Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a366538373a3a2f34382d3438203d3e203136393039.roa
File: 326131343a373538343a366538373a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier: EpgM6BInpN8kxypS9N5Kl9929Ia8dusHicwsi/+d6Gw=
Subject key identifier: 1D:97:11:AB:FF:60:FC:3A:6C:94:B3:A6:27:BD:63:F5:5F:FD:7B:5B
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 2A6856C7A56296FE5F30A358EC5CF2733BC39C9E
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a366538373a3a2f34382d3438203d3e203136393039.roa
Signing time: Sun 25 May 2025 13:48:01 +0000
ROA not before: Sun 25 May 2025 13:43:01 +0000
ROA not after: Sun 24 May 2026 13:48:01 +0000
asID: 16909
IP address blocks: 2a14:7584:6e87::/48 maxlen: 48
Validation: Failed, certificate revoked on Tue 27 May 2025 21:48:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2a:68:56:c7:a5:62:96:fe:5f:30:a3:58:ec:5c:f2:73:3b:c3:9c:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: May 25 13:43:01 2025 GMT
Not After : May 24 13:48:01 2026 GMT
Subject: CN=1D9711ABFF60FC3A6C94B3A627BD63F55FFD7B5B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:a0:2f:7b:1e:bd:4e:7f:17:3d:f8:c8:b2:af:
55:30:d7:6b:76:10:4b:5d:17:f7:8a:70:75:a6:10:
e7:5e:10:fa:40:c7:59:31:11:08:17:fb:e3:53:e3:
81:8f:03:8a:fc:e3:dd:72:3e:32:52:d1:62:14:db:
13:89:28:92:72:1c:02:86:af:27:42:18:0a:00:15:
8e:f5:fc:de:5c:98:71:6f:4a:bd:b5:17:4d:da:57:
27:fd:15:93:25:19:c2:99:fc:3b:85:7f:60:ff:ca:
59:96:d5:0a:f9:a4:a7:e5:6e:42:18:2e:b7:bf:ca:
7c:fd:e7:b7:da:1c:1e:93:04:a8:a7:4d:50:a7:d7:
73:04:11:e4:6c:c5:4b:30:6e:e0:df:11:c9:cc:eb:
84:0e:c3:15:e3:c6:ab:20:5b:89:7a:ab:8f:1d:e2:
96:bc:07:ef:07:8b:c6:6f:8d:6d:bc:e5:06:51:b7:
e4:41:7f:01:fd:1b:c1:7e:2e:07:e5:62:61:fe:8c:
b4:bc:f6:e9:4d:15:a4:44:f5:35:73:fd:ea:ca:8c:
07:ee:06:36:b3:fd:09:d2:2d:cd:b6:67:9c:33:45:
bb:69:63:f3:4f:03:3d:44:a1:5d:a2:10:c7:4f:ef:
50:9c:dd:0b:fa:60:33:e1:b6:16:b0:4d:01:41:c5:
52:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:97:11:AB:FF:60:FC:3A:6C:94:B3:A6:27:BD:63:F5:5F:FD:7B:5B
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a366538373a3a2f34382d3438203d3e203136393039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:6e87::/48
Signature Algorithm: sha256WithRSAEncryption
2e:34:a7:f9:cb:21:11:50:c5:7b:ee:6a:2d:54:d0:d8:3e:e6:
c6:84:36:23:df:2d:10:5f:59:0a:65:2b:7a:28:2d:20:4b:f8:
6f:dd:9d:09:92:45:9a:ad:8e:38:04:e0:07:ce:03:8a:25:e2:
07:90:2f:80:20:f0:76:7e:e1:71:7a:62:6f:cb:ce:e8:cc:c2:
72:f1:af:e5:44:3f:4c:57:5b:72:26:93:3b:4b:a6:62:03:12:
0c:0a:29:01:39:d5:59:e6:42:1b:41:81:d1:aa:41:fa:3d:31:
f8:85:2c:3b:8f:6e:2f:3d:6b:8c:41:2d:d3:3f:49:11:ed:26:
d9:a1:02:db:f4:f3:61:3f:8a:c9:e6:ad:4b:b7:1b:b0:b4:08:
e5:ff:0b:c6:9d:c6:28:0a:e1:1c:2a:49:64:91:e8:32:cd:de:
a7:71:72:79:af:3f:e2:0d:2f:ba:44:22:44:66:e3:e6:58:96:
b8:5f:35:41:6e:82:57:26:e7:f1:d0:ad:c3:8c:10:a6:f4:28:
e5:b6:20:2d:d4:2c:91:d7:1b:a6:38:30:09:8e:50:01:41:1d:
a8:41:91:70:ce:33:da:cf:79:c0:06:80:b2:c5:bd:21:ce:47:
af:71:1c:4b:6f:03:e1:3f:bd:ad:d6:4e:1c:52:b4:a9:d0:ce:
fd:95:18:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 05:00:52 2025 by rpki-client