Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a366563633a3a2f34382d3438203d3e203136393039.roa
File: 326131343a373538343a366563633a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier: oXBalL7T5Y6nCa2BJv2vtF9cRIr8Ewu5JW7qrvXWC7g=
Subject key identifier: 9E:D4:55:37:F4:42:9B:94:A6:96:3B:26:CB:19:D2:F4:50:48:32:78
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 61072CDF9C1C9C2B697D400BF4D74C9891A607DC
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a366563633a3a2f34382d3438203d3e203136393039.roa
Signing time: Thu 29 May 2025 05:12:02 +0000
ROA not before: Thu 29 May 2025 05:07:02 +0000
ROA not after: Thu 28 May 2026 05:12:02 +0000
asID: 16909
IP address blocks: 2a14:7584:6ecc::/48 maxlen: 48
Validation: Failed, certificate revoked on Sat 31 May 2025 17:16:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
61:07:2c:df:9c:1c:9c:2b:69:7d:40:0b:f4:d7:4c:98:91:a6:07:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: May 29 05:07:02 2025 GMT
Not After : May 28 05:12:02 2026 GMT
Subject: CN=9ED45537F4429B94A6963B26CB19D2F450483278
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:28:95:57:cb:6b:90:0a:65:b4:16:f9:87:98:
d4:6e:6a:8b:b7:b0:d5:85:b3:8c:c0:e0:2c:4a:a5:
00:62:df:d7:4c:67:72:53:44:f6:42:76:66:07:31:
65:93:f5:43:b6:73:55:94:7f:2d:2e:12:d3:e4:9a:
00:94:67:28:ef:54:6e:58:a5:3a:59:40:1d:f4:4d:
12:ec:2d:06:34:47:50:c7:43:25:86:12:f5:d1:8c:
88:53:40:05:c5:c5:41:31:60:45:90:7f:5e:23:8b:
31:59:25:28:2c:db:c2:f7:1a:20:61:ee:1c:a3:c6:
e2:ca:f3:98:3b:99:d6:a8:63:53:e4:04:18:d7:ed:
57:df:f4:33:05:da:90:4e:98:4e:0b:01:2f:1a:ba:
ef:f4:32:ee:5c:83:32:d4:f5:cb:1e:9b:0e:ef:73:
e0:55:37:0d:0d:08:cf:33:24:3e:19:10:7a:30:90:
4f:93:ef:ec:79:9e:75:90:d7:a4:b8:c5:c7:52:17:
04:62:26:c9:0e:f7:28:0c:de:3f:6c:83:22:82:53:
57:7f:59:7b:4b:c2:4e:65:e4:21:5b:51:8c:12:d8:
a9:fe:82:e0:ac:3a:2e:81:0e:a3:e5:28:a6:f4:f4:
cb:76:a2:26:39:d6:bc:a2:7d:a0:79:62:c2:65:2e:
4d:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:D4:55:37:F4:42:9B:94:A6:96:3B:26:CB:19:D2:F4:50:48:32:78
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a366563633a3a2f34382d3438203d3e203136393039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:6ecc::/48
Signature Algorithm: sha256WithRSAEncryption
7c:d0:8b:41:da:7f:e3:33:0d:74:63:4a:98:a6:93:03:f3:94:
df:0f:cb:fb:b5:03:fd:78:e9:95:d1:72:51:34:74:22:30:2b:
4e:d8:73:d4:06:66:e7:8b:54:60:4a:14:0e:d7:dc:e7:c4:00:
b0:b3:7b:c0:fc:23:d3:65:3d:c5:75:b3:d3:c9:25:0b:ca:9e:
96:41:3d:e6:19:7c:3f:c9:d5:1b:3d:cb:16:01:25:1b:9f:97:
72:27:dc:5e:6b:a7:ef:16:43:34:0a:4c:3e:e1:af:18:32:46:
2d:62:60:80:7a:f5:b1:f1:f2:ff:7e:a3:53:cd:dd:84:af:29:
d9:2c:79:4e:aa:82:22:b3:67:24:f1:3f:06:ba:f4:f4:cd:7e:
48:ae:3b:24:ba:37:38:5d:7a:c2:77:98:8c:d5:3e:4d:72:64:
2c:74:39:28:17:b4:08:0a:3e:53:e3:6f:f5:4e:81:27:d0:5e:
2a:27:89:89:3a:7b:73:b8:0e:ee:f5:f2:fb:29:09:46:96:1c:
aa:8d:b0:cc:69:e6:4f:bd:d9:bc:77:3f:b9:75:06:f7:11:ec:
55:6f:76:a7:ef:b5:8f:4b:75:5c:f6:59:92:5d:28:99:77:40:
9d:a6:67:ea:40:d2:bc:2e:46:ae:aa:c1:cc:91:cf:b9:c1:00:
e7:15:8a:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 06:17:09 2025 by rpki-client