Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363863643a3a2f34382d3438203d3e203136393039.roa
File: 326131343a373538343a363863643a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier: nPJUu21HpqiX7iQX1mrR+xBwYEyr8FCPL6YCg3FOWBc=
Subject key identifier: A7:7F:8C:04:6C:52:29:56:9D:F0:FF:45:F9:B2:6D:65:4B:4C:FF:BC
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 67AC8C3438E009096F09115D7C2287A38B0FC216
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363863643a3a2f34382d3438203d3e203136393039.roa
Signing time: Wed 28 May 2025 21:00:01 +0000
ROA not before: Wed 28 May 2025 20:55:01 +0000
ROA not after: Wed 27 May 2026 21:00:01 +0000
asID: 16909
IP address blocks: 2a14:7584:68cd::/48 maxlen: 48
Validation: Failed, certificate revoked on Sat 31 May 2025 17:16:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
67:ac:8c:34:38:e0:09:09:6f:09:11:5d:7c:22:87:a3:8b:0f:c2:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: May 28 20:55:01 2025 GMT
Not After : May 27 21:00:01 2026 GMT
Subject: CN=A77F8C046C5229569DF0FF45F9B26D654B4CFFBC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:64:d9:65:21:b2:07:73:76:85:77:6f:d0:72:
62:48:71:5c:5d:f3:59:27:cc:e8:79:d1:38:12:be:
70:0f:c0:23:fe:d1:91:cb:37:80:3e:b1:cb:9a:18:
a9:d0:25:c9:c0:d9:d6:7a:3d:6b:81:56:4e:a3:17:
21:00:91:56:b8:74:b7:f9:23:7a:8b:65:37:9b:27:
03:c3:5e:6b:e8:70:d1:63:58:59:01:e9:ac:29:08:
5f:a9:07:c7:04:df:5e:5c:88:df:ac:2f:8d:c5:db:
13:0e:d6:37:db:6d:0f:81:22:ca:cd:ae:5b:23:d5:
d6:1c:32:12:eb:47:d3:7c:03:71:ab:c1:67:17:c5:
41:0e:09:ef:2b:6c:fb:e3:b0:29:fe:45:3a:60:1e:
0d:c1:90:41:a1:78:7b:5f:8c:fe:b7:85:51:26:76:
19:a7:32:97:d8:ef:5b:95:71:a3:52:cf:1a:65:27:
26:4e:d5:75:ee:d4:bb:ca:50:1f:4a:3e:e8:69:18:
75:13:ce:e7:3b:b6:ae:82:f7:aa:ec:ed:c5:7a:f8:
40:92:c6:3a:70:3b:0b:fd:27:b7:4c:c5:3f:b1:37:
9f:9b:af:9f:f3:e8:bc:04:5f:12:ea:06:05:91:df:
ba:65:21:46:54:3e:03:d7:75:1a:2a:05:ce:cb:2a:
9b:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:7F:8C:04:6C:52:29:56:9D:F0:FF:45:F9:B2:6D:65:4B:4C:FF:BC
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363863643a3a2f34382d3438203d3e203136393039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:68cd::/48
Signature Algorithm: sha256WithRSAEncryption
3c:a0:42:03:86:d0:0a:c7:1e:45:0b:08:de:eb:af:cf:b9:c3:
c6:56:f3:4e:cb:4d:ca:2f:d2:16:91:7e:8a:17:5a:e5:9c:d8:
e6:cc:82:8f:ac:4a:22:b4:9d:66:7c:99:29:ca:86:53:4a:7e:
6d:eb:14:de:93:37:6d:c0:db:8e:62:19:ba:a2:0b:48:17:ae:
0c:70:7e:69:60:9f:0e:e7:54:6d:07:eb:01:01:cd:cb:d8:98:
10:66:fe:81:92:35:0b:b5:23:dc:44:5f:71:6b:1a:cf:d6:fd:
71:20:c1:a5:e4:1e:45:f6:7f:44:00:f5:1c:c4:e0:f5:29:69:
ed:82:6a:31:0f:8d:f0:92:02:05:99:bb:7a:0e:9a:40:ac:f8:
65:15:04:4b:21:e9:42:68:01:46:d8:21:44:ae:97:32:2c:4f:
10:92:08:29:0b:20:13:1f:b2:a8:1f:36:31:62:e8:05:89:1b:
1b:6c:d3:a6:75:68:7a:52:f4:c6:6e:44:7a:4f:73:d7:2f:56:
2d:9e:3b:a2:0f:2e:98:ad:4d:63:5d:34:cd:bc:53:41:a0:72:
d4:b0:b5:92:fa:24:0d:87:ac:4d:37:f0:c4:3f:63:89:78:82:
c4:7e:dd:61:23:9b:cd:26:bf:bc:ea:10:36:cc:5f:a0:71:07:
0d:43:21:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 01:11:45 2025 by rpki-client