Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a366464363a3a2f34382d3438203d3e203136393039.roa
File: 326131343a373538343a366464363a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier: Ysyd1XBhYgLg4ZnRUSRHNfqhaKIFBg062Kt0NSuBn/c=
Subject key identifier: EC:9C:57:39:CA:E9:6E:DA:96:F4:D9:79:93:49:1E:B9:D6:78:A5:3A
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 29D887C7810516CD0BB7B01EBF1E39706F2D3912
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a366464363a3a2f34382d3438203d3e203136393039.roa
Signing time: Mon 26 May 2025 03:48:01 +0000
ROA not before: Mon 26 May 2025 03:43:01 +0000
ROA not after: Mon 25 May 2026 03:48:01 +0000
asID: 16909
IP address blocks: 2a14:7584:6dd6::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 28 May 2025 20:48:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
29:d8:87:c7:81:05:16:cd:0b:b7:b0:1e:bf:1e:39:70:6f:2d:39:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: May 26 03:43:01 2025 GMT
Not After : May 25 03:48:01 2026 GMT
Subject: CN=EC9C5739CAE96EDA96F4D97993491EB9D678A53A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:4d:1a:d6:09:7b:27:c9:36:90:38:d9:c4:9b:
2d:8d:db:6d:98:4e:b6:0a:3c:c0:84:12:18:a3:aa:
6d:a6:f1:51:20:78:5e:14:cf:cc:b8:2f:76:01:5c:
9f:69:5d:aa:93:19:9d:0d:09:9f:d2:17:54:58:82:
6d:0d:a8:4c:32:f1:9a:47:ff:9e:87:77:46:cb:53:
b5:2a:fb:b8:47:a8:2b:f5:83:19:0b:8d:e8:66:1d:
f8:38:e9:0a:fa:26:eb:5f:86:63:43:ab:1f:bc:67:
ef:69:6d:2f:f5:a7:50:a9:02:29:16:d8:f2:53:95:
91:95:ed:3e:c3:26:f9:3a:37:1c:20:02:ec:da:c4:
4d:1b:e8:52:03:b9:14:04:c5:04:a4:b7:c9:f4:75:
6e:97:3a:01:34:eb:b8:32:d6:69:44:82:b8:6e:07:
88:1c:59:4b:d7:63:19:23:5a:b3:6a:99:b1:48:f2:
8c:1c:1c:0a:10:20:d7:83:58:e8:73:2e:c2:db:83:
4e:b7:d8:06:92:82:c1:69:36:38:f0:62:ee:22:79:
59:24:d3:6f:b7:53:69:51:70:ad:8f:c0:54:c5:59:
44:a1:98:b1:90:86:fa:be:ad:d8:81:e6:15:59:e0:
32:b2:d5:b6:fb:eb:62:33:27:33:5a:a7:c8:a6:34:
1d:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:9C:57:39:CA:E9:6E:DA:96:F4:D9:79:93:49:1E:B9:D6:78:A5:3A
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a366464363a3a2f34382d3438203d3e203136393039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:6dd6::/48
Signature Algorithm: sha256WithRSAEncryption
b4:62:2b:83:17:40:32:3b:eb:9f:6e:fc:ef:43:a0:78:8c:f4:
f5:f4:2a:ca:c0:e5:97:c4:63:12:94:9d:dd:ca:94:5c:cc:82:
e6:4d:04:82:bd:96:fb:f6:3e:33:1c:86:f4:a4:41:f2:4e:e1:
2c:0f:29:c6:56:e0:ee:af:eb:3a:04:95:30:be:7e:ff:d0:ce:
a6:0b:cf:c4:87:e2:ff:26:c5:6d:b7:56:db:ee:d3:32:2d:09:
fc:f2:1f:d4:b4:ba:c7:31:81:12:79:03:ea:3f:18:27:f8:41:
d5:da:7a:fd:41:4d:3d:7b:f1:06:7b:88:25:15:84:a8:9d:23:
60:a2:2c:48:41:20:b3:fe:f0:7f:7a:f4:d9:a7:2a:4c:76:0e:
3b:f5:a2:3d:c2:82:b0:07:11:5f:e0:fc:c2:59:42:8f:2f:85:
e9:d3:94:f4:0f:5a:26:28:ff:8b:5f:d3:41:b2:e2:fe:73:14:
6e:2a:69:fb:fb:66:ae:a9:8f:da:7d:90:54:78:6f:3e:7e:e9:
f5:65:7e:0f:7a:f7:3b:f7:e7:44:c8:20:de:65:28:29:31:63:
ee:21:e8:f3:5b:a3:75:82:73:df:11:8c:87:74:7b:44:f3:ab:
73:49:27:0e:43:35:b7:65:5e:70:36:fc:05:62:b0:af:72:ff:
ec:76:45:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 11:10:29 2025 by rpki-client