Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a366335313a3a2f34382d3438203d3e203136393039.roa
File: 326131343a373538343a366335313a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier: n746Bc6Mg6TY/J+CP6gSbJxignYp3bQUYeB+46vx8jU=
Subject key identifier: 35:FE:F5:64:DE:C7:6F:EE:33:17:E4:BA:61:57:1D:65:9F:DA:3E:F3
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 7642240DAB30610CF4F2B6286C42BC52BD6727C5
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a366335313a3a2f34382d3438203d3e203136393039.roa
Signing time: Thu 29 May 2025 10:36:02 +0000
ROA not before: Thu 29 May 2025 10:31:02 +0000
ROA not after: Thu 28 May 2026 10:36:02 +0000
asID: 16909
IP address blocks: 2a14:7584:6c51::/48 maxlen: 48
Validation: Failed, certificate revoked on Sat 31 May 2025 16:54:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
76:42:24:0d:ab:30:61:0c:f4:f2:b6:28:6c:42:bc:52:bd:67:27:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: May 29 10:31:02 2025 GMT
Not After : May 28 10:36:02 2026 GMT
Subject: CN=35FEF564DEC76FEE3317E4BA61571D659FDA3EF3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:b9:4d:e2:db:b3:36:5a:7e:55:00:aa:bf:b3:
cd:78:56:db:2f:8d:fc:2f:aa:09:3b:39:34:6f:ae:
eb:91:50:72:cf:86:8d:66:b4:2d:dd:ae:13:98:d3:
18:5a:0e:e7:b9:c3:7b:bd:fc:fe:29:87:dc:e0:ad:
92:61:16:03:03:53:94:c4:c7:9c:83:ad:78:e0:b0:
03:4c:bc:be:ac:a6:2b:47:ed:2f:ee:70:ff:30:63:
06:08:be:dc:f6:93:1d:e9:cd:6f:9f:ca:37:12:03:
dc:c1:bd:ee:8a:07:68:11:83:48:50:f3:83:1f:b7:
4b:34:39:b7:15:aa:84:af:8c:de:63:77:0f:87:4b:
a2:d7:ff:f2:dc:b9:1e:49:e4:78:63:f0:cd:4d:48:
e2:f4:1e:48:da:05:56:29:3b:0d:69:48:eb:9f:95:
59:df:78:6b:2c:a2:b1:d8:91:1b:ee:08:d1:2a:2d:
13:cd:34:5a:4c:c3:b4:ed:b5:7d:a7:eb:0d:a7:d5:
03:4e:e7:9a:9b:29:70:64:ea:53:b8:9f:ac:57:77:
e4:a8:43:da:d0:6b:de:27:57:21:25:54:9f:ef:46:
77:27:89:31:c2:1b:ad:c9:1c:45:1a:89:c1:27:68:
76:1b:e5:48:9f:f0:54:5f:06:45:ff:1e:47:4f:7c:
a9:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:FE:F5:64:DE:C7:6F:EE:33:17:E4:BA:61:57:1D:65:9F:DA:3E:F3
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a366335313a3a2f34382d3438203d3e203136393039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:6c51::/48
Signature Algorithm: sha256WithRSAEncryption
2e:10:e3:0e:d3:ce:93:12:d8:c5:99:89:0d:15:1b:ae:cd:bd:
8d:47:b1:66:a3:a2:5d:67:d6:9d:05:46:7d:5f:b7:01:55:4f:
7e:e9:e4:91:93:de:c1:cc:f7:da:93:82:ef:3d:c8:d2:03:e9:
b1:ae:94:c1:23:74:f8:ee:81:5e:68:54:0b:a4:5d:45:a7:fd:
79:22:44:f9:76:a8:d9:62:48:02:8a:48:a0:ce:a7:2b:a9:f7:
e0:2f:11:6b:95:8d:35:34:5b:82:ab:fe:03:70:68:b8:85:70:
b4:96:52:14:a7:04:5b:a7:37:ff:93:77:45:80:dd:50:91:b1:
24:05:c9:96:2d:e3:11:be:da:33:d9:2a:81:67:2b:f1:b6:c6:
07:b2:90:97:87:fe:a2:e7:31:8c:5a:56:c2:cd:f6:87:c3:a5:
33:14:2b:0e:91:14:01:a8:ef:4b:75:77:52:74:e9:7c:eb:05:
28:6c:14:5e:f7:b2:d1:ad:41:b4:f8:7e:56:64:26:0c:f5:eb:
ec:58:93:73:ee:cb:8b:e0:0f:a6:48:c6:82:7b:d3:02:d2:b0:
1c:af:42:c5:85:91:e3:e9:d1:c7:81:f4:cd:d1:2f:a5:8a:a7:
eb:11:d9:8a:20:c5:49:77:21:ee:c1:03:c9:df:99:0d:df:e4:
09:7a:9c:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 21:49:18 2025 by rpki-client