Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a366361383a3a2f34382d3438203d3e203136393039.roa
File: 326131343a373538343a366361383a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier: oDd0mr7iLH2A1yxM6+diQ8NY8m1DkbgucZFm0eLrw0Y=
Subject key identifier: 8D:B0:37:05:23:55:04:C0:60:D2:83:11:23:A7:DD:F0:90:2B:7D:C5
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 7757205B4C10262E73380CD1AF1A1192BDD2F82D
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a366361383a3a2f34382d3438203d3e203136393039.roa
Signing time: Tue 27 May 2025 21:24:01 +0000
ROA not before: Tue 27 May 2025 21:19:01 +0000
ROA not after: Tue 26 May 2026 21:24:01 +0000
asID: 16909
IP address blocks: 2a14:7584:6ca8::/48 maxlen: 48
Validation: Failed, certificate revoked on Sat 31 May 2025 07:18:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
77:57:20:5b:4c:10:26:2e:73:38:0c:d1:af:1a:11:92:bd:d2:f8:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: May 27 21:19:01 2025 GMT
Not After : May 26 21:24:01 2026 GMT
Subject: CN=8DB03705235504C060D2831123A7DDF0902B7DC5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:18:1e:27:ca:bb:4c:e9:a0:fe:f8:b4:94:20:
fa:b0:79:f8:35:6c:3d:b2:f1:34:1e:ae:52:a6:d6:
e3:49:e0:5c:87:6d:16:77:7f:be:ac:82:ee:56:85:
e0:73:22:89:ea:32:1b:bc:5f:59:a4:7c:2c:94:93:
b6:ae:b4:78:9a:6b:05:19:5d:94:3d:d8:67:75:d4:
9e:4a:bb:4c:67:f9:e8:06:4a:3b:d7:34:d7:41:b5:
20:70:47:7c:6e:16:52:9e:fa:28:36:b5:ac:77:05:
83:8a:f6:c6:6d:2d:51:56:7d:4c:6b:aa:7e:b4:57:
8a:19:d2:74:2b:35:d1:ff:b2:3b:2d:ec:03:ed:d0:
85:a8:28:9a:9c:ae:33:d7:f3:29:e6:44:72:1d:bd:
d9:76:bf:9e:2a:37:c2:a2:07:e2:56:02:bc:ac:c4:
bd:4a:fd:55:ff:0a:11:52:2a:d2:c1:9e:4d:20:e3:
08:bb:a7:d6:12:5d:a2:b5:f6:4a:19:4f:86:da:c0:
21:1c:60:1c:ed:28:3d:08:10:66:75:77:9b:54:9f:
0e:d1:f4:70:d6:fa:e3:57:f7:d1:34:00:97:ce:e8:
0e:3c:a0:d0:e2:c1:ee:59:24:4f:04:6e:3c:74:ec:
b4:80:07:c4:05:75:fb:5d:bd:2f:83:92:43:8d:d8:
a1:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:B0:37:05:23:55:04:C0:60:D2:83:11:23:A7:DD:F0:90:2B:7D:C5
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a366361383a3a2f34382d3438203d3e203136393039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:6ca8::/48
Signature Algorithm: sha256WithRSAEncryption
95:b8:85:e2:a3:4c:5e:34:dc:b7:b1:9f:18:4e:a6:d5:b5:11:
8b:01:78:f6:22:7d:b6:d1:a9:24:2d:20:34:2b:55:0a:8f:c0:
69:39:c5:a3:f4:9b:41:6a:97:4b:fe:32:cb:c2:8d:46:31:05:
df:c8:20:12:bb:12:e2:34:89:27:d9:b2:39:4e:15:59:0a:c9:
c9:00:cc:eb:51:d9:0e:f3:51:64:f6:b6:80:cb:fe:cd:ed:12:
ae:d9:34:a3:cf:7e:a0:3c:86:99:41:96:06:7f:7f:0e:5e:10:
3c:d1:fe:40:61:19:09:df:ff:28:67:72:a0:c7:77:ee:61:c5:
b4:66:b7:54:67:d8:0c:cd:dd:60:35:2c:c7:f6:aa:c0:fa:8c:
e8:22:35:5e:e0:ae:13:db:a9:f0:7a:c2:64:66:f3:99:ea:b4:
f3:78:05:cb:3f:28:d2:d9:b2:e9:6c:f6:f2:0b:05:4e:b4:2f:
ac:30:dc:c7:bd:27:93:37:70:aa:5f:14:a2:d0:a1:5f:cf:32:
3e:6d:98:94:23:47:d3:17:f8:e0:3c:f5:78:48:a1:a0:d5:5a:
b4:7d:6b:19:54:ce:36:6d:dc:45:44:4a:a7:71:82:cb:39:ac:
a7:52:de:c6:73:f2:e9:86:36:7e:8a:3e:94:e8:ff:7e:78:cd:
97:b7:9e:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 06:06:38 2025 by rpki-client