Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a366365373a3a2f34382d3438203d3e203136393039.roa
File: 326131343a373538343a366365373a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier: RIpHepVertXkLHaz9hWZNB10iK0oNcbJjk4HujebPmM=
Subject key identifier: 30:8C:65:86:FB:9E:32:6E:49:39:25:CA:30:AB:B0:2D:37:E9:C0:B2
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 219D77A30F0228D37BD6851BE3A8DEE022300168
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a366365373a3a2f34382d3438203d3e203136393039.roa
Signing time: Sun 25 May 2025 03:06:02 +0000
ROA not before: Sun 25 May 2025 03:01:02 +0000
ROA not after: Sun 24 May 2026 03:06:02 +0000
asID: 16909
IP address blocks: 2a14:7584:6ce7::/48 maxlen: 48
Validation: Failed, certificate revoked on Sun 25 May 2025 13:50:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
21:9d:77:a3:0f:02:28:d3:7b:d6:85:1b:e3:a8:de:e0:22:30:01:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: May 25 03:01:02 2025 GMT
Not After : May 24 03:06:02 2026 GMT
Subject: CN=308C6586FB9E326E493925CA30ABB02D37E9C0B2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:35:23:0b:1f:70:29:be:f5:0d:df:32:52:6c:
fd:ab:25:4b:7a:fa:c4:9e:49:07:4b:8d:29:5d:1e:
c9:cb:1b:cc:0e:fb:cf:9f:7d:b4:90:44:d5:d4:87:
95:be:39:c4:1f:f9:eb:ed:fd:fd:79:8e:09:0e:86:
89:38:4e:57:85:08:08:9b:61:cb:d2:63:d4:10:0b:
74:b6:0c:08:43:2e:b6:06:9d:2a:53:f9:1e:91:ef:
60:fc:3e:90:76:3d:61:a0:7e:d8:f3:45:17:5b:7a:
97:86:d2:e9:40:59:1c:79:5c:7f:96:54:6a:21:4b:
86:b6:e3:b4:08:d6:7f:8c:40:f7:2c:8e:e3:ea:b6:
94:90:be:f7:38:a4:a5:fd:71:a8:51:e1:73:81:05:
b6:8a:8b:6b:1a:b1:25:d7:dc:cf:d2:7e:95:a0:c3:
4a:5b:ee:4b:f9:d4:cf:45:ae:a0:1d:f2:a4:e0:9f:
11:c5:f0:7f:e1:17:16:d7:a7:ed:d4:d3:0f:34:8a:
38:01:0e:84:54:59:5f:ea:fe:8f:24:87:32:d0:29:
1f:e7:82:00:65:4a:f4:f2:62:9d:b7:23:46:85:15:
23:bc:bc:89:ee:bc:46:17:1e:ab:19:dd:0e:c2:7f:
9d:bb:12:70:ad:e4:3c:a2:78:da:39:3d:45:60:db:
cc:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:8C:65:86:FB:9E:32:6E:49:39:25:CA:30:AB:B0:2D:37:E9:C0:B2
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a366365373a3a2f34382d3438203d3e203136393039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:6ce7::/48
Signature Algorithm: sha256WithRSAEncryption
64:64:dd:40:83:fb:80:b7:cb:5a:1f:c3:ba:87:4e:58:7e:f1:
50:c6:ad:a0:1c:4d:ad:d6:88:d7:5b:33:5e:95:e3:ea:c8:1c:
01:c5:37:a0:61:f0:a5:40:5e:9a:82:82:5e:71:ac:fa:d4:20:
d8:40:4d:83:65:7c:b2:63:d0:c7:83:ac:8d:10:b3:c1:16:40:
15:c6:be:b5:d3:9d:6f:75:19:8a:42:ab:bd:9c:b1:97:9c:c4:
ec:ef:09:1e:29:bf:f0:5a:6e:17:e1:69:3d:55:e2:d1:e3:24:
6a:8a:e1:9a:a5:a2:76:d7:b8:c8:47:51:a2:b9:20:d0:4d:b8:
9e:c9:cc:b6:2b:7b:ee:13:a8:79:d3:90:f2:da:92:e0:43:b6:
97:0b:bc:09:e8:6e:e5:11:55:70:12:bf:8e:ea:2d:30:b8:83:
78:4d:86:1a:5a:e4:bd:67:75:ec:56:44:42:6e:48:f2:9a:88:
a4:36:6f:95:ec:aa:9f:fb:95:c1:03:7e:7a:ca:41:1c:e1:15:
d4:a8:56:b0:46:9f:f5:50:ba:ff:d3:40:4c:0a:4e:f3:de:96:
83:00:3a:23:f3:a7:78:26:82:5d:41:d3:9c:f3:cf:e3:6e:ee:
71:6f:35:22:0b:0c:65:9e:32:11:bb:04:58:ac:69:21:5b:31:
6b:07:be:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 06:18:46 2025 by rpki-client