Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a366630613a3a2f34382d3438203d3e203136393039.roa
File: 326131343a373538343a366630613a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier: VYaAPvihaEYA1Q/n7S2fpN0RDJypxq/9jSXesxWKDVk=
Subject key identifier: A1:B1:F4:85:43:A2:FF:53:FE:3B:28:E2:EA:B8:91:F0:30:4E:5E:2C
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 4A9C7E135492612810F36FFD3AD76EE981EBBCFC
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a366630613a3a2f34382d3438203d3e203136393039.roa
Signing time: Sun 25 May 2025 13:48:02 +0000
ROA not before: Sun 25 May 2025 13:43:02 +0000
ROA not after: Sun 24 May 2026 13:48:02 +0000
asID: 16909
IP address blocks: 2a14:7584:6f0a::/48 maxlen: 48
Validation: Failed, certificate revoked on Tue 27 May 2025 21:54:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4a:9c:7e:13:54:92:61:28:10:f3:6f:fd:3a:d7:6e:e9:81:eb:bc:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: May 25 13:43:02 2025 GMT
Not After : May 24 13:48:02 2026 GMT
Subject: CN=A1B1F48543A2FF53FE3B28E2EAB891F0304E5E2C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:a5:e3:d7:c7:ac:ee:b6:62:64:18:83:53:68:
ac:b1:d2:33:bb:e0:e0:a0:96:11:fc:d4:3f:9e:8d:
78:1b:0e:82:7c:03:f6:0f:68:de:3d:61:78:8f:32:
07:a5:3e:6f:af:08:57:f2:5b:a0:33:44:47:44:02:
36:db:95:c7:2a:79:23:87:6d:67:37:2b:19:56:06:
46:90:5a:c2:79:6f:6d:94:7f:49:2b:6f:99:55:8e:
94:e7:5e:50:4f:98:16:ab:6e:06:72:9e:c4:d0:f0:
ab:ba:98:22:86:40:d4:a3:8f:68:ba:84:21:98:6e:
11:9f:a1:2c:1c:00:a1:7b:0a:c5:54:b6:52:90:74:
70:28:a8:3c:7e:25:cb:a2:69:15:e1:b9:4d:c8:ef:
cb:fd:d9:f8:55:ed:4c:c2:19:99:b8:75:0b:61:8a:
a8:34:a3:78:17:00:4b:ab:41:e1:dd:ad:bf:48:f2:
b0:a1:03:2a:bf:90:48:45:3e:aa:05:38:6f:e2:f0:
e8:a8:a3:92:40:9e:be:f7:a4:a7:01:80:9d:c8:8a:
a3:a3:ed:4e:67:08:4b:26:6d:e0:72:82:f5:27:1c:
7e:56:ce:b9:3e:fa:22:8f:9e:a4:a8:1c:bd:61:29:
1a:09:65:98:5f:65:f7:08:b7:ab:5c:6a:e4:59:01:
22:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:B1:F4:85:43:A2:FF:53:FE:3B:28:E2:EA:B8:91:F0:30:4E:5E:2C
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a366630613a3a2f34382d3438203d3e203136393039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:6f0a::/48
Signature Algorithm: sha256WithRSAEncryption
1a:8e:d4:e3:ef:3a:97:5e:45:af:22:59:db:f9:1e:0e:ba:6c:
fe:99:18:a7:aa:3d:b8:fd:8b:6b:90:0f:01:2a:c6:84:c1:d5:
49:c4:6e:83:92:04:fb:d4:1a:fd:f6:b6:b2:f6:b5:3b:37:12:
fa:ea:a6:1e:55:10:22:15:24:86:b1:0d:c1:8b:4f:1c:80:b6:
68:b7:71:be:58:fe:c9:8d:d7:3c:73:0c:75:cb:0b:c7:2a:ac:
11:9f:36:dc:b6:b6:56:e2:7b:ac:85:50:53:04:c5:22:8d:51:
05:7b:a9:84:b9:bd:dd:4c:5d:c3:57:8f:0c:55:1e:f3:62:2f:
14:1d:23:ea:63:f4:e1:fb:c5:16:48:9f:ea:71:87:23:4e:44:
ca:23:23:38:d5:b2:3a:a5:51:20:d2:b3:8b:99:f9:d4:49:0a:
67:37:fd:42:97:bf:d0:3e:06:46:53:db:13:a3:3d:c9:8d:94:
2a:89:0b:33:76:da:a3:44:68:df:7b:66:fd:47:ca:8c:8d:cb:
92:e6:bb:a4:a7:46:71:f9:a9:af:4e:29:1f:40:90:b2:e5:de:
18:3a:bc:49:66:af:6e:cd:9f:c1:34:68:ba:40:9a:c0:38:52:
a1:3b:b8:87:d7:fc:8c:39:16:41:b9:19:4f:31:d2:c5:92:b3:
5d:cb:77:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 06:23:42 2025 by rpki-client