Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a366162363a3a2f34382d3438203d3e203136393039.roa
File: 326131343a373538343a366162363a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier: 62DgGI57p5Ul+KtXlRanvZSqPZZVjEe2jRhjdD5mQ7g=
Subject key identifier: 34:ED:24:68:07:BA:95:59:EB:A1:C0:AC:7B:86:13:6C:15:FC:D4:5F
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 67289F7ADEC4A720727ADE5D18C0593F7BB2C8F8
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a366162363a3a2f34382d3438203d3e203136393039.roa
Signing time: Wed 28 May 2025 21:00:01 +0000
ROA not before: Wed 28 May 2025 20:55:01 +0000
ROA not after: Wed 27 May 2026 21:00:01 +0000
asID: 16909
IP address blocks: 2a14:7584:6ab6::/48 maxlen: 48
Validation: Failed, certificate revoked on Sat 31 May 2025 17:16:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
67:28:9f:7a:de:c4:a7:20:72:7a:de:5d:18:c0:59:3f:7b:b2:c8:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: May 28 20:55:01 2025 GMT
Not After : May 27 21:00:01 2026 GMT
Subject: CN=34ED246807BA9559EBA1C0AC7B86136C15FCD45F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:04:17:83:a6:2f:5b:8c:95:14:88:12:69:d9:
5f:0f:c5:42:f9:d1:f8:41:30:d2:bf:56:dd:78:3f:
9c:ba:6c:0b:f3:23:ee:e3:22:ef:a7:33:90:60:58:
3b:56:43:4e:98:72:0f:48:9b:57:c4:62:e8:0c:ab:
ce:58:04:c7:a7:a8:a1:1d:ac:ee:8e:77:e3:c0:26:
79:a9:d5:17:05:e6:8e:10:ef:c9:75:95:7b:a9:88:
b0:2a:1d:15:e5:34:d3:ae:61:9e:92:2a:7f:98:08:
dd:66:25:85:01:9c:8e:75:6e:46:64:e7:bc:22:94:
c4:92:7b:11:fc:57:33:0a:81:63:20:dc:26:ff:60:
3b:8a:e0:ca:5a:14:ed:18:79:c3:25:52:1d:30:06:
58:f9:de:bf:81:94:9e:c3:5a:77:a4:40:66:8f:df:
2b:e4:bf:a1:fb:e0:df:7d:61:35:1d:21:99:de:78:
99:d9:98:65:0c:29:51:44:db:a8:c0:4e:97:a0:2d:
82:a2:9b:12:52:43:56:d8:2a:ac:fa:57:d3:3f:62:
87:9a:73:66:d9:08:61:0c:e4:f5:ac:6c:f6:d3:f8:
ef:8a:d6:72:f8:2d:63:72:69:61:6a:e9:d7:b7:cd:
ad:08:97:74:5b:bb:72:d6:c2:7b:3e:05:43:c5:75:
28:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:ED:24:68:07:BA:95:59:EB:A1:C0:AC:7B:86:13:6C:15:FC:D4:5F
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a366162363a3a2f34382d3438203d3e203136393039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:6ab6::/48
Signature Algorithm: sha256WithRSAEncryption
45:74:34:07:7c:89:f6:f0:a0:96:85:af:d2:26:8f:46:ea:b6:
05:00:67:03:1c:ca:4f:55:f2:2a:53:60:44:88:fc:40:04:e2:
b8:96:93:0d:71:d7:43:bb:1a:57:9b:ca:e7:0b:73:95:c1:fd:
72:20:ce:93:3b:1b:0e:3f:87:62:3a:df:22:bd:d0:75:8a:c2:
ef:b3:6e:d8:d7:c5:fb:23:01:75:a0:7b:e1:da:20:4c:54:9c:
d5:58:1d:8a:38:a0:fb:be:e4:c9:f3:bd:54:8d:55:b9:db:1c:
80:e1:4f:43:1e:fa:76:58:f3:73:84:9c:87:13:f0:dc:43:e1:
21:13:74:69:84:fa:02:0c:1f:f9:ec:4e:7d:e4:32:7a:e2:06:
9d:f0:de:fe:78:36:3f:b5:a3:25:d7:9d:97:54:d2:bb:5c:fc:
80:42:3a:15:37:7d:04:78:a2:52:58:11:e2:a2:b9:39:cb:88:
97:d1:22:04:1a:11:dd:91:d1:2e:9d:47:0e:73:63:77:5f:b6:
76:a4:59:c9:b1:9e:62:fd:a4:0b:d1:9b:1a:f5:6e:65:cf:db:
6f:38:17:7f:91:3d:a6:ae:a4:83:76:28:5e:a6:74:aa:05:a1:
61:f4:0f:a6:86:ac:e1:14:54:68:83:08:61:4a:8b:fc:3a:d2:
fa:3a:e1:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 07:16:00 2025 by rpki-client