Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a366365343a3a2f34382d3438203d3e203136393039.roa
File: 326131343a373538343a366365343a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier: v9wWP24nBYjXaE+JeT2cm/WwH13CPoLEqRQazHlGDYE=
Subject key identifier: 92:54:2E:28:93:2D:7A:24:39:67:F1:AB:24:25:26:17:C6:88:B6:4C
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 67B2007EFA918C1A5977A6F77497B8F7BA2E14FA
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a366365343a3a2f34382d3438203d3e203136393039.roa
Signing time: Sat 24 May 2025 07:42:02 +0000
ROA not before: Sat 24 May 2025 07:37:02 +0000
ROA not after: Sat 23 May 2026 07:42:02 +0000
asID: 16909
IP address blocks: 2a14:7584:6ce4::/48 maxlen: 48
Validation: Failed, certificate revoked on Sun 25 May 2025 22:06:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
67:b2:00:7e:fa:91:8c:1a:59:77:a6:f7:74:97:b8:f7:ba:2e:14:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: May 24 07:37:02 2025 GMT
Not After : May 23 07:42:02 2026 GMT
Subject: CN=92542E28932D7A243967F1AB24252617C688B64C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:85:b7:80:d8:1b:52:e6:22:05:d3:38:c4:fb:
57:49:eb:ea:75:08:54:75:80:2d:94:19:4d:94:81:
7c:53:d0:7d:82:7c:e0:9b:46:67:ab:66:b8:57:53:
f5:4d:96:c0:f3:a8:8a:6b:29:28:fb:b2:81:37:1b:
7a:94:66:61:4c:41:6c:ec:d8:19:00:70:42:9d:8d:
d9:92:bf:15:9d:5b:72:06:6a:c9:31:75:4c:d9:0f:
5e:88:6d:43:62:3a:73:f4:81:23:d3:4d:b9:f0:e6:
c4:8d:f1:c2:a7:4d:db:fe:63:b9:01:a6:76:a7:f2:
16:c5:56:28:23:42:c7:40:37:e5:14:d1:47:5a:c8:
3c:f4:c4:40:d1:2a:fe:20:c0:7d:2c:e5:27:00:78:
0a:36:43:9b:3c:9d:3b:b8:a2:b1:cb:27:be:6b:86:
e6:f0:8b:76:18:f8:48:33:ed:8c:d5:b6:6a:0c:ee:
11:a5:ab:67:c4:ab:71:d8:0e:cc:98:bf:6c:0d:91:
61:96:29:26:66:d5:7b:b6:6c:1f:7a:a0:4b:84:79:
87:d6:b1:59:21:6f:f5:c9:a7:68:aa:2f:08:58:98:
bd:eb:a6:ba:13:24:49:9e:bf:d3:e9:c9:77:32:a4:
af:3a:12:4c:3a:61:e1:d0:81:84:39:b8:03:24:bc:
f4:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:54:2E:28:93:2D:7A:24:39:67:F1:AB:24:25:26:17:C6:88:B6:4C
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a366365343a3a2f34382d3438203d3e203136393039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:6ce4::/48
Signature Algorithm: sha256WithRSAEncryption
b2:65:37:b8:5c:45:c9:6d:43:1a:67:6b:23:f8:59:7c:b0:c3:
57:88:10:b6:da:bd:fe:c7:00:2b:df:55:40:22:68:6f:07:a5:
d4:c9:11:e3:20:41:3e:7f:1c:43:43:b5:dd:b1:a6:74:19:78:
b4:95:9d:72:6c:4d:d0:3a:4d:b3:81:e5:11:8e:ac:0c:21:37:
9c:71:0c:5f:bc:08:bf:83:58:7f:b9:1c:b4:de:f3:c4:b5:84:
9b:73:06:b6:18:87:3e:70:6c:d1:d6:ac:f4:79:33:d0:cf:f9:
53:77:f0:e0:c3:e8:6c:6d:81:5b:9e:3d:9a:3a:d6:94:0e:fa:
1d:98:58:cf:cd:04:79:a0:57:ef:25:d1:91:97:ca:cf:2a:7a:
50:e4:a5:5f:e4:f4:56:df:8c:e3:a1:ae:57:b9:e4:3b:3b:1f:
45:c8:97:10:cd:cf:3b:78:4c:77:07:e2:31:6a:c8:32:3e:1a:
7b:27:24:ab:af:1e:36:39:1a:d0:67:cb:0e:7c:ba:fc:23:38:
bf:c0:d1:fe:8d:ab:21:97:b7:2b:78:71:ea:c2:19:b4:db:78:
1c:67:22:44:17:a0:19:a5:52:b9:64:7c:93:30:2e:1a:bb:77:
1e:c3:02:0e:a2:e8:e5:72:2d:00:ce:22:73:88:b7:03:ff:80:
30:16:8a:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 06:13:00 2025 by rpki-client