Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363862383a3a2f34382d3438203d3e203136393039.roa
File: 326131343a373538343a363862383a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier: T7TPHcp2tV3uqiXOlo7Yv7PaKFCstqDPU1qbT55JJZ0=
Subject key identifier: FA:92:50:78:4F:E3:18:9B:F6:CF:A8:10:78:02:D6:36:E6:DE:F9:58
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 23EE16FDD9D1409E38987C281BDD834FA1486218
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363862383a3a2f34382d3438203d3e203136393039.roa
Signing time: Fri 30 May 2025 22:06:01 +0000
ROA not before: Fri 30 May 2025 22:01:01 +0000
ROA not after: Fri 29 May 2026 22:06:01 +0000
asID: 16909
IP address blocks: 2a14:7584:68b8::/48 maxlen: 48
Validation: Failed, certificate revoked on Sat 31 May 2025 17:16:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
23:ee:16:fd:d9:d1:40:9e:38:98:7c:28:1b:dd:83:4f:a1:48:62:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: May 30 22:01:01 2025 GMT
Not After : May 29 22:06:01 2026 GMT
Subject: CN=FA9250784FE3189BF6CFA8107802D636E6DEF958
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:6d:06:9e:f3:ef:ee:2d:0f:b2:49:89:85:dc:
a6:24:42:19:da:92:65:16:61:34:64:17:4c:c3:00:
e7:97:04:b7:82:ec:9d:46:3d:42:49:29:cc:1e:24:
35:89:df:89:73:91:b5:5e:b1:0a:d8:f7:4f:8d:a2:
d7:9c:fe:21:d2:69:59:99:2c:11:fd:a4:71:ef:0a:
2a:ef:02:7a:c0:f7:c2:e4:42:de:76:d5:6d:e8:9c:
87:37:a4:86:40:a0:b3:e1:b0:9c:e6:3b:be:0e:10:
7d:a8:b4:c6:34:1c:38:97:30:e6:f6:a5:bc:54:94:
bb:c7:04:81:ef:bf:df:21:f9:b0:a8:97:b6:6c:0c:
2e:05:54:69:41:7c:25:96:f5:56:fb:2c:8b:61:f6:
51:ad:d1:36:e6:81:c6:16:70:d5:53:09:39:ef:a9:
a1:de:3e:6f:03:f3:f5:37:ed:97:49:f6:5c:69:f5:
a5:1b:b4:75:82:79:54:a0:1d:58:80:4b:bf:40:0a:
74:12:a1:17:20:8e:2d:94:8e:45:fe:f7:9f:2d:81:
ef:9c:a2:1f:ca:6b:67:61:b5:ae:46:9d:0e:83:82:
ad:42:37:89:dd:11:50:b9:c7:b7:93:62:d1:a5:12:
b2:8c:d5:e1:59:a7:a6:fc:20:c6:d4:7c:3c:75:b9:
41:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:92:50:78:4F:E3:18:9B:F6:CF:A8:10:78:02:D6:36:E6:DE:F9:58
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363862383a3a2f34382d3438203d3e203136393039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:68b8::/48
Signature Algorithm: sha256WithRSAEncryption
38:8d:45:2a:dd:ab:eb:bb:1d:13:d9:a5:3c:af:fe:e9:d5:5d:
f0:51:89:8b:bf:31:ae:ed:e5:52:3e:ea:3d:85:38:dc:9b:68:
cb:bc:ee:63:6d:f9:80:74:3c:23:d9:92:06:41:4a:a9:7a:e9:
16:9a:46:d0:0d:69:ea:1f:70:00:7c:92:0a:24:83:13:20:a1:
0f:f6:30:d7:d4:6f:93:fb:2e:aa:66:5d:e4:50:80:2f:29:80:
0c:c4:ba:f0:cf:88:a0:33:37:43:f7:b4:ec:17:14:0a:75:0d:
4c:71:11:c4:45:08:3e:9c:6e:26:f5:c8:af:b0:e6:df:79:5f:
cc:57:76:a6:44:d5:6e:60:2f:d7:e6:7a:5f:88:7c:c8:f5:1a:
8f:aa:5e:ea:53:72:1c:59:33:48:a5:c2:8f:70:a9:81:35:94:
d5:fd:45:3f:2b:c7:1d:c2:86:9c:b2:43:c5:60:86:b1:01:10:
47:7d:7a:9b:3f:7e:89:54:1c:d9:97:1f:a2:c6:fc:d4:7e:86:
36:ba:28:58:25:7d:b1:1f:86:80:11:a8:c2:f2:a9:03:71:67:
1a:72:4a:7f:e4:d5:a4:72:74:c2:da:b6:ad:3a:8e:4a:f6:53:
83:cd:41:1a:97:55:ab:02:e5:ef:68:87:19:4a:68:55:78:ab:
a1:d3:c6:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 07:43:43 2025 by rpki-client