Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a366232663a3a2f34382d3438203d3e203136393039.roa
File: 326131343a373538343a366232663a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier: +WOnXlLtiZoVwXR6C/GeCT68K1TS98wnSsdvyIqX340=
Subject key identifier: A0:90:81:8F:E3:96:BB:1E:83:EF:EA:13:78:0A:09:F8:85:C8:8E:9D
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 69C3E2C1397559F0EC119DC559229A8A3C238753
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a366232663a3a2f34382d3438203d3e203136393039.roa
Signing time: Sat 31 May 2025 13:57:38 +0000
ROA not before: Sat 31 May 2025 13:52:38 +0000
ROA not after: Sat 30 May 2026 13:57:38 +0000
asID: 16909
IP address blocks: 2a14:7584:6b2f::/48 maxlen: 48
Validation: Failed, certificate revoked on Sat 31 May 2025 17:16:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
69:c3:e2:c1:39:75:59:f0:ec:11:9d:c5:59:22:9a:8a:3c:23:87:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: May 31 13:52:38 2025 GMT
Not After : May 30 13:57:38 2026 GMT
Subject: CN=A090818FE396BB1E83EFEA13780A09F885C88E9D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:2b:f4:16:f1:66:a5:ba:1b:a8:c1:7d:26:21:
98:30:99:1d:5d:49:5e:61:ef:c8:5d:d0:38:89:cd:
3e:c8:5a:89:6e:75:59:eb:a7:e1:1c:e8:ab:54:4f:
f6:9a:31:b9:db:7e:be:2c:d1:aa:0a:2d:2b:d5:2e:
28:7d:d2:c6:f0:f7:6f:99:94:c7:8e:2e:18:31:87:
d6:b4:64:b3:fb:aa:6b:ed:01:de:31:e0:41:7c:90:
fc:eb:87:6b:ff:cb:aa:02:a9:bf:cc:45:56:f5:9e:
77:bf:c4:78:9f:20:e4:7a:a5:f0:44:7b:64:b8:c6:
74:ca:94:60:4c:0d:26:73:a4:13:8e:bd:c7:00:1c:
24:bb:0d:c2:c9:5c:48:5a:b0:87:fa:82:9e:b6:c6:
2d:46:1e:73:b7:c3:36:6e:5f:be:bc:0d:b5:56:08:
22:af:59:1c:42:70:31:18:ee:8d:5f:8a:e5:1a:6b:
32:5a:a4:04:1e:60:38:60:2c:90:fe:d1:71:3a:e8:
b7:13:ea:34:1c:6c:fe:c7:5d:b4:88:f6:6b:16:c2:
fa:f2:64:2f:c5:44:a9:f2:e9:ca:29:02:bc:cf:ab:
db:3c:6d:74:df:e3:6b:c2:ec:92:23:53:3b:5b:58:
ec:78:29:de:9a:5d:7a:6a:13:fe:89:b1:c9:32:c8:
30:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:90:81:8F:E3:96:BB:1E:83:EF:EA:13:78:0A:09:F8:85:C8:8E:9D
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a366232663a3a2f34382d3438203d3e203136393039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:6b2f::/48
Signature Algorithm: sha256WithRSAEncryption
57:39:b5:76:28:db:f8:e5:95:1e:94:9d:1c:bb:de:17:dc:76:
4e:af:60:51:ff:a1:15:5a:c1:c7:a6:a9:c2:be:ef:e2:0f:a2:
98:68:24:88:6a:2f:95:fa:8a:f7:62:fc:75:af:b5:3c:06:6e:
4d:7c:5f:c0:b2:47:d9:72:97:72:d9:7b:c5:d2:2f:f0:83:a5:
4c:48:87:30:f3:2d:0c:ae:9b:26:d6:27:7d:70:56:25:4e:7c:
1e:84:01:2c:03:e6:a7:29:e9:9d:8b:66:88:cc:96:f2:77:f0:
e5:d0:2f:29:f2:62:ed:8f:a1:bd:1b:3a:21:e5:01:07:f9:7b:
2c:88:7f:32:da:32:50:4c:55:a7:b8:55:57:f4:af:cf:34:8a:
ad:c3:6a:c0:4e:21:9e:1e:90:4b:c6:68:aa:6c:44:b0:6b:12:
63:f8:da:55:b7:a4:9b:4a:76:73:fa:02:1b:58:54:d2:78:f8:
6f:08:7c:cf:07:ab:50:5a:95:a9:b2:19:9e:97:b3:7d:9e:8a:
2b:9b:42:d7:2a:9a:f9:88:d4:22:ff:da:38:45:db:4b:b7:8e:
bb:25:f0:48:1d:37:cb:13:57:ab:a2:a0:20:50:d6:53:11:97:
ea:84:de:af:eb:9f:c6:55:a8:06:d7:50:02:67:7a:30:fb:93:
f1:b2:2b:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 07:19:21 2025 by rpki-client