Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a366532383a3a2f34382d3438203d3e203136393039.roa
File: 326131343a373538343a366532383a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier: lJQZOXi8grwhKmOgExlreqAQWsYXOrBENpKrC6oildU=
Subject key identifier: CC:1E:AF:07:C7:86:E8:D2:68:01:78:21:08:0D:62:B4:42:8D:13:42
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 420E6767E650C9B54EE7EF9ED36DADFD5A8119FC
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a366532383a3a2f34382d3438203d3e203136393039.roa
Signing time: Mon 26 May 2025 03:48:02 +0000
ROA not before: Mon 26 May 2025 03:43:02 +0000
ROA not after: Mon 25 May 2026 03:48:02 +0000
asID: 16909
IP address blocks: 2a14:7584:6e28::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 28 May 2025 20:48:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
42:0e:67:67:e6:50:c9:b5:4e:e7:ef:9e:d3:6d:ad:fd:5a:81:19:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: May 26 03:43:02 2025 GMT
Not After : May 25 03:48:02 2026 GMT
Subject: CN=CC1EAF07C786E8D268017821080D62B4428D1342
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:7b:ad:93:f1:79:57:31:cc:d9:70:79:50:f2:
dc:70:40:45:0f:ba:6f:7c:67:4a:16:12:93:85:cd:
0c:88:ba:02:56:14:49:59:44:80:e9:30:8f:91:df:
e2:de:8e:07:5f:f9:6c:d9:45:3f:78:7e:b5:99:7c:
17:f1:7e:0d:3b:53:e5:f8:68:de:d1:16:a7:95:ad:
2e:5c:12:fb:06:ff:f4:9e:3b:20:11:93:51:d5:06:
50:fa:ac:ae:d1:62:a0:51:66:cd:42:6d:68:8b:9c:
51:52:97:ca:1a:cc:2d:b1:ed:e7:41:4c:38:01:62:
c3:d3:12:85:23:c3:a1:41:15:bf:8c:e4:02:26:0d:
e2:c6:33:08:cd:44:46:a3:71:17:76:68:04:a0:10:
81:af:40:a2:5e:6c:14:5d:b9:7b:19:17:77:52:ad:
77:4b:cc:4e:1e:d1:b5:47:c5:d5:23:29:9f:5e:03:
48:6a:c2:d4:d5:67:cd:b0:f2:ff:24:d3:62:8b:be:
24:87:b0:0e:ed:e2:da:1d:8c:5c:7b:4d:44:53:ba:
d3:bc:16:9a:16:fb:6b:fd:7d:ac:27:e3:12:01:6f:
d3:f1:ea:11:04:5c:ae:c3:bb:45:11:63:3d:65:f9:
ca:a4:76:43:dd:ec:7c:25:6d:1a:1a:94:71:d0:66:
51:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:1E:AF:07:C7:86:E8:D2:68:01:78:21:08:0D:62:B4:42:8D:13:42
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a366532383a3a2f34382d3438203d3e203136393039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:6e28::/48
Signature Algorithm: sha256WithRSAEncryption
0f:2c:57:30:e0:ca:ab:68:8f:2c:a0:44:35:4a:f5:b8:86:a5:
1b:12:f8:a5:39:7d:c6:9c:b2:b6:ce:05:6a:30:7e:1c:a5:70:
95:17:63:17:3f:dd:19:28:64:8a:20:dd:42:4a:95:da:58:88:
5c:85:1d:73:b7:ff:0c:fb:4d:6f:df:6a:c3:e0:18:40:2c:69:
6e:07:34:e2:a1:aa:98:70:58:67:5f:a2:a1:46:ba:5e:b8:69:
74:f9:e3:ec:69:e3:27:50:65:50:eb:4c:2b:29:3d:a5:e7:26:
cf:b4:66:ee:53:2b:a0:a6:a2:8b:66:ed:68:ab:79:14:17:68:
b7:8c:a9:fd:3f:b5:f3:5b:e3:de:fd:56:62:fe:f8:2c:8a:ed:
88:c5:e8:82:c9:63:83:a1:cc:9a:4e:9b:7b:00:aa:ec:91:e1:
23:c5:64:4d:25:54:48:90:76:fe:05:42:53:8e:c1:ea:cf:e1:
98:bf:3a:e5:9a:5f:ce:50:6c:e2:fa:98:d0:75:b7:f9:ca:5e:
21:4c:1a:35:c7:0a:28:10:97:80:76:59:0b:19:b4:a1:8b:6a:
4d:58:83:0c:e4:0c:57:d8:e5:ff:07:63:19:d0:e9:e6:3e:f9:
c7:ff:95:b9:9e:30:64:fd:60:01:b8:94:f6:38:f3:ca:5d:ea:
ca:38:9d:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 07:37:36 2025 by rpki-client