Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a366166313a3a2f34382d3438203d3e203136393039.roa
File: 326131343a373538343a366166313a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier: TNqXuBJ0ZkqOGfMCIYTAa7dfQEitpayiWUz25uX2njc=
Subject key identifier: 56:E8:74:68:5D:30:29:E1:CF:56:6B:6A:2C:5E:4B:88:0D:17:37:FC
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 557CA03A730499A6C65B7D9B87ED5E639C4FEEF7
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a366166313a3a2f34382d3438203d3e203136393039.roa
Signing time: Sun 25 May 2025 06:18:02 +0000
ROA not before: Sun 25 May 2025 06:13:02 +0000
ROA not after: Sun 24 May 2026 06:18:02 +0000
asID: 16909
IP address blocks: 2a14:7584:6af1::/48 maxlen: 48
Validation: Failed, certificate revoked on Tue 27 May 2025 21:48:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
55:7c:a0:3a:73:04:99:a6:c6:5b:7d:9b:87:ed:5e:63:9c:4f:ee:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: May 25 06:13:02 2025 GMT
Not After : May 24 06:18:02 2026 GMT
Subject: CN=56E874685D3029E1CF566B6A2C5E4B880D1737FC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:a2:9b:90:cf:ac:d7:07:36:70:44:b6:dd:a0:
1e:60:bc:53:46:56:57:9e:6a:7d:cc:98:71:f1:da:
69:c9:dc:cc:ba:d5:3c:99:1d:28:0e:59:36:76:67:
b6:5d:b4:29:61:3a:81:21:ca:70:b0:96:09:27:12:
71:c9:d5:6b:c9:ff:c5:79:b5:5d:ba:d3:fa:46:be:
c1:23:c3:5f:41:d3:79:41:a8:64:a1:d9:c7:8a:af:
2b:d2:4e:f8:96:96:f1:32:d3:a1:81:60:d1:15:a2:
ee:5a:42:97:04:7e:c7:2d:dd:16:53:a6:72:a5:1f:
ce:e0:fb:22:65:dc:97:57:8e:27:eb:54:bc:47:f2:
b8:9b:78:4e:2a:d7:23:06:80:3e:2e:f2:e5:d2:1b:
91:08:a3:9f:7b:d7:2e:c6:6e:c8:5b:25:0d:89:5f:
69:58:8c:18:14:6b:d0:cc:aa:3d:c1:86:ed:81:88:
10:bf:39:62:3a:3b:37:b1:43:d2:ec:15:9a:1a:28:
5b:5c:8a:2d:dd:84:e2:64:6b:6c:9d:bd:7c:c6:33:
ef:a3:10:f3:07:9f:45:48:4d:90:ad:b8:ff:65:17:
8a:33:f2:a9:53:d7:7a:54:8c:6f:cf:18:b1:b7:5b:
29:ce:77:1c:23:50:e7:e0:8f:6f:f3:32:a6:f6:fd:
0a:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:E8:74:68:5D:30:29:E1:CF:56:6B:6A:2C:5E:4B:88:0D:17:37:FC
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a366166313a3a2f34382d3438203d3e203136393039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:6af1::/48
Signature Algorithm: sha256WithRSAEncryption
27:a8:1a:dc:d0:4e:c7:f3:18:95:48:bc:aa:cc:bb:b3:83:6c:
f6:78:e6:90:0c:f0:ec:ca:ea:05:d1:06:a4:fc:8e:93:ee:89:
29:a2:68:58:e4:fc:aa:67:1e:84:60:cc:b4:ea:9c:bc:09:2f:
d1:b0:e1:cc:e4:28:cb:98:95:fe:12:c2:7a:a7:42:44:f6:3e:
b4:07:4c:8e:38:0e:9a:97:c7:f1:e6:4d:c8:b3:fa:8c:72:ba:
8d:cd:f4:14:eb:fa:45:e6:45:c6:c0:95:3e:57:d3:b0:dc:09:
13:1d:60:a7:15:b0:a8:e2:70:44:4b:09:77:4c:42:bf:e7:95:
e7:92:5b:be:a9:79:07:a1:47:02:23:74:36:ca:7f:52:3a:f5:
2e:51:1a:b7:e2:43:cd:33:77:85:a3:73:a9:cf:6a:84:4b:ef:
ed:e5:8f:d1:47:40:ab:e5:b1:4e:4d:c0:7b:d7:35:77:e8:55:
55:06:36:b5:40:01:46:05:2a:9f:77:03:e4:b7:51:fa:72:8b:
54:ce:2d:37:bd:21:b8:d9:0f:76:63:f6:72:c9:d5:01:d6:bb:
04:da:5d:bc:49:fe:65:10:cd:b3:27:aa:07:3d:f3:5d:5a:d2:
6b:4f:a6:e4:2d:32:c1:91:55:0e:bc:56:89:d7:44:3b:bd:0a:
21:36:b1:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 23:17:44 2025 by rpki-client