Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363263313a3a2f34382d3438203d3e203136393039.roa
File: 326131343a373538343a363263313a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier: WFj/4moWAYZP3A70x0FjpAfQnfeJ9QdG/oMJymVAXeg=
Subject key identifier: D6:F8:D4:7D:79:49:49:19:B1:7F:40:81:16:02:15:96:84:E1:44:33
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 4D02C9FBC23F307C4273CC619ED5DB6475810019
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363263313a3a2f34382d3438203d3e203136393039.roa
Signing time: Sat 17 May 2025 12:24:01 +0000
ROA not before: Sat 17 May 2025 12:19:01 +0000
ROA not after: Sat 16 May 2026 12:24:01 +0000
asID: 16909
IP address blocks: 2a14:7584:62c1::/48 maxlen: 48
Validation: Failed, certificate revoked on Sun 18 May 2025 23:06:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4d:02:c9:fb:c2:3f:30:7c:42:73:cc:61:9e:d5:db:64:75:81:00:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: May 17 12:19:01 2025 GMT
Not After : May 16 12:24:01 2026 GMT
Subject: CN=D6F8D47D79494919B17F40811602159684E14433
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:ae:4f:67:a4:c1:9b:f0:3e:0b:24:76:65:7e:
de:e9:bc:a8:e0:d9:3b:5d:ae:93:a7:09:31:4e:b8:
6c:17:b0:05:62:c8:40:c1:83:17:a3:11:ed:21:17:
c8:d6:ba:b1:d7:47:65:66:1e:c4:37:99:f9:ed:10:
d2:6c:94:65:7d:f5:fe:c2:ee:3d:47:c7:5c:d8:5c:
52:51:70:7f:ad:28:ee:1b:54:09:a4:5f:46:ce:da:
54:b0:92:c5:51:b2:47:a1:74:da:82:92:c0:d9:4c:
0b:9d:14:e0:a3:b1:2b:2e:16:98:e0:8a:0c:12:f6:
7c:69:67:5e:30:c2:79:f9:16:30:6a:e0:c4:f7:1b:
5e:c8:67:dd:6d:88:92:5d:92:bf:bc:49:c4:ff:1d:
ce:52:12:ce:17:e0:aa:58:be:44:0f:ab:24:79:aa:
44:a9:0e:80:92:b7:36:d0:af:c2:10:91:4f:8f:f5:
58:bc:ce:3f:bf:52:21:de:a2:bf:ce:60:30:b6:66:
24:b5:68:d9:67:74:6c:25:c9:d4:21:93:8d:26:7f:
52:2f:5a:17:53:81:eb:56:fd:87:00:19:33:63:d8:
09:c0:f1:d3:f4:82:62:b2:eb:24:00:55:1e:cd:bc:
31:95:47:37:0d:62:d7:15:2c:8e:69:3e:c3:3b:b4:
a3:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:F8:D4:7D:79:49:49:19:B1:7F:40:81:16:02:15:96:84:E1:44:33
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363263313a3a2f34382d3438203d3e203136393039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:62c1::/48
Signature Algorithm: sha256WithRSAEncryption
54:70:dd:b9:44:8e:8c:ff:0f:c5:f5:69:79:b9:29:66:a0:15:
c9:18:b0:3e:27:e0:b3:4c:30:ae:53:d8:0f:18:d4:7b:4b:1d:
41:bb:9a:fd:08:fa:7e:12:1c:0e:ea:4f:85:81:1f:47:d6:ee:
77:f2:d1:c8:17:f5:90:e9:b4:c1:79:2a:23:98:7b:ed:41:8b:
5d:65:35:3d:3c:72:cd:15:0b:07:80:f9:15:63:ec:66:94:ac:
27:b0:da:1e:21:57:df:be:a1:0f:8f:20:81:e0:4b:7c:29:33:
d5:84:23:9d:49:64:c2:b1:8c:d7:f5:a3:ad:c0:d2:69:0f:57:
8b:03:af:ab:cd:e9:4b:fa:44:e5:4c:dd:33:48:69:3d:f1:d2:
1a:c1:fd:12:45:26:96:d1:97:aa:79:3f:20:56:a0:e3:a9:4a:
18:af:d5:da:4c:f6:3c:39:67:13:87:8b:ae:68:e4:fb:1a:c8:
88:37:91:d8:5a:b2:6b:c7:fe:84:f8:ec:e4:eb:98:56:16:13:
6f:3f:e5:ab:2e:e4:f2:c6:78:84:27:91:a8:09:e8:05:9c:63:
2e:61:fc:53:72:ab:5b:08:a2:0e:2f:36:aa:5b:88:48:1c:31:
fd:3f:e1:a6:60:2a:5e:e4:d7:9f:49:1f:d5:e3:9c:5c:27:07:
b6:7d:14:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 21:50:35 2025 by rpki-client