Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a366530363a3a2f34382d3438203d3e203136393039.roa
File: 326131343a373538343a366530363a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier: mSh7l/0oUlPwd9FZIQmXftb/BjPYGbPFKwDIXx2NIuo=
Subject key identifier: F2:96:62:EC:16:42:30:17:73:29:8B:C2:C7:2A:CD:2C:33:2C:34:89
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 02737A219C8BF29AD5D55DB2C04AA675E550021A
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a366530363a3a2f34382d3438203d3e203136393039.roa
Signing time: Mon 26 May 2025 20:18:02 +0000
ROA not before: Mon 26 May 2025 20:13:02 +0000
ROA not after: Mon 25 May 2026 20:18:02 +0000
asID: 16909
IP address blocks: 2a14:7584:6e06::/48 maxlen: 48
Validation: Failed, certificate revoked on Thu 29 May 2025 16:13:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
02:73:7a:21:9c:8b:f2:9a:d5:d5:5d:b2:c0:4a:a6:75:e5:50:02:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: May 26 20:13:02 2025 GMT
Not After : May 25 20:18:02 2026 GMT
Subject: CN=F29662EC1642301773298BC2C72ACD2C332C3489
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:82:cd:e5:0e:68:c8:ac:2e:3e:ac:e2:5c:78:
df:2f:d5:5b:e0:26:b1:48:70:9e:6a:a3:89:a5:25:
08:f6:99:2e:f1:bf:13:98:f8:15:3b:86:fa:a0:d7:
39:61:b7:bb:0c:6d:a5:ef:cb:df:03:34:22:8a:84:
6b:7b:03:a1:99:1c:4d:fa:23:47:c1:35:b9:63:d1:
56:fb:25:b8:3e:d2:11:5d:94:02:b8:e3:28:4d:b9:
05:78:8f:7d:04:ab:20:54:d3:c5:5f:b0:ad:02:d8:
ae:a8:0b:23:74:67:ea:80:7f:d9:5b:ca:1b:82:59:
b3:5c:d6:3f:a2:18:48:62:0b:03:9f:9b:04:64:57:
90:e0:c3:e1:79:ec:6a:e7:b8:b4:10:02:b4:70:96:
1f:c6:e4:b3:d7:57:f5:7b:6f:f2:57:5f:b4:1f:b4:
bd:ab:57:b4:b5:03:5b:2b:2a:fb:5f:e6:a5:09:90:
45:66:fb:f8:41:68:b5:cd:8b:ad:a1:e8:38:53:49:
f3:78:81:4a:4f:e3:ad:4d:e1:c0:63:05:23:a2:0e:
d4:de:5c:d2:7d:c7:af:56:5d:87:ee:a8:ad:94:34:
46:aa:e0:ed:91:f9:2e:e2:69:08:a5:a7:d1:5c:ec:
b7:78:06:0f:80:15:4f:49:d9:1b:5e:78:ed:ea:4d:
2d:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:96:62:EC:16:42:30:17:73:29:8B:C2:C7:2A:CD:2C:33:2C:34:89
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a366530363a3a2f34382d3438203d3e203136393039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:6e06::/48
Signature Algorithm: sha256WithRSAEncryption
41:f8:7b:98:c7:f7:08:db:d0:db:d4:14:58:ba:45:d6:45:92:
b5:a3:cc:31:84:90:cc:b3:53:08:4c:ae:f3:5c:a7:9c:36:9f:
3a:f3:25:ad:07:f8:31:5b:04:4b:a6:f6:83:4d:9f:9d:ac:0b:
21:d0:68:98:f1:b7:2b:42:80:fd:b0:86:cc:4f:14:5e:05:a9:
4b:38:55:83:8f:4f:43:58:34:eb:8d:8d:50:4c:bc:27:e5:44:
48:9a:7b:7a:05:11:97:80:d8:f0:0f:09:5e:98:f3:4b:83:ac:
43:85:d9:e0:52:64:74:88:af:50:b3:66:67:dc:6d:37:91:72:
dd:ef:04:c6:fa:5f:7f:3f:87:2d:a7:de:4e:6f:35:aa:15:02:
c3:39:20:93:9f:38:93:e8:c0:06:28:8a:cb:4c:0e:7e:7f:6c:
eb:33:43:90:f2:62:82:35:ae:35:ff:ba:ac:a7:f1:28:a4:ed:
14:5d:d6:3c:3b:57:05:dc:93:f5:03:2f:c8:86:ab:d4:5e:5e:
4a:fa:d8:bf:a6:26:af:9c:4f:27:a8:69:0b:a3:b4:4e:6c:a3:
64:dc:fd:33:66:da:65:4b:fb:d2:4c:07:02:06:dc:69:15:99:
0c:b1:b9:09:b1:65:1a:de:b6:1a:0d:57:19:70:4d:05:7f:2e:
9c:45:26:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 06:40:36 2025 by rpki-client