Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363739313a3a2f34382d3438203d3e203136393039.roa
File: 326131343a373538343a363739313a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier: KFNEykm0hw/+bV1fJ176r62lPQHepd3yZUdxXkg0iO0=
Subject key identifier: C0:C4:2A:60:C3:C0:37:94:09:4F:7D:34:39:D8:6E:8A:5D:B0:27:FA
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 7DE3622F35474AB1864A049C94B7A16733FC7FDB
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363739313a3a2f34382d3438203d3e203136393039.roa
Signing time: Sat 24 May 2025 17:00:02 +0000
ROA not before: Sat 24 May 2025 16:55:02 +0000
ROA not after: Sat 23 May 2026 17:00:02 +0000
asID: 16909
IP address blocks: 2a14:7584:6791::/48 maxlen: 48
Validation: Failed, certificate revoked on Sun 25 May 2025 03:06:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7d:e3:62:2f:35:47:4a:b1:86:4a:04:9c:94:b7:a1:67:33:fc:7f:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: May 24 16:55:02 2025 GMT
Not After : May 23 17:00:02 2026 GMT
Subject: CN=C0C42A60C3C03794094F7D3439D86E8A5DB027FA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:87:e6:bb:63:3f:fc:87:c1:1e:bc:24:91:6d:
5d:38:2b:df:83:55:5e:2d:d6:22:43:e3:95:a3:f2:
cc:c0:c9:5e:94:45:41:71:e1:60:d7:a5:95:66:2e:
c2:77:b1:d7:a2:29:25:e4:94:c8:05:d0:74:d8:0d:
48:2d:f7:34:9a:d9:12:de:0c:84:1b:a6:84:3b:67:
6a:ba:4c:a4:0d:c9:7b:3d:48:26:19:8d:70:ae:f5:
cb:39:10:2b:60:95:d2:16:29:5f:14:e5:e9:54:92:
da:83:f1:de:73:dd:54:59:8f:1f:0a:05:4b:3c:80:
e0:ba:17:9f:bc:07:62:bf:07:8d:04:ae:10:9d:7d:
a7:dd:e9:37:78:a2:84:2c:9b:4f:f0:be:5e:6a:43:
bd:46:85:7e:08:29:f1:b8:06:84:ef:2f:7d:c5:19:
ec:6e:ee:42:b3:81:6a:ee:b6:d6:72:54:49:83:44:
c7:40:27:ea:e1:c8:aa:9e:40:1c:e5:00:d2:3f:37:
ac:f7:c6:07:d9:64:70:ed:07:d5:34:6a:db:40:74:
ee:b9:85:f1:5e:67:c3:07:c3:a6:4d:9a:2c:3a:3a:
3e:b2:6b:84:83:be:be:63:4e:01:9d:8a:c4:f3:59:
65:a4:92:95:ae:eb:98:15:c1:41:f1:10:9c:92:3d:
cc:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:C4:2A:60:C3:C0:37:94:09:4F:7D:34:39:D8:6E:8A:5D:B0:27:FA
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363739313a3a2f34382d3438203d3e203136393039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:6791::/48
Signature Algorithm: sha256WithRSAEncryption
9f:66:35:75:2e:14:67:54:e0:89:b9:1a:21:ed:83:87:1e:77:
6e:c0:7c:12:5a:11:57:6f:b6:7a:66:a4:d3:10:3a:e2:2d:fa:
d1:ac:83:78:0a:47:df:34:98:12:d2:a1:44:89:f6:fb:00:57:
05:3e:0e:13:69:31:79:e7:d0:09:9e:db:d6:f3:31:66:e0:ef:
03:00:c6:6b:0f:e1:13:6a:05:f7:b9:5b:0a:ed:cb:8f:63:02:
ab:00:00:38:1e:05:eb:43:35:1d:a5:4f:83:59:b5:05:55:17:
d5:00:38:33:49:42:46:30:d9:57:6b:2d:27:31:80:32:ae:52:
de:28:af:22:d9:e0:35:af:0a:94:81:ca:05:32:9e:80:9d:80:
5a:85:cf:8a:a7:74:c8:8d:8e:38:bd:a0:d4:36:2f:94:c8:bb:
74:0e:f6:41:71:13:1b:81:5c:74:37:b3:45:56:e7:3b:e8:a2:
73:6f:d2:b8:6f:f4:da:5a:36:d4:55:a7:40:f9:3d:59:a7:bf:
6f:7a:c3:51:d8:77:3c:c2:b2:0d:47:f2:2a:05:98:33:b2:9f:
fd:3c:ad:1b:52:a3:70:8c:8d:41:59:c7:83:38:1d:5b:6a:04:
01:9c:66:7e:24:f5:be:08:22:43:79:4b:2e:bd:76:77:ea:0e:
a1:9e:43:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 06:15:07 2025 by rpki-client