Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363865633a3a2f34382d3438203d3e203136393039.roa
File: 326131343a373538343a363865633a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier: cG1W1g2RG0JOk6AE99AwPr7l4SVEIIpQ5CyjwtHDskI=
Subject key identifier: B0:BD:6D:63:F4:B3:7C:93:B4:2D:A5:36:F6:CA:11:8A:06:09:6A:3F
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 1223E36C63A77765126CE1B53011FBACE6A996AD
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363865633a3a2f34382d3438203d3e203136393039.roa
Signing time: Sun 25 May 2025 14:35:10 +0000
ROA not before: Sun 25 May 2025 14:30:10 +0000
ROA not after: Sun 24 May 2026 14:35:10 +0000
asID: 16909
IP address blocks: 2a14:7584:68ec::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 28 May 2025 15:12:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
12:23:e3:6c:63:a7:77:65:12:6c:e1:b5:30:11:fb:ac:e6:a9:96:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: May 25 14:30:10 2025 GMT
Not After : May 24 14:35:10 2026 GMT
Subject: CN=B0BD6D63F4B37C93B42DA536F6CA118A06096A3F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:f4:7d:d1:46:b0:20:24:e9:04:d3:46:d8:79:
d1:f3:ef:bb:c2:2b:17:3f:fc:c4:1d:ad:96:d6:42:
7e:06:0e:1b:7c:d1:3b:77:a7:67:e7:44:c2:45:9a:
56:5c:9a:4d:d0:24:01:13:88:3b:7b:e9:f8:ae:cc:
43:57:20:c6:dd:1b:69:7e:9a:cb:e1:ba:b5:56:d3:
02:1c:fd:e1:b6:c3:07:05:cb:b2:da:23:85:4d:a0:
84:95:90:b1:92:ba:fa:a5:86:26:59:cb:16:5a:02:
bd:bf:c0:60:2a:ee:77:10:8f:d5:2b:fb:2d:6a:6d:
df:05:92:76:bd:94:8f:e4:2b:3f:76:f8:27:18:ee:
15:ca:31:55:01:89:13:65:1f:41:35:2d:2c:eb:04:
d8:27:a8:97:01:ca:45:18:b8:31:75:a2:f5:04:6c:
ad:f6:df:87:c9:97:54:b1:7c:b9:74:39:20:cf:21:
2d:02:15:12:c8:ab:b0:f8:1e:a6:fb:92:7c:f0:a7:
21:8b:73:bd:75:41:08:33:6c:e5:18:42:20:03:ed:
7b:09:53:6b:59:e1:13:39:e9:d5:0a:90:52:02:fa:
89:ce:4e:b6:51:0a:57:28:97:52:be:c5:98:19:91:
fe:63:ef:8c:79:23:61:ab:ef:06:6a:94:06:ae:bc:
70:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:BD:6D:63:F4:B3:7C:93:B4:2D:A5:36:F6:CA:11:8A:06:09:6A:3F
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363865633a3a2f34382d3438203d3e203136393039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:68ec::/48
Signature Algorithm: sha256WithRSAEncryption
4c:b9:2d:b7:e8:de:db:50:71:64:14:fb:35:6c:bc:97:1b:3c:
83:c6:17:8f:3e:8c:6f:c6:76:84:19:02:b1:07:40:73:96:4e:
19:f4:50:a2:2c:c9:65:f8:90:3e:5b:53:69:6d:05:98:ae:87:
a3:9c:f4:f1:6b:fe:cc:c2:f7:5c:a6:0c:e4:93:ea:98:19:35:
ca:84:88:ca:09:b7:ee:0d:de:cc:c9:12:77:04:c4:e5:83:e0:
3d:e3:9a:e0:d9:70:79:b3:3d:90:23:d4:34:7d:f5:5b:1f:69:
81:24:c6:cb:fb:d5:86:69:e1:bc:03:97:d7:52:88:06:7e:63:
d5:ee:25:62:14:cc:ee:e2:c2:dd:c2:59:5a:75:12:aa:cb:be:
a4:4c:d5:d1:73:2c:83:02:be:8a:f1:25:40:b7:4b:ba:fc:ed:
33:6f:3b:4c:78:82:3a:bb:ea:ec:96:81:67:14:e7:6b:9f:61:
73:85:85:d5:54:f9:9d:d4:06:76:56:57:fe:68:82:72:a8:97:
0b:29:fa:1b:22:5a:4f:0a:86:54:34:69:59:ad:8e:eb:f5:77:
e4:db:1c:3a:93:02:ab:34:7f:22:33:cf:4f:54:b4:3d:e4:80:
d4:6d:d0:e3:35:6c:79:b1:de:a4:bf:b4:23:50:a6:60:93:c0:
d1:3f:93:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 09:20:01 2025 by rpki-client