:3c:f2:9d:fa:b7:82:ab:00:9d:c6:
f3:c2:2f:cd:f8:12:b4:c3:70:2a:32:db:97:ad:98:
1c:21:07:3f:9f:56:bb:54:12:9c:05:ff:ab:7f:0a:
0b:21:30:9f:4b:38:5d:0c:5d:d0:42:84:70:a2:38:
d9:2d:0b:93:ce:12:43:cd:77:03:93:da:b8:1e:91:
74:65:1f:18:a3:a1:6a:0b:52:66:21:2e:c6:dc:f1:
cd:36:01:55:94:bd:c5:d8:c4:58:27:7e:3d:c2:ad:
ea:c7:d1:21:60:4b:bd:25:f6:22:91:6e:f9:f2:cd:
27:1a:f2:04:7d:fb:ad:01:de:29:4b:b8:df:f5:87:
ac:c6:d1:2e:57:dc:37:37:21:f6:75:0a:98:80:8d:
20:17:c9:9d:af:fa:1c:8b:a6:85:92:f6:8b:e6:80:
71:58:0e:8f:dd:83:61:3d:f6:b2:ce:0c:af:50:94:
87:72:ef:bb:96:a3:5f:fe:78:16:be:40:bd:09:71:
bc:e1:a6:1a:1f:0e:a2:bb:43:c9:05:1b:55:e8:bb:
11:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:B1:F5:12:88:F9:D6:0C:D5:40:47:DB:94:62:44:3B:67:A3:8A:61
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363737613a3a2f34382d3438203d3e203136393039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:677a::/48
Signature Algorithm: sha256WithRSAEncryption
56:28:13:65:fd:d0:bc:56:2c:14:5e:ee:58:d6:3e:e5:38:a3:
25:fb:3d:ad:1d:44:76:47:bb:8e:4f:a7:ea:ed:29:9b:bf:07:
f9:b3:d1:da:c6:c4:23:78:17:f8:36:d1:9a:62:5b:03:0f:bb:
3e:45:dc:37:2e:44:dd:aa:2f:dc:a1:10:12:5a:61:ff:e7:c9:
7a:4a:0e:97:a1:bf:f6:95:67:5b:0c:0a:65:97:87:ee:76:20:
79:a5:0b:38:b4:ff:78:eb:52:a8:a8:82:71:f3:59:f7:b2:25:
9d:ea:46:c1:00:a4:55:b9:75:58:7b:ff:1b:b6:14:45:64:cb:
bf:ab:d4:f8:85:55:f6:a7:74:7c:20:a4:a4:cc:5b:a8:2a:4b:
94:34:7c:0e:df:82:98:2d:a0:73:86:75:38:26:da:77:a6:41:
a0:dc:0d:c1:19:d1:df:72:a5:f4:9d:24:94:3f:0c:87:fb:27:
ff:80:5f:43:94:c9:3a:37:aa:55:d3:18:1a:d9:12:37:d7:76:
86:93:24:86:28:55:6a:f0:4f:3f:84:12:9a:62:2d:7f:12:ac:
a8:d4:2e:a4:d3:b7:28:19:10:f9:e7:28:b6:cb:2f:39:2d:72:
1f:a0:3d:54:d2:b9:b1:e4:7b:d3:e3:95:fa:6a:2a:df:8b:2c:
f0:1c:7c:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 01:25:37 2025 by rpki-client