Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a366330663a3a2f34382d3438203d3e203136393039.roa
File: 326131343a373538343a366330663a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier: KD/Uyq62uX94xiK1jyabTnu7FVKJz5Z0CIXhiCafjhE=
Subject key identifier: 7C:25:76:C6:B0:4E:9A:E2:1E:02:2F:B7:E7:2C:50:6A:6E:CF:6D:34
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 418326456C8D76BCE93D97F4A7E8830CEB02894D
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a366330663a3a2f34382d3438203d3e203136393039.roa
Signing time: Sat 31 May 2025 13:57:39 +0000
ROA not before: Sat 31 May 2025 13:52:39 +0000
ROA not after: Sat 30 May 2026 13:57:39 +0000
asID: 16909
IP address blocks: 2a14:7584:6c0f::/48 maxlen: 48
Validation: Failed, certificate revoked on Sat 31 May 2025 17:16:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
41:83:26:45:6c:8d:76:bc:e9:3d:97:f4:a7:e8:83:0c:eb:02:89:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: May 31 13:52:39 2025 GMT
Not After : May 30 13:57:39 2026 GMT
Subject: CN=7C2576C6B04E9AE21E022FB7E72C506A6ECF6D34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:43:e1:4a:ae:d4:da:37:4d:e5:aa:63:8a:a3:
9d:e5:16:81:ce:b9:16:e4:ca:d2:1e:19:7f:5a:3e:
b4:c6:e6:86:a7:2e:ef:b4:bb:c7:37:75:8a:a7:8b:
98:08:ef:0d:b7:8d:36:cf:62:17:68:d6:a4:6d:52:
0a:a4:d8:d9:87:28:aa:fb:5f:b5:1b:3d:2a:f8:42:
7b:81:88:d0:df:6c:8b:54:51:ef:a8:af:81:ac:b3:
68:15:42:7d:65:99:5e:ef:5f:36:72:33:37:02:b3:
ec:ad:00:66:71:bf:dd:da:79:7f:18:4c:f4:c3:4f:
b9:75:08:ca:f7:be:f9:0a:f0:6c:68:f0:07:66:11:
fe:92:b0:74:03:b0:cd:8d:fe:aa:0c:73:eb:28:cc:
e8:ba:08:73:15:08:f3:e2:bb:1f:e0:50:42:2e:16:
fa:0f:78:f7:f6:87:16:1f:d7:d7:7b:8b:68:05:97:
67:9a:7c:bc:2a:43:19:4a:69:70:33:47:64:1a:95:
f0:9c:af:8b:72:18:a2:35:dd:cd:34:1d:3c:ea:89:
be:13:dd:d1:f5:d7:e2:5f:07:3d:a3:1d:77:92:27:
ab:8f:ae:fc:df:61:95:62:1d:17:11:e5:52:7e:aa:
5a:d2:5f:e1:c1:9d:c7:96:a6:d3:7b:6b:e7:e3:24:
a0:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:25:76:C6:B0:4E:9A:E2:1E:02:2F:B7:E7:2C:50:6A:6E:CF:6D:34
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a366330663a3a2f34382d3438203d3e203136393039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:6c0f::/48
Signature Algorithm: sha256WithRSAEncryption
33:a5:7b:42:8e:7b:e2:2b:f9:03:5f:08:d4:27:12:b7:44:a5:
d8:3a:1d:58:8f:3f:18:05:39:2b:af:10:17:7f:06:0a:8e:a9:
c5:62:79:80:df:92:d8:34:02:45:af:54:a7:31:bd:50:a2:a7:
56:53:2e:b6:ff:4a:a5:76:25:99:43:9a:8f:eb:6a:30:16:10:
fd:5f:63:cc:99:1f:4c:68:bb:d5:59:75:87:f6:10:b6:30:de:
30:9a:d5:89:65:bf:29:9f:64:1f:6d:f0:c7:15:3a:aa:21:43:
0a:7c:d0:53:ad:80:3f:8d:ef:90:2f:4c:7c:b7:40:b8:af:06:
fd:36:f7:c1:a7:88:b5:3a:d8:5f:a2:a3:1f:06:cf:f7:83:1f:
05:aa:46:c7:55:a2:10:1e:ce:ba:ee:c9:0c:08:36:64:c2:2f:
10:16:88:2e:47:9b:a2:e3:60:02:dc:99:10:cb:f9:52:4d:58:
ec:8f:86:d0:1d:e5:1d:97:2c:ae:bd:84:17:cc:04:ff:44:35:
70:47:cb:41:84:23:f5:81:56:df:62:67:76:f9:62:52:54:b3:
d3:3d:da:46:ca:28:94:be:32:da:ea:2d:d4:23:94:2a:5f:7f:
14:90:27:7b:f3:84:a7:c7:f3:ee:b0:7f:a1:4e:cb:70:93:17:
e5:65:53:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 06:06:16 2025 by rpki-client