Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a366137343a3a2f34382d3438203d3e203136393039.roa
File: 326131343a373538343a366137343a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier: 9mvjz5dRAgVwIWGx3rw/9EguoCJaSdmTdw/ehUu6GNs=
Subject key identifier: 79:DB:51:86:A0:6B:B4:2F:0C:58:FF:B0:A4:A6:20:7A:AE:77:EA:37
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 01DC374BB5627C2DCE241D562A899D7AD2C35376
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a366137343a3a2f34382d3438203d3e203136393039.roa
Signing time: Sun 25 May 2025 03:18:01 +0000
ROA not before: Sun 25 May 2025 03:13:01 +0000
ROA not after: Sun 24 May 2026 03:18:01 +0000
asID: 16909
IP address blocks: 2a14:7584:6a74::/48 maxlen: 48
Validation: Failed, certificate revoked on Sun 25 May 2025 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:dc:37:4b:b5:62:7c:2d:ce:24:1d:56:2a:89:9d:7a:d2:c3:53:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: May 25 03:13:01 2025 GMT
Not After : May 24 03:18:01 2026 GMT
Subject: CN=79DB5186A06BB42F0C58FFB0A4A6207AAE77EA37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:84:a2:c0:bc:29:be:36:b5:a5:5d:07:b8:c3:
dc:41:a7:69:81:06:52:64:a0:c2:23:97:b4:cf:ae:
2f:50:ff:42:a2:ad:ad:21:be:95:83:46:08:79:6f:
41:ec:2f:08:7c:34:19:54:19:29:b4:53:cc:6e:a4:
f4:14:99:f9:88:d8:c9:0c:6d:a5:70:c7:a1:d6:df:
ed:38:c0:59:e3:d9:39:eb:55:fc:b0:77:ca:07:31:
8b:b1:b6:87:c1:d5:66:af:8f:34:9d:f0:52:cd:73:
08:9a:e8:7b:76:3d:67:2b:b0:de:20:07:f4:01:36:
60:9f:66:21:6d:9a:60:d3:7e:d5:c9:14:a3:bc:0a:
d1:51:55:40:ca:26:1c:06:b7:43:4f:fb:54:8f:57:
64:68:2e:05:fe:75:a1:d5:d0:c7:88:e3:6d:65:b5:
00:81:8e:ee:58:93:0f:bf:fa:32:ae:29:4a:9b:d2:
d0:a7:f5:95:07:28:7a:39:c8:a3:b0:53:a1:d6:9b:
e0:4a:df:27:c5:4a:64:88:89:31:38:18:bb:4d:5f:
d2:b9:a8:67:28:a5:6b:87:11:da:7d:0b:d5:8b:5c:
6b:4e:08:2f:80:c4:50:f6:34:9f:02:32:7a:29:e5:
0a:1e:72:a3:85:ab:8d:c8:87:3e:b8:e8:23:75:dd:
32:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:DB:51:86:A0:6B:B4:2F:0C:58:FF:B0:A4:A6:20:7A:AE:77:EA:37
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a366137343a3a2f34382d3438203d3e203136393039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:6a74::/48
Signature Algorithm: sha256WithRSAEncryption
0d:87:d6:6c:77:81:e7:d3:c7:00:7e:47:8e:2d:3a:06:e3:bc:
99:f6:ee:47:f2:fa:b2:e5:0d:03:d7:a0:d4:29:ff:b3:05:73:
e9:01:1c:17:63:e3:58:7e:8a:60:fd:a2:90:0e:76:a7:19:5f:
f6:91:07:4b:6a:94:40:3f:36:ef:39:8f:77:a3:42:de:15:5a:
ef:ea:38:f7:96:98:d8:d1:b2:df:04:e0:c7:e6:12:f9:4c:35:
1b:ab:07:b3:24:47:16:0f:36:24:45:03:6a:73:51:f6:43:fb:
67:75:df:16:02:91:90:3e:2d:50:0a:87:9c:f7:10:30:09:d1:
0b:a3:c7:f2:18:c8:e5:7e:b5:2a:17:0a:f7:bd:58:5a:b2:f6:
10:1d:97:f1:58:48:c2:29:d8:be:9a:f3:e2:69:e3:11:59:b5:
5a:c3:1b:04:ac:1c:a4:65:92:c2:6e:f9:eb:a4:3b:56:b2:fc:
d4:00:45:55:47:7b:0a:44:bb:20:ac:4d:2f:d5:4c:a9:a2:dc:
81:4c:73:e3:67:92:8d:0f:21:1d:df:c0:db:e9:67:d8:6f:44:
5a:90:86:c8:16:92:e9:b0:a8:f4:3a:fd:45:e8:cd:3b:55:10:
db:eb:38:4f:d2:d6:f5:ca:6f:db:3d:6b:a5:dd:7b:dd:71:b6:
f5:4a:6a:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 06:14:37 2025 by rpki-client