Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a366230343a3a2f34382d3438203d3e203136393039.roa
File: 326131343a373538343a366230343a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier: lw83zjV7xjlk5+FjfVAtje6bIH1+RoKm3eVfMKQ2YIA=
Subject key identifier: D1:06:C6:7A:66:1B:BA:A2:A4:45:BA:10:E5:65:33:D8:40:1E:7B:44
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 5B668265EAEFA33459638D2A3266440A8C2B8499
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a366230343a3a2f34382d3438203d3e203136393039.roa
Signing time: Sun 25 May 2025 14:35:10 +0000
ROA not before: Sun 25 May 2025 14:30:10 +0000
ROA not after: Sun 24 May 2026 14:35:10 +0000
asID: 16909
IP address blocks: 2a14:7584:6b04::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 28 May 2025 15:18:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5b:66:82:65:ea:ef:a3:34:59:63:8d:2a:32:66:44:0a:8c:2b:84:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: May 25 14:30:10 2025 GMT
Not After : May 24 14:35:10 2026 GMT
Subject: CN=D106C67A661BBAA2A445BA10E56533D8401E7B44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:7b:26:30:92:48:5c:10:c6:d8:1b:51:b8:a6:
4f:b7:e6:3e:2d:73:3c:eb:91:25:24:7b:cb:ca:da:
ea:03:f9:ca:90:ff:c4:65:53:04:3a:f2:7a:20:7f:
1c:bb:52:9e:c5:03:cb:33:9b:8e:bd:41:88:0a:65:
0f:a6:2b:83:00:76:70:31:f9:09:35:d1:bd:a6:8f:
0b:b3:b1:3f:11:8c:07:68:67:96:54:60:90:b1:19:
eb:3f:3b:8e:57:d2:18:a3:67:14:51:63:9a:20:45:
c7:f7:b1:19:dc:ed:78:da:80:21:c8:e2:ff:29:a0:
4a:b6:68:31:1b:b6:8b:c4:5d:50:d1:97:a0:4e:00:
18:4e:1a:3e:2a:d5:5b:fc:0f:cb:fd:5b:65:2b:12:
cb:2b:4d:41:6c:ed:5d:f7:53:5d:c0:58:80:b3:9d:
cf:d6:a5:6a:fc:9f:ca:7f:a1:be:6f:8d:e0:fa:57:
a3:cf:c7:3b:34:57:ce:9a:a7:8f:39:53:ab:8e:ce:
c5:25:5e:6d:19:e9:bd:ba:49:5a:14:e8:1e:70:1e:
8f:01:b6:d6:aa:d0:e1:a6:40:5a:a5:f7:e1:21:6a:
82:3f:ac:61:10:6d:8c:62:3e:2c:7f:e4:52:36:83:
0d:71:2a:c2:71:9f:eb:37:96:72:a9:96:7c:ab:aa:
9e:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:06:C6:7A:66:1B:BA:A2:A4:45:BA:10:E5:65:33:D8:40:1E:7B:44
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a366230343a3a2f34382d3438203d3e203136393039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:6b04::/48
Signature Algorithm: sha256WithRSAEncryption
66:a6:ce:4f:d0:d1:5d:af:42:18:b1:c1:bc:7f:ec:c8:4d:66:
be:45:fd:80:e0:a5:cf:bd:82:6d:2f:c5:e1:75:7e:79:f7:bc:
19:e1:24:98:1b:b5:55:28:cf:ca:ec:f5:20:cc:c6:04:c4:be:
60:1b:2f:8b:8d:56:6f:c3:dc:f1:f0:a0:8a:9e:c9:08:0a:c4:
6c:59:28:9c:43:cb:70:e6:b4:df:55:80:c7:9c:3d:f3:24:59:
9a:6d:ed:dc:63:17:d6:60:08:84:38:9b:2a:78:38:dd:d0:c3:
df:0d:3d:45:69:c2:e4:06:51:f5:59:ff:c4:19:3c:5d:60:2b:
8e:6c:7f:f8:54:01:54:51:7f:fd:8f:cf:cc:28:fe:ff:93:72:
4b:0d:da:44:5d:2c:9b:57:c7:4f:9d:a6:51:9c:7b:4c:be:73:
af:d1:0d:7f:e2:f1:7b:cf:2b:96:bb:98:f3:aa:9b:a7:f8:e5:
6c:ca:e1:bd:88:f3:7e:7d:e4:1b:b8:38:20:d9:d4:c1:e9:0d:
24:a7:4b:3d:fd:28:71:c6:94:44:4c:7e:c9:a7:46:8c:7a:ca:
1c:59:7a:01:fa:d7:ac:d0:1a:27:8d:61:c5:42:34:49:b4:96:
f0:12:9a:40:2f:19:74:cf:7e:fc:d5:a1:ff:0e:1b:57:34:3b:
e2:09:d2:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 11:09:48 2025 by rpki-client