Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a366437343a3a2f34382d3438203d3e203136393039.roa
File: 326131343a373538343a366437343a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier: 1SqIicEn/QQTsuT0p7TDsLV63WcZ9p4LnCfrP0miaMQ=
Subject key identifier: DB:52:FE:D5:A3:E4:D1:50:44:19:D2:B6:CB:D6:29:4E:2C:CB:10:D1
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 3E68D4A1BA2F4BB197B643700557770B375A0E2A
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a366437343a3a2f34382d3438203d3e203136393039.roa
Signing time: Sun 25 May 2025 06:12:02 +0000
ROA not before: Sun 25 May 2025 06:07:02 +0000
ROA not after: Sun 24 May 2026 06:12:02 +0000
asID: 16909
IP address blocks: 2a14:7584:6d74::/48 maxlen: 48
Validation: Failed, certificate revoked on Tue 27 May 2025 06:30:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3e:68:d4:a1:ba:2f:4b:b1:97:b6:43:70:05:57:77:0b:37:5a:0e:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: May 25 06:07:02 2025 GMT
Not After : May 24 06:12:02 2026 GMT
Subject: CN=DB52FED5A3E4D1504419D2B6CBD6294E2CCB10D1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:ec:31:b6:5a:f4:15:dc:97:76:28:65:64:59:
21:a1:7f:60:3d:62:78:2e:82:c3:5f:b1:6c:64:b6:
75:3d:33:ea:77:4d:1e:23:a4:87:b6:2d:56:5a:75:
f5:f2:1d:da:94:7a:a7:50:e6:44:27:15:97:cf:ed:
05:ed:fa:da:b1:dc:80:65:16:82:f8:ee:ce:9d:f1:
13:4c:92:49:ed:e6:f7:9c:95:6e:4f:0b:8c:0b:83:
da:f0:b2:4a:af:32:d9:93:57:94:29:15:a9:38:a5:
f0:b8:f6:e4:93:88:f0:4d:de:e5:07:be:af:71:77:
70:46:9a:0b:fb:e1:cb:ea:87:f9:a8:d9:16:fd:9b:
ed:e8:34:48:f9:c3:70:38:e8:13:73:3d:f1:42:5a:
20:23:ba:b8:37:45:ba:da:86:66:95:75:ef:ba:f7:
38:01:3b:52:3a:de:ba:22:da:4f:7b:a3:71:87:b9:
66:d4:13:a9:49:6b:56:d4:f6:02:57:12:65:b1:5f:
6c:a9:be:2e:d8:2d:e2:1a:5c:a2:8b:de:82:b7:c1:
e9:ee:91:fa:a8:31:35:9c:f5:8a:2d:11:1d:66:ac:
69:a1:91:66:e7:45:e3:41:ea:4d:44:0c:46:ac:6c:
d6:44:37:fb:8d:8d:b2:a0:88:da:8c:f4:18:f3:11:
5f:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:52:FE:D5:A3:E4:D1:50:44:19:D2:B6:CB:D6:29:4E:2C:CB:10:D1
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a366437343a3a2f34382d3438203d3e203136393039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:6d74::/48
Signature Algorithm: sha256WithRSAEncryption
81:f7:31:db:e3:4d:88:8b:8c:19:94:45:09:a4:04:2a:90:d8:
97:c1:ec:78:ea:d2:a0:55:c0:08:2f:f4:17:07:c0:75:e5:8e:
02:00:dd:47:5c:76:f5:45:a8:7b:4d:a4:47:57:20:bf:db:8c:
79:a9:13:f8:c7:e5:53:ba:2b:9a:5a:bf:37:7f:46:17:dc:fc:
70:11:9b:25:b3:e6:98:8c:74:69:a2:56:f9:b1:33:a6:41:52:
9a:f4:3e:32:21:88:be:46:08:48:5c:94:d4:51:04:a8:35:84:
2f:c7:1c:e6:be:fe:b3:88:28:34:86:d9:ab:ee:3b:b3:07:d3:
68:eb:2c:1f:90:9e:15:46:1b:bf:c9:70:73:ad:80:36:4b:de:
ba:12:2f:59:41:5f:81:b5:9c:a3:3b:04:d7:59:06:45:5c:7d:
a6:2f:ad:ef:7f:60:9f:3f:a2:6f:dc:9b:8c:8b:a9:1e:f4:df:
8c:36:fa:a7:70:ba:5a:a3:9e:f3:50:c2:a0:88:1e:25:37:ff:
bc:7e:a9:a2:37:ba:54:9f:0f:8b:36:2a:1f:a1:25:91:10:1a:
b8:56:20:30:f4:64:72:b5:28:c3:e7:e4:33:78:fa:38:c4:d9:
8f:79:be:8e:2a:da:5f:bb:69:8e:01:7b:c1:af:f4:bd:de:84:
ac:4d:33:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 06:18:07 2025 by rpki-client