Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a366362663a3a2f34382d3438203d3e203136393039.roa
File: 326131343a373538343a366362663a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier: H51y6pKzTB0bOIclndF4n8ydudxxhsvtfCG/fGdWuDc=
Subject key identifier: 3B:3B:B7:64:F4:87:AC:73:0F:15:2C:74:CE:21:DB:38:EA:2B:03:D2
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 1128922580927AA41A17BA90FCFC7CA520FA7283
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a366362663a3a2f34382d3438203d3e203136393039.roa
Signing time: Fri 30 May 2025 00:12:01 +0000
ROA not before: Fri 30 May 2025 00:07:01 +0000
ROA not after: Fri 29 May 2026 00:12:01 +0000
asID: 16909
IP address blocks: 2a14:7584:6cbf::/48 maxlen: 48
Validation: Failed, certificate revoked on Sat 31 May 2025 17:16:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
11:28:92:25:80:92:7a:a4:1a:17:ba:90:fc:fc:7c:a5:20:fa:72:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: May 30 00:07:01 2025 GMT
Not After : May 29 00:12:01 2026 GMT
Subject: CN=3B3BB764F487AC730F152C74CE21DB38EA2B03D2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:06:a1:ad:09:56:72:b7:31:39:90:c4:a5:2a:
53:f0:ba:e8:5d:02:a4:cd:ed:17:1a:2c:61:e6:fc:
42:7a:3d:4f:45:ce:2d:f5:bb:98:af:74:22:b1:3e:
8f:4d:37:a6:0e:cd:09:a8:ca:1b:84:43:ae:36:11:
91:8d:e9:cf:4c:0a:bb:a5:b8:69:6c:b0:1a:fb:8e:
fd:a6:05:e0:bf:7f:d9:6b:15:75:d4:9b:f3:95:2a:
84:55:3c:a4:01:96:5a:44:f1:bd:15:39:7a:c4:39:
20:37:5f:66:b5:ef:b4:81:48:6e:03:48:e5:98:b8:
7d:08:1c:0d:5e:a4:dd:4d:89:f6:83:31:17:38:9f:
0f:66:e3:e3:75:4a:6c:fe:eb:c0:8d:06:c6:2b:1e:
c3:0a:98:d5:b3:c9:a3:68:e5:f1:0a:25:44:06:c0:
77:a1:c3:7e:b2:26:8f:80:f0:b2:a2:31:32:31:c0:
e0:b9:13:7e:8b:81:a2:f7:59:02:a8:6c:5b:09:03:
aa:10:d6:db:4c:35:e2:1c:f8:b1:3a:62:81:ef:5c:
15:f2:d9:fd:ad:c1:c8:53:b3:27:71:86:de:8f:d9:
61:47:d0:25:d4:d9:55:6c:de:b2:f9:7b:98:f6:10:
f7:43:8b:82:5c:02:77:7a:fa:4a:f7:3d:e5:67:49:
cc:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:3B:B7:64:F4:87:AC:73:0F:15:2C:74:CE:21:DB:38:EA:2B:03:D2
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a366362663a3a2f34382d3438203d3e203136393039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:6cbf::/48
Signature Algorithm: sha256WithRSAEncryption
ad:e5:80:87:dc:7f:26:1e:f0:0d:72:6c:7a:13:ec:35:22:d0:
af:b6:10:49:e1:24:25:95:4f:7c:fa:80:2c:e7:2d:50:3a:8e:
5f:61:5b:db:63:5c:9f:ca:65:f4:2d:e2:1b:ba:c3:48:0b:a7:
f5:d1:94:21:11:83:d2:e5:a4:ca:18:9b:24:2e:98:9e:be:9e:
68:52:bd:a1:fd:94:b5:d4:b6:bc:27:0b:1b:78:67:ae:7c:8e:
14:80:ae:39:84:75:34:c2:d7:93:f6:e4:1f:69:b4:a5:ee:a8:
18:d5:6e:a0:65:19:b3:06:c9:c0:fd:c2:23:d8:3d:c7:f2:80:
01:57:9d:5b:bd:77:b4:e4:75:a3:24:fc:fe:de:75:55:e1:63:
e8:64:91:8b:73:ee:b3:2a:e4:72:38:0f:8b:a6:58:a9:97:31:
13:cd:bd:0c:2c:b6:81:c3:2c:46:68:2e:fb:02:02:a7:52:29:
31:82:65:5a:d6:b9:8b:ce:c1:2c:10:69:e8:f8:d2:25:0e:07:
fb:19:fd:d3:26:86:88:f9:e8:79:60:9f:ba:e2:75:d0:32:ff:
36:81:d5:39:ea:15:9b:87:9c:ee:5b:bb:82:98:24:cf:dc:42:
2e:b2:0a:a5:c3:ed:6c:bb:99:88:65:71:11:07:6b:0f:aa:1a:
46:f4:0a:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 06:12:36 2025 by rpki-client