Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363066323a3a2f34382d3438203d3e203136393039.roa
File: 326131343a373538343a363066323a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier: 9rjMaD+11zi7a0s/wB5u3vPkp5fRugDQNUJu1ROka9Y=
Subject key identifier: 48:C6:7C:7F:C3:52:D3:2E:32:D1:82:52:F9:FA:63:88:C2:71:61:82
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 058206E92A4022066402C9EB756333DB54C52B38
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363066323a3a2f34382d3438203d3e203136393039.roa
Signing time: Wed 02 Apr 2025 18:45:23 +0000
ROA not before: Wed 02 Apr 2025 18:40:23 +0000
ROA not after: Wed 01 Apr 2026 18:45:23 +0000
asID: 16909
IP address blocks: 2a14:7584:60f2::/48 maxlen: 48
Validation: Failed, certificate revoked on Fri 11 Apr 2025 18:31:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
05:82:06:e9:2a:40:22:06:64:02:c9:eb:75:63:33:db:54:c5:2b:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: Apr 2 18:40:23 2025 GMT
Not After : Apr 1 18:45:23 2026 GMT
Subject: CN=48C67C7FC352D32E32D18252F9FA6388C2716182
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:20:80:9b:c8:ca:25:ca:41:98:72:a5:8d:2a:
56:a7:56:2b:90:4a:7d:d5:8d:3d:d9:85:d5:8c:6e:
b0:54:bb:42:84:e9:54:a8:bf:53:4e:ff:73:01:65:
ff:fc:9d:bd:60:e7:a8:6b:dd:bf:e4:b7:58:93:32:
cc:2b:98:3b:43:92:89:a2:b1:e7:bd:46:eb:50:e6:
7c:0e:26:f0:67:a3:fa:74:8b:69:32:79:6a:0a:2f:
28:ef:47:7a:05:3d:87:44:ca:1a:bb:4a:6f:6d:36:
84:97:0d:2b:20:42:ab:0f:e3:5e:bf:ad:c2:6c:80:
0e:2e:ba:4e:11:41:1b:d8:0c:38:6c:63:e2:f6:0c:
f1:39:20:5e:c7:79:5c:48:5c:ed:62:ac:86:13:14:
12:db:6e:15:ea:1a:2c:6c:cb:ac:ff:60:13:19:d8:
c3:3c:c3:fd:61:73:63:1e:fa:46:27:c6:9a:56:0d:
a1:29:ba:3a:a6:bc:3f:43:72:4c:78:67:f7:32:58:
11:4c:d6:f9:ae:32:0f:db:b4:f2:65:2b:19:3d:4a:
45:ee:11:d2:4d:82:f9:2c:46:06:fd:6b:17:14:56:
11:d3:7b:4d:6a:d5:27:78:2e:8f:84:73:66:33:28:
8d:cd:e4:8e:82:8a:b0:14:22:6b:1a:96:27:e8:64:
35:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:C6:7C:7F:C3:52:D3:2E:32:D1:82:52:F9:FA:63:88:C2:71:61:82
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363066323a3a2f34382d3438203d3e203136393039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:60f2::/48
Signature Algorithm: sha256WithRSAEncryption
31:1f:fd:84:a4:fd:80:0a:1e:ff:ec:0c:56:dc:53:21:ad:f4:
e4:7e:7e:d7:40:0c:2b:a3:70:92:8a:c9:33:3d:f2:9e:5c:c0:
a5:a1:61:8b:bc:28:c9:4d:7c:18:6b:dd:6e:2f:8e:d7:24:50:
0d:cf:dc:3b:42:bb:bd:8a:cb:31:3c:93:22:ec:00:8e:c4:3f:
1f:8b:65:b7:9b:18:af:f1:58:7d:d2:f5:73:e6:88:33:27:16:
0b:82:1d:e3:0e:95:0a:1b:b7:f8:47:19:80:01:28:e6:b3:99:
81:93:21:38:07:38:25:92:d0:f6:31:d3:43:4f:b4:47:f4:87:
d3:25:85:93:47:76:ee:28:bb:fa:e5:22:58:9a:92:e1:8e:25:
62:6f:65:f1:cd:e4:66:51:02:f8:06:da:b9:be:f2:37:33:b1:
ac:6f:87:d9:fe:3a:80:21:48:9e:73:8d:38:45:99:fe:01:ed:
8f:b1:60:bf:5a:cf:53:be:5c:d0:19:69:f9:5d:ba:d0:f2:63:
f9:75:58:5a:74:81:36:dc:21:60:d2:ae:f7:34:e9:ea:4e:ad:
a4:8f:df:66:23:6b:4b:b6:58:26:16:35:12:95:a6:d5:63:5c:
c2:81:1b:75:1d:4c:48:5a:67:83:37:95:cb:bf:87:cf:5d:fb:
c1:34:47:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 23 23:54:53 2025 by rpki-client