Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a366635633a3a2f34382d3438203d3e203136393039.roa
File: 326131343a373538343a366635633a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier: Cm4y6qNWy35Ln1v6IYVd53SHoXqrOQeU13pvPoQFXSM=
Subject key identifier: 9A:89:95:B1:E5:58:58:B9:4D:C7:3B:20:B7:CE:94:03:6F:17:13:B3
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 317477ABFE0A7B13B2209AED657E6FCE7F1B9D8F
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a366635633a3a2f34382d3438203d3e203136393039.roa
Signing time: Fri 30 May 2025 00:12:01 +0000
ROA not before: Fri 30 May 2025 00:07:01 +0000
ROA not after: Fri 29 May 2026 00:12:01 +0000
asID: 16909
IP address blocks: 2a14:7584:6f5c::/48 maxlen: 48
Validation: Failed, certificate revoked on Sat 31 May 2025 17:16:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
31:74:77:ab:fe:0a:7b:13:b2:20:9a:ed:65:7e:6f:ce:7f:1b:9d:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: May 30 00:07:01 2025 GMT
Not After : May 29 00:12:01 2026 GMT
Subject: CN=9A8995B1E55858B94DC73B20B7CE94036F1713B3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:83:68:42:fd:99:c6:d1:aa:ed:d8:02:9c:7d:
71:ea:21:a8:53:63:68:96:ea:48:dc:f6:b7:e7:93:
b3:8c:4a:08:5e:6f:f2:86:5f:4e:20:a3:f6:54:c4:
f5:69:fa:06:52:17:d7:6f:76:60:85:14:77:e9:fe:
4b:42:fa:e4:cf:74:95:e8:a1:bc:c2:06:df:bd:f0:
32:43:87:c7:52:9e:f3:57:78:54:1c:a8:92:60:dd:
48:0a:6c:3b:c1:25:a5:da:ca:d2:d6:50:e3:68:71:
95:67:66:1b:4f:c9:0e:59:fb:d6:59:91:7f:b2:27:
bf:64:71:b4:db:eb:04:f6:e1:9d:88:a5:e5:2e:e3:
ab:7a:d4:17:08:97:95:47:78:08:c1:50:2b:52:b3:
6f:db:61:a9:f8:c6:80:ac:e4:ea:6f:8b:b4:29:9b:
ea:eb:91:f7:5f:3e:32:e1:01:b3:33:ed:7e:a7:ab:
bc:39:af:e7:4d:da:19:23:1d:37:6c:9a:61:56:9d:
17:4b:92:5e:a3:68:aa:4a:96:3b:e0:0a:37:a1:15:
8f:59:10:ee:b2:13:5e:16:83:86:de:52:2c:1e:5a:
6e:8a:7a:47:84:dd:00:93:0e:ca:30:21:00:7b:42:
81:f2:a1:3d:f4:06:82:65:6e:12:12:3a:f4:05:89:
0d:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:89:95:B1:E5:58:58:B9:4D:C7:3B:20:B7:CE:94:03:6F:17:13:B3
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a366635633a3a2f34382d3438203d3e203136393039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:6f5c::/48
Signature Algorithm: sha256WithRSAEncryption
0c:6a:87:2f:2f:43:ea:4b:1f:2e:44:9f:cc:75:9b:96:10:49:
87:c2:45:e0:d8:dd:20:36:e3:be:af:57:23:79:a2:72:d9:51:
3b:fd:b8:0b:08:a8:bc:35:4d:8c:2c:28:57:f0:77:d1:f7:3c:
76:40:8c:a1:b7:e0:24:3b:cd:83:81:e7:34:6b:c0:14:58:37:
66:f4:53:99:7f:4e:77:01:3a:28:6e:fa:6e:c6:27:7b:d9:5c:
5f:d5:a3:16:7c:90:4a:61:b4:c7:d5:f2:e3:05:50:e2:e8:a5:
ff:2d:c8:b9:37:7e:21:44:31:50:67:46:28:ae:de:14:8d:e1:
ea:52:c3:43:9c:3f:56:d9:17:61:ff:13:b8:61:b6:39:e8:71:
d3:2f:1e:44:b6:00:da:52:19:5e:79:01:2a:6f:bc:d6:69:ea:
74:2e:d5:80:ba:39:d6:b3:85:77:c3:0c:45:33:43:98:d2:e1:
28:45:fb:6a:17:01:bc:d3:31:d0:09:90:c7:23:cb:7f:ea:f9:
6b:b7:89:3b:fe:e1:57:d0:39:10:96:39:f7:85:1f:d4:07:24:
ec:b0:94:3c:e1:6b:70:aa:af:04:96:25:59:30:9c:3c:4f:18:
19:a9:8a:8d:ec:33:c2:c0:53:f2:21:61:45:10:84:07:65:f7:
00:8c:e4:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 06:24:46 2025 by rpki-client