Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a366261313a3a2f34382d3438203d3e203136393039.roa
File: 326131343a373538343a366261313a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier: mvAqKDXxzEGMUKasNNYVkqGvxB6FxnhulYAP+BLZcZQ=
Subject key identifier: 61:7B:5E:C4:9A:9D:BC:AC:0E:9B:E9:01:C7:C3:2D:C7:56:B1:22:59
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 778AB3499CC10EF127831CF8C8686F02C44A942F
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a366261313a3a2f34382d3438203d3e203136393039.roa
Signing time: Sun 25 May 2025 05:18:02 +0000
ROA not before: Sun 25 May 2025 05:13:02 +0000
ROA not after: Sun 24 May 2026 05:18:02 +0000
asID: 16909
IP address blocks: 2a14:7584:6ba1::/48 maxlen: 48
Validation: Failed, certificate revoked on Mon 26 May 2025 20:06:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
77:8a:b3:49:9c:c1:0e:f1:27:83:1c:f8:c8:68:6f:02:c4:4a:94:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: May 25 05:13:02 2025 GMT
Not After : May 24 05:18:02 2026 GMT
Subject: CN=617B5EC49A9DBCAC0E9BE901C7C32DC756B12259
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:d7:8d:d5:39:a4:55:c1:1f:e6:20:3c:b2:2a:
b8:5a:0d:c0:84:21:62:ab:48:44:d3:1f:e8:d0:5b:
dc:81:a7:f2:81:43:ac:e4:fe:1b:9c:eb:a6:35:af:
30:80:76:52:e7:fe:e0:88:12:95:f9:08:fd:3f:d1:
cb:a8:4b:b4:0a:6a:44:18:1f:8a:75:42:f4:e5:60:
39:9b:4a:97:50:4d:fc:98:12:9c:1d:50:e6:aa:c1:
0a:a4:16:12:2e:e8:e0:7e:ec:22:39:3a:b3:ac:ef:
b3:f7:da:b4:5c:d1:84:35:d2:81:d0:b8:f2:44:fd:
26:09:c7:19:6c:ed:42:3f:0b:14:0c:d3:94:87:d0:
22:97:8f:3f:79:b6:68:f7:68:e1:84:18:eb:41:a9:
7d:0f:18:f3:4d:8f:fb:63:aa:f9:72:f8:7a:c0:8e:
d2:0b:26:bf:8e:68:f5:64:2f:73:60:e3:ed:57:b3:
c6:c8:dc:77:03:46:64:ce:8a:fa:b5:c9:14:21:ac:
98:12:8f:48:56:07:38:05:99:21:bf:90:b2:45:40:
59:38:b1:54:1f:84:45:99:ab:12:51:97:09:c4:71:
2d:3e:41:77:0e:7c:a5:55:4c:28:27:81:f7:08:52:
53:1d:a5:8c:dd:ce:fb:1a:79:ef:27:60:06:f0:6f:
87:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:7B:5E:C4:9A:9D:BC:AC:0E:9B:E9:01:C7:C3:2D:C7:56:B1:22:59
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a366261313a3a2f34382d3438203d3e203136393039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:6ba1::/48
Signature Algorithm: sha256WithRSAEncryption
99:d6:18:60:57:e4:80:40:a2:20:6b:c5:70:5f:13:b2:73:39:
d6:2e:38:6d:30:60:9a:54:12:85:22:9d:da:1b:24:0c:0d:4f:
a9:66:4a:98:6e:33:ed:6b:3b:14:ff:a0:7c:67:51:60:df:92:
5d:77:7a:6b:21:24:bc:9e:85:4a:53:87:78:fd:9e:ce:0d:e6:
88:69:b9:15:3e:b3:d1:ba:3b:41:07:1d:79:00:d2:8e:68:3a:
12:60:f5:36:a6:ed:90:dd:9c:5a:d6:03:b1:64:d7:c7:a9:34:
3b:a6:70:b1:61:74:3e:21:f5:ea:5c:fe:01:9b:e3:b9:3b:b4:
55:03:d8:3a:3a:ee:50:df:53:02:e4:fa:b6:6c:ba:e7:45:b9:
9c:07:f6:b7:ca:71:b3:89:15:f5:a9:ef:3b:3e:ea:7d:6c:26:
7d:f3:71:b1:56:9b:94:da:2a:88:91:1b:d1:19:5d:72:de:44:
c3:f9:a9:c2:73:e9:e8:ab:8d:fa:5e:be:7f:bc:2d:57:40:68:
37:18:b5:02:be:ba:26:53:2a:de:88:fe:87:98:a5:92:26:76:
7c:5b:c0:bc:7a:5d:e4:1c:aa:c4:0d:8d:dc:2b:40:ac:c3:78:
c3:97:51:6e:b1:1f:4c:e6:6f:b2:b8:0e:a6:6b:57:65:de:00:
8e:ea:2d:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 01:08:24 2025 by rpki-client