Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a366632633a3a2f34382d3438203d3e203136393039.roa
File: 326131343a373538343a366632633a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier: L0DH0XFYnlayuLVrkrrS0V7x5KJjFPlnWdhEr2NwZKs=
Subject key identifier: EF:63:50:30:47:0D:47:22:0B:1F:E1:EB:C0:88:31:09:1E:05:0F:1A
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 771741B8F2A13A74D8A86FE572640669836D69F2
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a366632633a3a2f34382d3438203d3e203136393039.roa
Signing time: Mon 26 May 2025 20:18:01 +0000
ROA not before: Mon 26 May 2025 20:13:01 +0000
ROA not after: Mon 25 May 2026 20:18:01 +0000
asID: 16909
IP address blocks: 2a14:7584:6f2c::/48 maxlen: 48
Validation: Failed, certificate revoked on Thu 29 May 2025 23:54:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
77:17:41:b8:f2:a1:3a:74:d8:a8:6f:e5:72:64:06:69:83:6d:69:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: May 26 20:13:01 2025 GMT
Not After : May 25 20:18:01 2026 GMT
Subject: CN=EF635030470D47220B1FE1EBC08831091E050F1A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:85:47:7c:99:f6:28:4b:74:d1:5a:38:b3:73:
e8:41:fd:c9:b1:3d:bb:29:9a:46:90:ed:5d:5e:98:
e8:aa:20:2c:4e:c5:1a:67:84:ee:65:42:df:ab:14:
ea:a6:59:6d:b7:0a:1c:aa:cb:6b:b4:a9:ba:e6:8c:
21:08:bf:f4:c9:35:3c:41:8d:bb:56:c5:ab:fd:f4:
6d:67:78:08:a1:e8:c4:cd:8c:1f:92:f3:7e:46:59:
04:21:90:35:66:e4:12:4b:e1:98:dd:0d:ac:9b:0c:
67:d8:79:04:b8:cf:c2:3a:01:8c:2c:fd:1f:51:44:
8c:f4:f3:e3:2a:79:20:d5:99:14:97:00:5a:bc:62:
12:7b:36:a5:a4:59:57:8d:f6:66:10:01:56:8f:53:
05:b3:03:7e:fd:e2:89:c9:10:76:30:77:f8:2e:8b:
d0:ee:af:d4:b8:67:e6:3f:d5:b0:5d:01:26:4b:8f:
8f:ef:44:37:9d:d2:cc:aa:39:4c:37:e2:d7:04:87:
99:e7:d4:38:1e:8f:96:13:92:28:2b:6a:c2:04:6b:
20:f1:af:70:cc:5b:13:7b:ea:b2:08:6e:56:73:db:
cf:13:f1:41:36:43:bc:ed:47:49:c8:67:1e:6b:65:
56:a0:83:b9:47:1b:d8:fd:b0:9e:ef:0f:45:f3:99:
de:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:63:50:30:47:0D:47:22:0B:1F:E1:EB:C0:88:31:09:1E:05:0F:1A
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a366632633a3a2f34382d3438203d3e203136393039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:6f2c::/48
Signature Algorithm: sha256WithRSAEncryption
b8:6f:ff:c7:f4:64:88:00:e4:3c:dd:d9:0f:8d:d1:02:74:44:
eb:67:4a:d9:65:ad:05:de:07:5f:1b:57:49:78:ee:2a:f5:ab:
d5:5d:e1:fd:56:fa:ee:f5:9f:8f:e5:d5:5f:16:14:e6:e2:2a:
4e:cb:80:b6:59:a7:e1:70:1f:4a:d5:40:d0:5e:72:c7:50:98:
be:39:df:c0:59:ad:44:b8:25:4f:6a:36:8e:5e:8a:09:8d:0a:
24:28:1f:42:dd:8b:d1:d1:61:1c:4a:d6:b4:cc:fa:99:1e:5e:
1e:ca:0d:e0:7d:6b:a4:a7:04:4c:d7:1f:c1:35:1c:37:9b:82:
56:4c:a6:b4:38:4f:1f:54:f6:5a:1b:fd:7c:76:6b:fe:1d:c7:
35:ec:a3:97:ff:38:47:7d:a5:45:e3:2d:9f:32:e4:d3:21:39:
06:a4:d7:c2:c7:41:81:84:51:d6:af:ec:25:5b:6c:62:aa:92:
55:16:41:bc:e9:9f:6b:b8:ec:fd:e9:27:05:f7:99:94:66:e6:
eb:a5:02:7a:3d:0d:ea:6f:e6:c9:44:dc:23:8a:1d:30:71:7f:
22:01:c5:bf:13:01:58:c9:75:d8:ea:79:b0:c3:16:29:ad:99:
fc:c3:db:1e:21:3a:38:34:41:59:ed:00:54:bf:b8:b6:fd:32:
43:98:98:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 07:32:53 2025 by rpki-client