Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a366338343a3a2f34382d3438203d3e203136393039.roa
File: 326131343a373538343a366338343a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier: t8wT/NS/cxphpxtWdZglbGrwgi4UfMuivPptQJ7aqCE=
Subject key identifier: 7A:FA:2F:89:BD:79:02:04:60:45:FB:D0:29:27:5A:F9:F2:D5:A1:88
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 0BC9834F38E978B2BA9EFBD73447E300EA152361
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a366338343a3a2f34382d3438203d3e203136393039.roa
Signing time: Sat 31 May 2025 13:57:37 +0000
ROA not before: Sat 31 May 2025 13:52:37 +0000
ROA not after: Sat 30 May 2026 13:57:37 +0000
asID: 16909
IP address blocks: 2a14:7584:6c84::/48 maxlen: 48
Validation: Failed, certificate revoked on Sat 31 May 2025 17:16:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0b:c9:83:4f:38:e9:78:b2:ba:9e:fb:d7:34:47:e3:00:ea:15:23:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: May 31 13:52:37 2025 GMT
Not After : May 30 13:57:37 2026 GMT
Subject: CN=7AFA2F89BD7902046045FBD029275AF9F2D5A188
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:de:3e:37:60:7c:19:27:3e:39:be:23:6b:92:
fe:f1:87:67:38:2a:13:38:df:eb:ae:08:2f:6f:7d:
dd:8d:b3:ec:30:f6:d7:3e:85:0b:f5:91:c8:46:ea:
27:66:5f:8b:0f:57:e2:8d:59:a7:69:59:5c:bf:5c:
06:30:c9:b8:24:cb:68:53:82:32:67:2e:3b:f5:56:
00:66:82:70:8e:3d:93:98:99:ea:1c:1c:ba:bc:12:
13:ac:b4:fd:5f:c7:a5:5d:ba:be:b6:6e:37:dc:f9:
a6:b2:30:8d:3e:19:66:81:6a:ee:ec:8d:6e:d5:b6:
29:a7:f1:c5:f1:fd:da:b4:56:76:43:ad:89:47:32:
02:d2:2d:73:f2:95:8d:a5:44:eb:ea:39:6d:3f:d0:
ca:90:14:24:51:8a:16:3d:e7:42:6b:f8:8e:b2:10:
ec:66:68:7d:9f:20:28:3d:a2:13:87:79:1d:36:0d:
3f:c8:e3:cd:0d:48:ba:2f:c0:88:08:c9:51:86:5e:
89:d6:c6:82:85:c9:35:4e:03:3d:81:38:21:8b:89:
46:31:dc:bc:c2:53:c1:ca:b9:bf:e6:41:f7:9b:8e:
ec:3f:47:46:10:aa:db:7b:09:b9:17:7e:ce:6d:ca:
97:fc:cd:86:c7:3c:af:a7:1b:8e:00:b2:41:02:72:
9a:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:FA:2F:89:BD:79:02:04:60:45:FB:D0:29:27:5A:F9:F2:D5:A1:88
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a366338343a3a2f34382d3438203d3e203136393039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:6c84::/48
Signature Algorithm: sha256WithRSAEncryption
75:d1:87:e3:d7:a4:d8:b0:f9:ad:d4:3e:ad:53:84:8f:1c:91:
da:24:4c:70:c4:98:71:55:9b:58:18:ce:9f:21:17:b1:16:ec:
16:65:93:fe:17:39:74:f6:f3:78:eb:c1:e9:98:51:4f:45:67:
c1:d3:bd:b6:06:00:ef:13:c4:a7:76:14:7a:7a:54:1c:df:0a:
f4:2a:59:1b:95:69:97:19:84:54:dd:c9:3e:83:21:a6:b8:1c:
79:17:b0:6c:ed:ea:59:d8:9a:f2:2b:d3:7e:5c:da:c5:8d:64:
6b:68:9d:d0:00:a5:a9:e9:af:41:74:3a:e5:4a:7c:72:62:8e:
60:3d:da:25:3b:99:20:9d:a4:59:d8:60:72:7c:25:96:02:ce:
5a:57:a2:3c:68:02:06:ab:e2:9a:2d:1b:36:cf:5f:c2:84:ba:
21:48:68:75:54:14:fd:ec:56:b4:4b:e2:46:7a:c2:1c:cc:47:
8c:f3:58:29:34:ce:40:e1:a8:f9:13:e5:f1:42:e6:11:7b:38:
50:3a:64:1b:4a:df:49:3a:8b:7e:08:c9:7e:d4:aa:41:23:5d:
a9:cd:de:b0:5d:b4:12:8c:15:25:c7:2b:81:ab:3c:54:2c:5c:
bd:51:43:cd:c1:56:10:74:02:ea:4f:58:e5:e7:fe:60:28:de:
0d:bd:15:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 06:00:31 2025 by rpki-client