Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a366330363a3a2f34382d3438203d3e203136393039.roa
File: 326131343a373538343a366330363a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier: 5OfmZ6hIiJuFMbmmc+wrAGXTRL39HVsrz3ChXtMqaH0=
Subject key identifier: 21:09:B5:9D:F0:5D:11:06:8D:7D:BE:75:DA:D9:BF:D9:E7:78:C2:1A
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 3B92C765741388119C8A246FB889C81285934625
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a366330363a3a2f34382d3438203d3e203136393039.roa
Signing time: Fri 30 May 2025 22:06:02 +0000
ROA not before: Fri 30 May 2025 22:01:02 +0000
ROA not after: Fri 29 May 2026 22:06:02 +0000
asID: 16909
IP address blocks: 2a14:7584:6c06::/48 maxlen: 48
Validation: Failed, certificate revoked on Sat 31 May 2025 17:16:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3b:92:c7:65:74:13:88:11:9c:8a:24:6f:b8:89:c8:12:85:93:46:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: May 30 22:01:02 2025 GMT
Not After : May 29 22:06:02 2026 GMT
Subject: CN=2109B59DF05D11068D7DBE75DAD9BFD9E778C21A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:02:25:e2:4d:bc:fa:cf:d9:24:d4:9f:f6:45:
84:ce:b1:8d:56:c6:ef:d2:f0:72:86:4e:f1:e7:0d:
a4:da:c6:1f:14:f3:2a:66:ab:73:a7:5d:44:a7:12:
50:61:f9:f8:6b:d4:8d:bd:35:a5:6b:d3:aa:a7:f2:
7b:65:27:93:1c:b8:8f:5c:81:6c:54:ff:ce:00:1b:
65:57:35:db:89:d3:99:2a:30:56:af:21:7e:c7:bf:
e1:d6:55:d8:42:3b:6a:55:a5:df:0a:3d:6d:e7:6d:
0a:22:a8:b0:e0:cd:0e:b8:55:6f:da:36:97:09:53:
a5:20:25:4b:ce:88:b6:37:3a:ef:e6:12:88:cf:50:
94:06:b7:f7:97:9b:48:f7:b3:8a:1d:a3:9f:ae:d5:
05:f3:09:a8:a2:b6:91:3a:82:55:ac:77:34:79:dd:
9e:9f:0b:92:85:70:b1:14:c7:5f:4f:7b:ff:37:49:
49:65:f7:de:ff:33:aa:fb:3b:9f:53:8c:d3:b7:47:
a2:91:8b:93:3d:f1:fd:cd:28:a4:bb:49:84:35:8f:
f5:a6:c3:c7:52:5f:4f:1f:1a:b8:90:f4:14:1a:34:
44:ce:95:fe:43:f2:86:30:1d:b1:db:29:6e:be:2b:
78:14:de:eb:1f:5e:5b:c7:d7:05:02:91:7d:de:ec:
a6:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:09:B5:9D:F0:5D:11:06:8D:7D:BE:75:DA:D9:BF:D9:E7:78:C2:1A
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a366330363a3a2f34382d3438203d3e203136393039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:6c06::/48
Signature Algorithm: sha256WithRSAEncryption
0a:d6:d0:68:47:73:44:19:35:ba:d7:53:ea:29:48:bf:f9:ef:
23:5e:82:c5:63:50:e2:ca:f7:86:2b:48:b2:b3:1f:ec:d9:57:
fe:f2:74:50:f7:66:52:99:b6:a1:e8:77:75:34:c0:53:ff:9c:
ba:6e:80:a5:48:6c:ac:23:20:0b:f6:2c:6e:13:1b:6b:f0:d2:
05:6d:26:20:2a:26:26:7a:6a:15:4a:0e:58:3e:59:c2:56:6b:
51:64:f1:ac:43:32:13:21:40:4e:0e:e4:d5:b5:d5:44:a5:9e:
95:88:d3:d8:88:24:b6:05:61:b3:f2:fc:0d:48:a4:a8:4a:ec:
41:3b:62:b2:ba:a0:eb:91:39:d7:3a:e2:68:77:13:d6:18:1a:
2f:34:2f:0e:99:2e:ee:cc:25:1d:ee:c1:d6:2b:67:62:19:9d:
15:ec:9d:c4:aa:55:b1:9d:0a:ba:96:4a:89:2c:04:c1:a6:9d:
c6:03:b3:ca:f7:fa:99:6e:17:c9:49:29:4c:d9:62:a0:40:a4:
fc:72:df:97:a6:3a:6a:a9:5a:67:7b:da:c9:5a:74:89:a4:f1:
91:19:94:8e:38:bc:d0:b7:d7:28:0d:9b:03:e6:d5:ba:ac:c2:
08:24:50:7a:d8:24:1f:74:9c:e6:e5:84:29:8d:26:3e:e0:44:
fa:3a:a7:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 04:46:58 2025 by rpki-client