Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a366438333a3a2f34382d3438203d3e203136393039.roa
File: 326131343a373538343a366438333a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier: GFiZgZy+2/UXFJgApB5x1fjOAQolq3xd/z6y3WfOapc=
Subject key identifier: ED:17:A7:10:E1:00:62:EC:91:BD:04:E5:04:C4:61:58:C2:B1:5C:22
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 2A8519BA2DABEF41884E1D8C2444068050761B00
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a366438333a3a2f34382d3438203d3e203136393039.roa
Signing time: Sun 25 May 2025 06:12:02 +0000
ROA not before: Sun 25 May 2025 06:07:02 +0000
ROA not after: Sun 24 May 2026 06:12:02 +0000
asID: 16909
IP address blocks: 2a14:7584:6d83::/48 maxlen: 48
Validation: Failed, certificate revoked on Tue 27 May 2025 16:18:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2a:85:19:ba:2d:ab:ef:41:88:4e:1d:8c:24:44:06:80:50:76:1b:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: May 25 06:07:02 2025 GMT
Not After : May 24 06:12:02 2026 GMT
Subject: CN=ED17A710E10062EC91BD04E504C46158C2B15C22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:e7:84:01:f0:e6:e8:3f:e6:ad:03:ec:c9:fd:
71:f1:39:dd:aa:d5:ec:1e:88:0d:98:4d:45:67:05:
6b:3b:dc:e4:d5:8f:6a:16:44:46:3d:df:62:1f:29:
8e:08:25:fb:e4:75:01:73:20:7d:75:d9:53:f8:3c:
7f:e8:04:82:dd:44:c5:47:18:d6:74:79:42:b4:d1:
0a:21:cc:c9:13:f0:a3:83:0f:2d:90:43:f1:ba:3a:
3f:97:7f:2f:81:85:ac:30:76:55:45:ba:69:78:2d:
24:9d:7d:dc:5d:06:e8:27:1f:71:b1:7e:03:8a:f0:
3d:4f:6d:c3:55:7a:46:25:16:a2:ee:a6:c7:6b:cd:
58:df:38:2c:aa:e8:a3:97:57:59:80:7d:ff:5d:5d:
16:66:33:ee:9a:0e:24:06:dd:6b:8d:a0:ad:8e:c7:
28:5f:fb:4d:aa:03:c5:0c:8e:ca:c4:c3:97:5c:15:
bf:61:7b:41:26:0c:56:de:13:80:02:46:2b:af:cd:
43:99:a8:f2:a2:10:e9:56:d7:66:d8:96:13:18:62:
07:85:ba:c2:f5:86:d5:61:68:29:60:e3:9c:bc:7e:
41:bc:82:64:56:c3:6d:28:1f:dc:be:6a:be:6e:50:
30:32:d7:04:ac:e3:5f:fe:b9:84:05:d7:fa:1a:8e:
0f:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:17:A7:10:E1:00:62:EC:91:BD:04:E5:04:C4:61:58:C2:B1:5C:22
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a366438333a3a2f34382d3438203d3e203136393039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:6d83::/48
Signature Algorithm: sha256WithRSAEncryption
0e:40:ce:64:69:52:b3:ab:97:ac:a9:68:7d:ba:fd:6b:6c:ac:
7f:67:ef:74:1a:5c:f8:62:f7:aa:08:e5:ab:c4:0c:27:58:65:
31:f6:11:43:8c:6b:24:9d:00:69:f0:11:12:00:40:98:69:3f:
a3:44:5a:65:22:94:2e:0d:82:ca:6f:19:c0:52:a8:d7:19:e3:
ff:00:87:17:11:83:96:d6:f0:40:fe:a1:70:f2:c3:ca:d7:8e:
a4:31:9c:46:f8:7b:43:0f:8a:c4:46:03:34:da:05:1a:56:92:
85:c5:05:e7:c6:8d:94:9c:bf:a9:b9:8d:0e:7d:90:a2:e7:70:
9a:4f:cc:07:18:31:6a:42:f4:05:68:81:94:a6:bd:48:3c:cb:
76:5e:12:1d:5b:e0:19:fe:e1:f8:05:13:60:32:72:d2:37:43:
62:ce:7c:25:40:b2:4e:6e:6e:2b:78:28:6b:03:79:7f:96:79:
e9:0e:20:5c:2e:18:bf:71:90:f7:fb:05:67:79:e6:eb:6a:e3:
6a:44:43:ad:d0:cc:ca:d3:4a:ab:f9:3f:0e:9f:29:8b:c2:e7:
72:f1:9a:1f:be:ba:fa:7f:e3:f8:fd:a3:7c:67:aa:5c:0e:e1:
21:a4:2b:4d:a1:5d:98:bc:66:21:bd:d0:d9:57:fd:64:f7:fe:
d7:ae:32:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 07:42:35 2025 by rpki-client