Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a366135643a3a2f34382d3438203d3e203136393039.roa
File: 326131343a373538343a366135643a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier: Xw6hcCUfe/QF9iwxnmEtXJsG7xpo0FpR0KpyPe2NIGs=
Subject key identifier: 06:9C:49:22:7E:FC:AE:29:B5:E1:7E:BE:1A:08:A4:96:1D:2D:BA:9E
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 173AEB9E47ADAF01692C501040D1DABF3A985A32
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a366135643a3a2f34382d3438203d3e203136393039.roa
Signing time: Sat 31 May 2025 11:12:02 +0000
ROA not before: Sat 31 May 2025 11:07:02 +0000
ROA not after: Sat 30 May 2026 11:12:02 +0000
asID: 16909
IP address blocks: 2a14:7584:6a5d::/48 maxlen: 48
Validation: Failed, certificate revoked on Sat 31 May 2025 17:16:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
17:3a:eb:9e:47:ad:af:01:69:2c:50:10:40:d1:da:bf:3a:98:5a:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: May 31 11:07:02 2025 GMT
Not After : May 30 11:12:02 2026 GMT
Subject: CN=069C49227EFCAE29B5E17EBE1A08A4961D2DBA9E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:84:00:83:a7:8d:c6:66:07:d3:e7:c4:55:00:
6d:b2:ea:40:c1:72:5c:65:85:0a:68:12:ca:0a:1c:
fc:29:00:f6:93:ab:1a:31:ff:01:8a:d5:c6:85:8f:
cb:db:af:ed:48:e8:8e:fd:17:89:3c:1e:a2:dc:20:
74:e1:b0:ce:d8:16:13:ea:2a:cb:5a:67:6c:4b:80:
1f:b0:d6:e2:92:14:4b:3b:1b:5f:ca:49:4f:66:a9:
8f:bf:4a:04:97:6a:46:8c:80:bc:1f:f3:c1:e8:6d:
5f:ca:9c:f5:97:1a:84:3e:a3:c0:df:f0:1e:f0:03:
da:0d:9e:00:7a:5c:3d:d8:8a:10:fd:9f:2e:d1:88:
0d:cc:10:87:26:04:8b:45:a4:ff:2f:19:ea:25:68:
13:ba:58:34:83:b3:4e:91:c0:6f:2a:08:04:fb:e9:
05:cc:20:dd:a7:ea:72:52:02:cd:5d:23:01:87:7f:
d9:97:04:0e:17:01:37:f1:c4:e4:15:46:c8:be:93:
cb:77:65:26:6c:c1:01:e2:bb:b9:41:38:3a:b2:e8:
d9:06:f9:b3:52:a0:62:43:e7:76:2a:84:ed:ed:59:
6a:5e:f0:e1:7c:9c:59:64:5d:55:1b:e7:0e:48:1b:
8f:53:f4:15:5b:bc:5d:91:1a:82:9b:24:5c:c8:df:
2d:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:9C:49:22:7E:FC:AE:29:B5:E1:7E:BE:1A:08:A4:96:1D:2D:BA:9E
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a366135643a3a2f34382d3438203d3e203136393039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:6a5d::/48
Signature Algorithm: sha256WithRSAEncryption
ae:98:28:96:37:1a:f6:8a:84:c9:85:41:66:86:08:29:75:73:
df:9a:5a:b6:13:92:87:73:05:42:a6:53:22:9d:7e:f8:d5:6d:
c6:70:91:1a:6b:bf:d7:d5:c6:e0:6e:b9:ff:96:f2:6c:4a:55:
c0:d8:da:7c:2b:a6:e1:22:1e:40:3f:42:18:5d:65:34:39:7f:
70:3b:1f:c7:65:07:f4:2d:2d:43:cb:bf:d8:b8:5f:a4:22:b7:
6a:f4:30:23:1b:a8:0f:62:92:a8:d8:f5:9a:80:5e:a4:8d:85:
51:7a:8b:96:74:a6:f7:b8:64:7e:ad:7a:3b:45:51:e2:2b:3a:
59:b8:af:5c:ae:df:28:9f:40:22:2d:22:2a:b3:56:df:2f:c9:
48:fa:d7:af:49:34:8d:14:d1:fe:7a:3d:5a:20:38:67:c5:92:
8e:ab:0e:d6:56:89:13:8b:cd:4b:40:b8:c6:0d:c9:8f:67:6a:
97:14:c8:ea:02:e2:fd:a3:e5:0a:e0:15:0f:dd:18:6b:81:66:
16:56:da:77:ac:62:2d:3d:f7:f5:7c:cf:c0:68:cb:06:a4:b2:
a9:29:d5:1e:34:11:67:b9:69:21:08:51:7a:1f:b1:f3:e9:d6:
5a:41:41:49:8f:a1:34:06:cd:92:7e:57:a9:43:7d:16:c6:10:
5f:0f:42:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 09:15:27 2025 by rpki-client