Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a366533343a3a2f34382d3438203d3e203136393039.roa
File: 326131343a373538343a366533343a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier: wxg76drSvJ97MofpWxW7Ajl3HIDELoG2ztHuHmC4Pzk=
Subject key identifier: FF:83:4F:E1:DD:32:4D:39:EA:C1:4D:B7:CF:1B:86:BE:76:02:0D:EB
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 6796B07665C9D309061EFB39C583C781ACCB267D
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a366533343a3a2f34382d3438203d3e203136393039.roa
Signing time: Sat 24 May 2025 07:42:01 +0000
ROA not before: Sat 24 May 2025 07:37:01 +0000
ROA not after: Sat 23 May 2026 07:42:01 +0000
asID: 16909
IP address blocks: 2a14:7584:6e34::/48 maxlen: 48
Validation: Failed, certificate revoked on Sun 25 May 2025 05:30:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
67:96:b0:76:65:c9:d3:09:06:1e:fb:39:c5:83:c7:81:ac:cb:26:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: May 24 07:37:01 2025 GMT
Not After : May 23 07:42:01 2026 GMT
Subject: CN=FF834FE1DD324D39EAC14DB7CF1B86BE76020DEB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:c4:9d:aa:49:7c:50:7e:eb:43:e8:d8:a7:bb:
38:c5:0c:23:ea:27:fa:09:21:e1:4e:45:80:ba:14:
4b:d5:5c:10:41:49:97:94:7c:57:f4:8b:e3:8e:b7:
dd:61:5f:2c:96:19:c9:4c:2e:8a:68:7a:d0:e0:8a:
ad:73:0a:ce:78:95:ef:c2:07:b4:4d:9f:65:3c:c9:
8c:6d:ef:2b:4a:a3:93:c7:37:4d:f7:a9:ce:d5:9a:
d5:32:3e:0e:2f:6d:10:b3:a8:c8:b7:4f:ce:98:64:
89:e4:4b:46:d6:f0:14:5f:85:e9:c0:06:29:7f:65:
13:20:be:18:4e:3a:c9:aa:22:04:3a:88:14:87:55:
71:7a:da:ba:bd:c4:54:96:07:65:83:bb:57:b2:c7:
f5:86:06:0e:f3:17:9f:1a:93:75:5d:a4:66:a0:98:
9c:4f:48:d1:d3:4b:92:40:27:78:1b:ba:6b:d7:a1:
3d:1c:a8:52:92:e3:84:49:7b:c3:e7:9f:e5:bd:98:
e2:d4:57:98:f5:db:fa:87:7e:a7:04:ff:14:eb:26:
6f:64:88:26:fb:55:d3:34:3d:50:20:76:ce:34:1c:
29:aa:32:25:76:db:a7:e3:21:1c:e9:8b:b1:43:2b:
f4:33:71:8d:57:a3:97:af:8c:b6:25:2a:f8:18:e4:
b6:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:83:4F:E1:DD:32:4D:39:EA:C1:4D:B7:CF:1B:86:BE:76:02:0D:EB
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a366533343a3a2f34382d3438203d3e203136393039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:6e34::/48
Signature Algorithm: sha256WithRSAEncryption
67:53:87:04:81:f5:d6:7b:ae:e8:be:fb:a9:f2:1b:66:b4:52:
e5:61:25:2e:5d:a2:ac:7d:5a:bc:f2:e7:7d:17:bf:11:a0:08:
a5:90:bd:0b:06:d3:56:86:78:62:1f:d7:81:cf:0e:7e:92:b1:
45:88:c8:cf:d2:81:da:d9:4c:18:26:08:8b:6b:26:74:ff:a8:
2a:2c:9b:f0:d4:0d:a7:f7:75:7b:6a:db:b9:27:d1:a1:3d:15:
9a:22:c4:82:21:ee:bf:3a:f0:2d:01:9f:c2:8b:06:db:34:54:
81:77:5e:d1:e7:6d:e7:b9:f3:d9:32:c0:5a:4c:eb:82:7d:ca:
67:db:e7:18:f8:05:8c:69:4a:f5:04:25:72:e0:b5:ac:c3:eb:
6b:17:9a:bf:39:c3:62:5b:b0:0a:12:6c:bf:92:b9:c8:78:27:
3c:4e:07:8d:a6:f1:3c:c1:16:58:e7:9d:a6:38:d9:6c:f9:5e:
8c:2f:6c:62:03:18:b1:2a:57:67:ab:3a:81:d5:b8:a2:29:c1:
78:bd:17:23:67:3a:91:3c:76:15:2d:f4:31:b4:22:42:7f:3d:
f3:1c:e1:bd:0f:4d:96:37:7a:41:63:8c:b3:43:94:d7:82:d4:
9c:95:cc:ed:95:38:a8:73:53:e1:0f:ed:5c:09:07:65:ab:3c:
46:bd:d2:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 06:26:14 2025 by rpki-client