Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a366531633a3a2f34382d3438203d3e203136393039.roa
File: 326131343a373538343a366531633a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier: G6z85zJ65MCKvAXV6MjzNiertAwRU6wlz29VidxqMRg=
Subject key identifier: 68:BB:DE:A6:5D:A9:50:D3:E6:26:D7:D2:76:55:F2:15:19:CF:5A:15
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 2816068A41D26D5731EE360F45ED1F13D98A1307
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a366531633a3a2f34382d3438203d3e203136393039.roa
Signing time: Fri 23 May 2025 20:51:02 +0000
ROA not before: Fri 23 May 2025 20:46:02 +0000
ROA not after: Fri 22 May 2026 20:51:02 +0000
asID: 16909
IP address blocks: 2a14:7584:6e1c::/48 maxlen: 48
Validation: Failed, certificate revoked on Sat 24 May 2025 06:18:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
28:16:06:8a:41:d2:6d:57:31:ee:36:0f:45:ed:1f:13:d9:8a:13:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: May 23 20:46:02 2025 GMT
Not After : May 22 20:51:02 2026 GMT
Subject: CN=68BBDEA65DA950D3E626D7D27655F21519CF5A15
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:ff:0d:49:61:30:c3:fb:91:48:53:bb:83:d8:
df:89:41:f1:39:57:8c:d4:25:fd:6d:c4:50:92:21:
b1:06:32:e9:a9:ca:fb:2b:16:56:6d:39:0c:d7:99:
2c:e6:15:ea:48:2c:1c:9e:9b:53:80:32:b9:07:11:
6b:d0:4f:78:35:7c:f3:a5:43:91:1e:cd:4b:96:80:
58:3c:f2:ce:52:c1:bc:14:af:3b:f7:5a:d4:76:f4:
7f:b0:05:65:4f:48:c8:85:fa:18:a7:78:be:ab:19:
b4:9e:ce:09:02:ff:c2:6e:66:d4:1f:46:e0:c0:bb:
dc:a3:7a:52:04:30:df:d1:ee:78:ec:91:de:76:1d:
4b:5f:5e:4c:3b:41:28:2a:ba:02:7f:25:3e:ce:26:
ef:0b:b7:25:50:e5:0d:fd:d2:f3:06:6c:77:cb:b6:
ac:ab:e7:65:99:8d:87:2d:5c:e5:59:12:a5:01:de:
d7:e1:9f:b8:5d:42:70:cc:39:e7:31:47:3a:ab:31:
b2:50:39:75:50:68:18:13:f2:a4:71:8f:9e:76:2b:
15:d0:98:29:35:03:88:06:37:a6:24:5c:85:d0:64:
b2:b8:07:3c:44:2f:58:62:93:69:93:c7:05:07:1b:
7c:b3:46:e0:fe:4c:ea:e4:ef:dc:9a:26:0f:52:75:
8c:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:BB:DE:A6:5D:A9:50:D3:E6:26:D7:D2:76:55:F2:15:19:CF:5A:15
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a366531633a3a2f34382d3438203d3e203136393039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:6e1c::/48
Signature Algorithm: sha256WithRSAEncryption
52:46:20:92:36:09:15:83:36:f6:a0:ad:0f:1f:54:bc:74:1b:
c1:8b:19:60:54:09:ee:c6:cc:2a:a9:ea:c0:0a:10:e9:ad:fb:
80:e4:56:67:fe:97:46:1b:89:48:c9:12:c6:b4:ae:b7:cf:8e:
09:83:f1:ef:22:f2:cb:97:54:7d:fc:68:ef:51:d2:b5:96:71:
69:ca:26:57:6d:8c:b2:fc:3d:31:35:69:9a:71:7a:b6:d6:07:
10:f3:2a:f4:89:24:03:1e:31:99:4c:62:3e:b8:d1:3a:ef:40:
14:5c:1a:8c:8d:c7:d1:9f:f3:3f:c8:1c:4f:78:5c:35:78:3b:
46:1c:de:a6:00:fc:cb:46:b6:61:ad:af:4e:1c:67:5c:68:77:
ce:03:47:99:8a:f6:bf:31:45:d2:a1:1e:41:e1:8f:3f:6e:c0:
f7:3f:b4:04:da:a1:31:f8:6c:04:43:53:e0:20:d0:44:91:12:
d5:18:b7:60:89:7e:65:b8:ef:72:9d:c6:c8:5a:5a:fb:5a:67:
d5:93:d7:ba:d5:74:9a:70:23:27:13:67:63:30:b4:94:da:4d:
37:c7:0b:bc:cb:d1:21:56:c8:4b:4e:44:db:e4:f0:10:a1:a0:
13:2a:3c:3f:00:2f:fa:20:90:b2:37:73:b7:e4:3e:bc:03:d2:
1e:12:8b:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 07:26:55 2025 by rpki-client