Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363862363a3a2f34382d3438203d3e203136393039.roa
File: 326131343a373538343a363862363a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier: Ju+mkz7bRgv79o785nzcbenPQjjWhmTn0IWZBGSc+MM=
Subject key identifier: F9:5D:20:FA:A4:8A:E3:58:36:9C:69:F0:F6:9F:5E:51:BC:B1:FA:4A
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 06023A0D9D09BA791625ED1F7AECCD8C662B0BBF
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363862363a3a2f34382d3438203d3e203136393039.roa
Signing time: Sat 24 May 2025 18:12:02 +0000
ROA not before: Sat 24 May 2025 18:07:02 +0000
ROA not after: Sat 23 May 2026 18:12:02 +0000
asID: 16909
IP address blocks: 2a14:7584:68b6::/48 maxlen: 48
Validation: Failed, certificate revoked on Sun 25 May 2025 06:12:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
06:02:3a:0d:9d:09:ba:79:16:25:ed:1f:7a:ec:cd:8c:66:2b:0b:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: May 24 18:07:02 2025 GMT
Not After : May 23 18:12:02 2026 GMT
Subject: CN=F95D20FAA48AE358369C69F0F69F5E51BCB1FA4A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:7f:f6:f9:d1:72:39:50:f3:21:ee:d2:f5:ed:
78:49:2d:58:b9:27:c5:d7:57:ad:f1:3e:d6:2e:50:
ec:07:73:df:87:e0:95:14:c2:89:db:f3:a8:d6:4f:
29:c4:04:1d:76:77:3a:60:ce:cd:1f:f8:f8:00:b1:
fb:11:9c:39:7d:8d:c4:19:21:4c:a8:80:ba:52:53:
cc:06:ec:e5:dd:58:b2:4b:f7:05:37:45:c9:e4:d0:
45:3d:b0:68:db:ed:19:5f:57:b6:02:36:fc:e2:5a:
11:0a:51:17:8a:fb:e5:bc:21:cd:88:1f:98:89:31:
e8:92:6f:c2:e2:f7:22:49:9d:8e:69:fd:45:c4:68:
c8:7a:dc:3c:57:d9:f4:01:08:ee:9f:6a:00:2c:3a:
b2:2c:74:52:87:84:11:df:d7:0f:2f:89:e3:9b:5c:
69:3a:f3:32:c3:e4:df:06:9b:6c:ed:15:2c:49:2e:
ac:11:91:d1:5d:89:0b:45:aa:4e:8b:f3:91:ca:39:
d3:72:a4:3c:c0:eb:b2:40:99:d3:8e:12:28:b6:0a:
f8:a5:f3:de:29:f2:58:d0:bf:42:b2:d7:53:ae:5b:
98:b6:4d:ce:b2:0e:d1:55:04:5a:b0:28:ba:8d:48:
4e:24:86:99:8f:3e:07:c8:d5:34:13:98:d8:c8:9d:
ce:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:5D:20:FA:A4:8A:E3:58:36:9C:69:F0:F6:9F:5E:51:BC:B1:FA:4A
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363862363a3a2f34382d3438203d3e203136393039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:68b6::/48
Signature Algorithm: sha256WithRSAEncryption
8a:c0:06:4d:24:54:57:24:b1:fe:73:5e:a7:ea:3b:45:1c:61:
7f:08:8f:1f:46:6f:7e:19:fe:ca:49:f7:8a:64:f2:9d:f6:52:
6d:c9:92:7b:a1:09:f0:68:9f:03:d3:71:90:71:e4:0b:06:23:
5f:bc:76:13:b9:e7:d1:11:b2:75:10:51:32:e3:44:d1:7d:d8:
9e:47:8c:4a:8b:72:1c:8c:2f:78:62:44:88:e4:82:55:54:49:
18:38:bb:df:77:5e:32:09:07:84:68:a2:f3:25:5e:ad:5a:1c:
3e:14:de:ef:89:d4:3b:06:70:37:9f:45:b0:6b:ef:5f:76:d0:
9a:43:62:aa:b2:de:cd:62:17:b2:f4:26:5b:b6:85:9f:9a:b8:
be:67:b4:4b:77:90:a5:f6:e1:f7:ce:bd:d6:99:28:44:d8:c8:
ad:a1:1d:55:f2:46:eb:23:ac:ac:d9:26:0b:8d:72:b1:52:90:
85:6c:02:07:5f:8a:ee:50:9a:0b:5d:48:45:18:fc:14:e5:e5:
4b:d3:f1:40:d9:6f:4d:b7:dd:01:7c:73:fb:7e:e5:20:ae:e7:
95:50:f3:62:4a:de:2f:ea:9b:67:8d:40:66:08:6b:13:10:01:
8b:4d:c2:3a:b3:ec:6f:0e:71:d4:5c:e2:78:50:40:f5:e9:a3:
b6:04:42:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 04:57:49 2025 by rpki-client