Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363935653a3a2f34382d3438203d3e203136393039.roa
File: 326131343a373538343a363935653a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier: uayLAju0SYiL1f+5jsmirskRaUDow2RPAT0ozFcb1sI=
Subject key identifier: 70:2D:2C:9D:05:52:99:54:5E:D4:FC:DD:23:20:FC:22:87:9E:3D:2B
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 1610D23963F41289E48A2E69E4DFB7E02A1C5084
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363935653a3a2f34382d3438203d3e203136393039.roa
Signing time: Sat 24 May 2025 18:42:01 +0000
ROA not before: Sat 24 May 2025 18:37:01 +0000
ROA not after: Sat 23 May 2026 18:42:01 +0000
asID: 16909
IP address blocks: 2a14:7584:695e::/48 maxlen: 48
Validation: Failed, certificate revoked on Sun 25 May 2025 06:13:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
16:10:d2:39:63:f4:12:89:e4:8a:2e:69:e4:df:b7:e0:2a:1c:50:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: May 24 18:37:01 2025 GMT
Not After : May 23 18:42:01 2026 GMT
Subject: CN=702D2C9D055299545ED4FCDD2320FC22879E3D2B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:72:bc:df:12:cd:9f:42:fa:86:d6:5b:18:22:
cb:b3:62:93:df:44:94:a9:06:76:b7:5c:31:8d:e1:
e1:88:9e:e2:2b:95:09:ee:7d:a5:14:32:dc:bb:98:
f2:e3:6c:34:14:4d:48:a0:a3:99:8c:b7:dd:65:bd:
33:7f:cc:ad:7f:d0:21:ef:a6:7e:b9:5d:4d:93:ad:
22:fa:25:c9:31:3c:01:a2:f8:6c:28:6f:77:f2:9d:
49:16:d8:b1:df:e8:9c:db:76:5c:1f:cf:d3:86:a9:
7d:0a:d4:1e:7c:e7:73:14:e4:d6:97:96:23:40:3b:
41:b1:f1:65:f6:9b:d0:d8:0a:3e:f2:16:4c:78:37:
97:39:b2:ec:a0:b8:83:95:b5:c9:74:fd:02:1c:e2:
c6:a7:8b:d9:a7:1e:ed:4a:59:06:b6:8d:8f:1a:fb:
b4:cd:28:7e:fd:d2:b1:c7:8b:af:a1:8f:b3:8a:46:
28:de:19:ef:40:18:2b:05:b1:28:d1:29:3a:5b:51:
1a:ac:55:ab:5c:d6:3a:b5:a2:54:63:37:31:71:12:
6a:04:a0:3b:b2:93:70:5a:f0:e5:58:9a:f9:b2:74:
ed:c7:8e:9f:8c:bc:c0:7c:49:ca:97:1d:0f:73:e3:
71:bb:a0:20:d1:e2:31:55:5c:63:11:50:3d:ae:c0:
a2:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:2D:2C:9D:05:52:99:54:5E:D4:FC:DD:23:20:FC:22:87:9E:3D:2B
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363935653a3a2f34382d3438203d3e203136393039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:695e::/48
Signature Algorithm: sha256WithRSAEncryption
96:4a:1a:6d:1d:b9:4f:c8:e5:97:d7:80:8c:6e:ac:a2:c4:52:
7c:a1:5a:28:9c:62:c2:d4:43:a9:f2:e7:fa:6d:b6:8b:62:0d:
12:82:ec:43:1f:97:86:59:e1:12:07:0d:97:d1:fa:8d:1b:4b:
71:da:a0:52:ea:98:db:a8:13:2f:ae:14:ef:4b:f5:91:24:b1:
67:76:ee:7a:9c:a6:29:a3:22:96:75:07:90:9d:dd:6a:f7:7f:
97:49:7a:68:83:9a:54:db:e5:bb:8a:7d:4b:38:79:6c:39:07:
df:a9:64:0a:41:1c:48:bd:a0:f4:4e:c0:af:3e:01:18:f8:da:
00:b5:ed:3b:67:a1:71:97:97:ac:f6:c4:4e:a3:4c:a6:67:d7:
e6:1d:a1:93:5e:18:27:07:c0:80:a7:7e:1b:5a:ce:06:3b:70:
f1:04:98:74:24:7c:39:74:f2:2c:9e:f6:0e:e5:dc:ab:16:fd:
51:1d:1a:5f:3a:d1:4c:d6:ab:e6:b9:ee:e7:40:50:24:ff:ee:
bb:50:e6:67:26:2b:4a:99:56:51:f9:e0:7d:0c:4c:dc:b9:0e:
20:58:09:f7:70:30:da:56:d1:15:2f:52:19:41:da:05:33:b2:
6f:42:ae:fe:96:d3:cd:63:f9:7b:d9:1f:93:37:7e:30:8d:d6:
0f:99:51:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 06:03:47 2025 by rpki-client