Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a366462643a3a2f34382d3438203d3e203136393039.roa
File: 326131343a373538343a366462643a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier: wPWVaq0+5AxFfS3sVkbc77KbGDuJ4XL1BA5Y4duXwi8=
Subject key identifier: 4F:20:D8:8F:A1:41:57:46:0B:76:F6:8E:0F:AB:C6:04:6E:58:47:42
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 6CB5493F822DBF0E48038AA19179270791C549C8
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a366462643a3a2f34382d3438203d3e203136393039.roa
Signing time: Fri 23 May 2025 20:51:02 +0000
ROA not before: Fri 23 May 2025 20:46:02 +0000
ROA not after: Fri 22 May 2026 20:51:02 +0000
asID: 16909
IP address blocks: 2a14:7584:6dbd::/48 maxlen: 48
Validation: Failed, certificate revoked on Sun 25 May 2025 02:36:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6c:b5:49:3f:82:2d:bf:0e:48:03:8a:a1:91:79:27:07:91:c5:49:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: May 23 20:46:02 2025 GMT
Not After : May 22 20:51:02 2026 GMT
Subject: CN=4F20D88FA14157460B76F68E0FABC6046E584742
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:b2:06:60:04:d8:c8:bd:a4:89:97:50:11:c4:
78:5b:89:fb:62:cf:ba:3f:e1:26:7d:27:19:e3:c1:
d3:cd:f6:55:e7:27:b4:06:94:4b:13:25:77:bb:20:
5e:cf:20:a8:cb:f7:e6:99:08:fe:46:52:6f:f3:33:
f6:3c:a7:39:46:ef:2b:06:ea:31:26:21:e3:2b:ec:
5e:30:03:0c:a7:09:02:83:7d:6b:04:29:0e:20:23:
50:35:d9:cf:36:b4:db:ca:d0:6a:6c:6f:9d:fd:e6:
71:f9:84:12:52:7f:56:52:91:3c:2f:93:18:72:76:
75:61:cc:9b:2c:68:fb:71:e9:74:38:11:f5:78:f9:
e6:07:8a:c1:4a:4c:88:e4:63:c5:1d:5d:96:f8:dc:
b4:25:e7:df:3d:5a:29:f0:a1:b6:f0:10:c1:af:b4:
4e:b9:e0:b7:6a:43:31:67:9a:1e:00:c6:a1:5d:f6:
98:12:41:4c:48:5f:3c:c8:14:65:1b:66:bd:30:12:
b1:58:61:47:76:b3:41:01:d8:40:52:11:d5:46:22:
c4:bf:1e:d5:67:2b:4d:8e:3f:ef:9e:90:df:22:fc:
46:69:5c:7d:32:14:cb:a3:10:66:4b:bb:97:9b:50:
7d:d2:4b:d6:18:0b:d8:64:eb:e0:9e:6c:e1:a9:8a:
15:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:20:D8:8F:A1:41:57:46:0B:76:F6:8E:0F:AB:C6:04:6E:58:47:42
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a366462643a3a2f34382d3438203d3e203136393039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:6dbd::/48
Signature Algorithm: sha256WithRSAEncryption
79:a9:38:e2:92:9f:a5:3a:13:52:98:fd:bd:8e:0b:fe:b8:43:
b9:7f:e9:f6:52:e4:df:c2:6d:f3:7c:8b:32:fd:99:4e:e6:f7:
d6:3c:97:77:50:a7:49:f8:d0:ec:00:73:5f:3e:f7:ae:38:36:
af:9f:c4:8e:62:12:b8:9f:9b:68:b9:12:44:67:62:61:9a:ec:
df:66:87:00:77:fc:ee:1d:15:15:ef:9c:a6:9e:16:9e:45:4c:
fa:25:ab:66:f6:11:3a:d2:14:53:b5:2b:31:bd:73:13:04:ec:
b8:2e:e4:d5:37:1f:6b:58:5e:7c:4d:41:fc:e6:b3:46:59:eb:
05:bd:b8:c0:dc:8e:b2:c9:de:be:de:0d:56:47:76:bf:16:0e:
16:5c:99:e5:84:95:f7:b9:0d:50:80:5c:48:1f:1d:c8:33:38:
b4:69:96:0a:81:f9:d9:fc:f5:b1:9d:37:b1:50:6e:43:c8:05:
0d:6a:9a:3e:57:ad:e3:58:5d:c4:cc:7e:23:02:a4:9f:e9:37:
b1:22:67:2c:99:6c:ad:9c:fd:b8:40:27:10:5b:e6:42:aa:cf:
8d:a4:95:f1:13:f9:06:4b:3b:ae:d4:5c:2f:28:f8:2c:06:47:
42:29:7a:a5:9c:fa:c1:2d:41:40:f7:ba:7d:ab:37:a3:18:80:
e7:83:81:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 05:59:07 2025 by rpki-client