Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a366365393a3a2f34382d3438203d3e203136393039.roa
File: 326131343a373538343a366365393a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier: DdVUPbX7acIMwjnfwlKpPBxQeOZyHnLnXW+dySGmyQw=
Subject key identifier: 20:85:C7:4F:88:BD:D7:86:7A:86:26:FB:0E:6D:C9:23:D4:F6:6D:39
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 06562C892F1874742EA96BC95F0C2DC751470F00
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a366365393a3a2f34382d3438203d3e203136393039.roa
Signing time: Sun 25 May 2025 13:54:02 +0000
ROA not before: Sun 25 May 2025 13:49:02 +0000
ROA not after: Sun 24 May 2026 13:54:02 +0000
asID: 16909
IP address blocks: 2a14:7584:6ce9::/48 maxlen: 48
Validation: Failed, certificate revoked on Tue 27 May 2025 22:24:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
06:56:2c:89:2f:18:74:74:2e:a9:6b:c9:5f:0c:2d:c7:51:47:0f:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: May 25 13:49:02 2025 GMT
Not After : May 24 13:54:02 2026 GMT
Subject: CN=2085C74F88BDD7867A8626FB0E6DC923D4F66D39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:ff:ba:7d:0f:21:57:17:c6:e2:56:a4:8b:f7:
90:9e:72:fe:55:01:f9:1f:ff:4a:19:b7:29:09:e9:
97:bc:f7:43:e3:3b:f7:30:ca:f2:01:75:cf:48:3e:
d2:84:47:b0:06:77:d0:b3:ac:13:c5:0d:49:1a:3b:
3a:31:f8:36:1a:18:5a:d6:1e:a7:31:b1:2b:73:14:
73:0a:a6:88:ab:da:0a:4f:24:7a:fb:80:7c:7c:69:
d4:b7:d3:93:c0:8e:a1:b0:a9:7d:59:e1:91:b5:60:
ae:b9:85:fc:42:33:01:09:9b:50:8d:b0:c1:86:f7:
d4:90:67:18:b4:f2:24:66:f1:f3:73:f9:c1:73:94:
ea:5e:6d:32:32:89:32:b7:2b:cd:96:41:1b:e7:db:
52:38:46:8d:75:85:18:fc:9b:52:b1:a7:ed:31:d6:
cc:c5:a6:50:9e:9b:fe:30:0a:7c:5d:f5:9d:59:07:
f5:4c:52:4a:72:ba:f2:24:22:9d:9e:02:c2:5a:28:
b2:56:5a:3d:c3:97:fe:0a:c7:4b:42:28:25:bc:99:
8e:73:93:56:7f:82:2b:b5:ff:a8:64:cc:fc:b4:52:
59:b6:10:38:3a:c1:2d:13:4b:04:cf:cb:50:af:4f:
e5:29:c0:e1:1a:b7:ce:32:89:94:af:43:8d:e7:9b:
27:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:85:C7:4F:88:BD:D7:86:7A:86:26:FB:0E:6D:C9:23:D4:F6:6D:39
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a366365393a3a2f34382d3438203d3e203136393039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:6ce9::/48
Signature Algorithm: sha256WithRSAEncryption
75:ca:a6:e3:a4:43:e4:2d:0e:4c:66:02:07:6d:13:e5:7b:ec:
1d:d9:3e:f1:e2:cf:d1:c5:2d:63:e5:f7:ae:43:63:4e:38:8d:
4e:13:67:cb:61:c4:0d:b3:54:6b:b7:b4:13:68:00:42:49:5d:
b7:92:7f:bd:22:9c:be:a5:dd:53:b4:ca:3a:4f:a4:cd:7f:02:
d8:bb:a6:79:f9:69:8d:1d:54:ae:a3:53:ab:e7:5a:b8:21:74:
d7:64:ed:17:3f:23:15:6e:23:0e:0b:3e:b3:b6:e9:69:80:8d:
38:fb:4a:6d:6c:38:0e:45:5b:23:44:ef:53:dd:2f:71:5a:39:
82:e8:a8:f2:cd:7c:26:d6:f5:0b:ce:fe:d3:56:3d:15:40:b2:
86:03:87:3c:da:fa:11:8a:c4:7e:45:ff:27:be:55:9b:ee:44:
0c:71:68:ef:aa:a9:d7:63:cc:b3:b1:71:12:4c:7e:26:ce:88:
b6:89:f9:6a:0a:00:f6:96:ed:40:88:23:09:ed:01:07:99:a3:
ae:e8:86:6a:78:19:b1:a7:c2:40:99:8d:95:b2:0b:c7:b1:e3:
88:10:c5:71:87:28:3e:f5:39:61:d7:1b:9a:5f:56:c9:5b:4e:
c0:7b:85:84:13:2e:cf:8a:75:25:15:07:35:4c:3a:f8:4d:17:
f2:f4:c4:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 04:59:57 2025 by rpki-client