Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a366236643a3a2f34382d3438203d3e203136393039.roa
File: 326131343a373538343a366236643a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier: hYgSjqFQZL6ouGcVVZx84jtHWuyczBS9Pn9sBDkZuMY=
Subject key identifier: 03:11:1F:A5:04:6B:B9:ED:FC:6D:A4:91:6C:F5:AA:C6:DE:E2:BE:EB
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 7AEB95666E3C87BF2875C3C251380D92F167F3A1
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a366236643a3a2f34382d3438203d3e203136393039.roa
Signing time: Sat 31 May 2025 13:57:39 +0000
ROA not before: Sat 31 May 2025 13:52:39 +0000
ROA not after: Sat 30 May 2026 13:57:39 +0000
asID: 16909
IP address blocks: 2a14:7584:6b6d::/48 maxlen: 48
Validation: Failed, certificate revoked on Sat 31 May 2025 17:16:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7a:eb:95:66:6e:3c:87:bf:28:75:c3:c2:51:38:0d:92:f1:67:f3:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: May 31 13:52:39 2025 GMT
Not After : May 30 13:57:39 2026 GMT
Subject: CN=03111FA5046BB9EDFC6DA4916CF5AAC6DEE2BEEB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:1d:02:c9:85:55:04:8b:8e:d2:90:4f:c2:0c:
25:95:57:ac:e7:d4:dc:e4:73:d0:c1:79:ee:3e:86:
d5:89:ff:a9:56:94:bf:80:27:63:76:7e:e8:13:ff:
74:f3:7d:77:64:26:43:05:ee:bb:73:8c:88:78:01:
7e:5f:84:d3:39:55:32:f7:a1:a2:6a:2e:f4:64:50:
07:2f:37:e1:b8:ab:d9:13:8b:56:f1:1a:33:2d:38:
44:9f:b5:ae:43:c9:40:20:33:d9:17:ca:ab:fb:24:
79:28:e2:60:19:00:41:e1:2c:a2:de:37:2b:d2:4a:
fb:97:11:45:59:83:bc:f5:7c:ae:67:27:bb:ca:93:
03:e0:6c:9a:ad:69:87:c7:d6:82:eb:f2:81:bb:f9:
e7:4e:54:47:d2:91:32:7d:2b:c1:4b:f3:d3:0c:83:
b2:da:f6:5a:a7:3c:05:f6:eb:83:7c:14:e7:30:3c:
35:06:cb:45:bc:72:9a:8e:1b:22:05:59:e7:3d:68:
0b:bc:5f:4e:e6:f3:88:94:b7:43:60:c6:be:9c:79:
c5:30:ea:d3:cd:33:3d:4a:50:b6:b6:bd:80:b0:a8:
b3:52:94:61:67:62:f5:95:e9:c5:16:77:aa:a9:b1:
d5:f9:80:8f:b8:76:2f:5a:fb:eb:bf:1a:db:64:62:
1d:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:11:1F:A5:04:6B:B9:ED:FC:6D:A4:91:6C:F5:AA:C6:DE:E2:BE:EB
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a366236643a3a2f34382d3438203d3e203136393039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:6b6d::/48
Signature Algorithm: sha256WithRSAEncryption
82:ad:03:01:91:b8:9e:21:8f:b9:18:f4:af:a2:3e:3a:be:21:
bd:de:ef:af:aa:03:68:6a:c0:60:ec:14:8a:6f:e0:a1:30:c2:
23:4b:fe:cc:a9:20:c7:62:b1:08:bb:67:7d:36:44:95:80:c3:
c2:79:00:53:aa:fd:5b:5b:1f:e3:ee:80:02:7d:9a:1d:35:71:
37:39:6f:a8:1e:b6:b7:f1:06:ac:64:40:ca:07:5b:c6:13:be:
43:a5:41:6b:c1:52:6c:39:f1:c8:11:3c:cb:e7:df:0b:08:c4:
9a:bb:4b:03:80:33:65:3c:e0:a5:0c:eb:f3:f5:e6:76:f7:e0:
ec:0e:15:50:4e:67:1a:58:96:c4:33:d8:b8:e3:f8:7f:1b:01:
95:ff:c5:74:e4:aa:76:0f:5c:78:d7:1f:d3:90:0c:ec:27:a5:
e2:71:b4:a0:d2:1e:2e:17:f7:fc:81:27:38:33:3a:18:9f:27:
7a:db:c8:33:b4:67:77:4e:2d:1d:b9:78:fe:c3:c1:5f:f6:82:
00:81:ed:5a:55:79:2b:5b:ed:47:44:e3:ef:81:82:9b:d9:64:
68:df:3f:30:89:ab:a9:d6:f4:5d:f2:ed:0f:1f:ee:60:6d:f5:
72:aa:0d:e4:8f:59:6f:c9:03:3f:2a:56:c9:1d:2c:32:29:ac:
e3:c3:96:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 23:30:42 2025 by rpki-client