Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a366531653a3a2f34382d3438203d3e203136393039.roa
File: 326131343a373538343a366531653a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier: zV26LT4pX7hAjR4xY1jbgDWbdcC97QeB+tb9bJbcElQ=
Subject key identifier: BC:56:AE:7C:83:13:5E:AC:AE:5E:20:89:E9:CC:D0:C6:CE:97:7D:98
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 4394AF0654C3E790F25D4FF89D3B798DBFC0F861
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a366531653a3a2f34382d3438203d3e203136393039.roa
Signing time: Sun 25 May 2025 13:54:02 +0000
ROA not before: Sun 25 May 2025 13:49:02 +0000
ROA not after: Sun 24 May 2026 13:54:02 +0000
asID: 16909
IP address blocks: 2a14:7584:6e1e::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 28 May 2025 07:48:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
43:94:af:06:54:c3:e7:90:f2:5d:4f:f8:9d:3b:79:8d:bf:c0:f8:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: May 25 13:49:02 2025 GMT
Not After : May 24 13:54:02 2026 GMT
Subject: CN=BC56AE7C83135EACAE5E2089E9CCD0C6CE977D98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:4a:46:31:c4:27:4a:7a:e8:c5:b2:6a:95:38:
f4:30:6e:26:c5:5b:01:f4:27:c9:50:a4:9c:25:18:
e3:e9:2e:ca:94:ab:f5:8a:26:98:e2:99:80:a3:4b:
a0:05:71:b7:fc:a0:8f:72:45:bd:92:9f:c0:f3:90:
d0:ad:7f:fc:1f:72:d1:88:ef:89:fb:3e:ad:ef:47:
a1:77:29:13:a6:fb:92:34:6d:1d:a3:38:eb:58:bf:
ff:8b:06:c6:ab:3e:89:52:c5:16:06:f2:81:1c:53:
ac:a9:46:d7:b3:a5:f5:b7:8c:db:c4:95:e7:5b:03:
61:58:e6:2f:7d:e9:6a:c0:e6:d5:83:5d:df:9f:0d:
dd:4b:bb:b4:ca:d4:c0:06:57:41:8f:fb:58:49:87:
c0:a8:72:7d:45:fa:d8:98:17:dd:db:e6:c4:b7:5d:
3a:f8:cb:b0:26:e2:40:da:14:86:c0:56:25:3c:50:
42:35:c1:5c:e9:34:92:e5:88:98:f9:97:46:e8:04:
8f:96:68:17:2e:23:62:91:9b:2a:f2:11:cf:f2:7f:
f8:3d:92:75:f9:19:82:40:97:e9:36:09:3c:c9:9c:
ff:c3:b9:b1:59:32:72:22:f2:34:69:59:c6:62:9d:
6e:c2:2f:9f:b6:82:e8:11:61:5b:e5:bb:bb:d3:eb:
2a:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:56:AE:7C:83:13:5E:AC:AE:5E:20:89:E9:CC:D0:C6:CE:97:7D:98
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a366531653a3a2f34382d3438203d3e203136393039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:6e1e::/48
Signature Algorithm: sha256WithRSAEncryption
17:c7:be:d9:1e:fe:66:89:1a:a0:83:54:42:25:56:30:fb:a0:
c0:a6:ff:1f:64:e8:45:61:d3:e9:a9:31:18:e7:05:94:67:85:
d3:61:ac:f2:c6:d6:a0:7e:33:00:2d:c6:b9:1d:d5:90:6d:64:
4f:ef:95:df:e6:58:43:f0:0a:f6:55:12:b1:f5:31:35:77:34:
5e:01:cc:e2:e4:29:27:64:9d:d5:6e:0a:6e:0e:e0:76:a0:76:
7c:37:23:27:20:05:1e:67:cf:a8:c8:8e:4e:9e:aa:6c:57:8d:
e5:0e:7b:af:89:16:2f:8b:b3:47:12:78:16:cc:2e:e7:3c:47:
cd:67:35:2d:0f:82:fe:24:51:33:dd:1f:6b:27:54:d4:22:e7:
c0:d5:5e:ce:2a:5a:ee:53:dd:18:b9:72:35:da:62:b1:65:07:
92:fe:e5:0c:ae:ef:31:a4:28:04:5d:8d:97:de:3b:a5:9f:81:
1d:d5:0c:5d:d5:4b:33:35:39:a5:67:da:7a:f4:03:92:a9:1b:
75:46:ec:26:40:9d:bc:a0:54:bb:3c:d7:2a:8e:e2:02:03:5c:
27:9d:6d:0a:54:61:e2:94:b4:f2:0f:7d:d0:37:1d:27:f7:75:
5e:e3:13:82:46:ae:7b:51:b5:67:75:13:6a:7f:d7:06:04:27:
1e:d8:7d:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 11:02:26 2025 by rpki-client