Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363264383a3a2f34382d3438203d3e203136393039.roa
File: 326131343a373538343a363264383a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier: W/dVRFeCJd2w/Eg1xOs6C5dYXZM6RDqBPvsuLz3Tucs=
Subject key identifier: 46:B4:F1:E4:25:ED:52:01:37:50:B0:47:DE:25:C7:C6:C2:7A:42:0B
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 41ADC3744A67227710BFF6B54D4D08C596F046FE
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363264383a3a2f34382d3438203d3e203136393039.roa
Signing time: Sun 18 May 2025 00:18:03 +0000
ROA not before: Sun 18 May 2025 00:13:03 +0000
ROA not after: Sun 17 May 2026 00:18:03 +0000
asID: 16909
IP address blocks: 2a14:7584:62d8::/48 maxlen: 48
Validation: Failed, certificate revoked on Mon 19 May 2025 20:42:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
41:ad:c3:74:4a:67:22:77:10:bf:f6:b5:4d:4d:08:c5:96:f0:46:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: May 18 00:13:03 2025 GMT
Not After : May 17 00:18:03 2026 GMT
Subject: CN=46B4F1E425ED52013750B047DE25C7C6C27A420B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:e6:60:cf:91:80:96:39:81:61:16:93:fb:f4:
f4:ec:7d:f4:a9:59:e8:cd:f7:5e:6a:98:cc:4a:7d:
93:9a:3e:f2:71:9c:08:fa:32:08:98:91:77:35:06:
07:69:df:3d:f4:7b:6a:ec:75:69:12:02:12:cd:65:
c2:43:87:28:16:f4:53:6e:18:89:d7:c4:2a:b4:1b:
ce:8b:6c:ed:87:58:bc:3e:b1:7d:ab:5f:21:fa:8e:
3d:0d:3a:ce:88:d1:e9:cc:57:8a:f7:67:71:84:66:
ce:fa:48:24:12:60:c2:d6:99:83:72:0c:f7:1e:08:
8c:cf:5d:cb:f0:be:94:49:db:d9:50:3a:bd:db:be:
35:d2:85:c2:72:12:f3:79:df:b6:b5:51:cb:7c:3c:
86:60:06:dd:b3:e8:e8:cd:84:a6:57:85:55:63:c5:
00:db:8d:5a:67:b0:05:79:3d:f8:d1:1a:4f:dc:9f:
1b:5a:4d:9b:19:3a:ee:b5:19:1a:9d:15:c8:09:8c:
72:95:18:01:36:c5:3c:88:d3:f4:42:d0:01:dc:66:
3a:2c:df:c5:01:b8:e7:cd:ac:70:45:21:a4:25:bc:
df:eb:4a:8b:41:06:a9:73:8e:a9:4a:fc:ca:10:fb:
1f:22:52:46:0b:a7:1b:49:7b:9d:df:7a:7c:22:6d:
94:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:B4:F1:E4:25:ED:52:01:37:50:B0:47:DE:25:C7:C6:C2:7A:42:0B
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363264383a3a2f34382d3438203d3e203136393039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:62d8::/48
Signature Algorithm: sha256WithRSAEncryption
70:28:17:0b:43:f6:10:6a:c8:b3:26:67:01:65:ef:6c:c0:a1:
05:53:36:9f:e8:e1:45:6c:72:ec:8a:60:d9:a1:cb:c3:7b:a7:
c9:7d:cf:bb:00:6b:f9:18:6d:f7:d2:2f:fa:60:c6:08:93:df:
5d:65:7f:5b:d0:6c:44:a1:d7:e0:b5:9c:7f:06:11:e7:a8:e4:
87:99:40:0e:a4:35:38:07:3a:5f:ba:a3:05:28:df:15:b5:fd:
df:3f:11:28:bc:08:c6:19:0a:23:49:4c:34:b8:0e:2a:c7:d5:
85:21:b3:e5:be:d4:b4:86:27:1c:f4:ce:4b:8c:71:c4:be:07:
ad:f3:9d:c0:9f:27:ce:bf:99:19:f4:71:03:f5:32:c1:62:b7:
6f:cc:ba:3b:84:6e:1f:b9:85:cd:4b:1b:27:ca:8a:98:13:ee:
98:1c:1a:fa:44:0c:b8:e3:c9:31:b4:ed:42:61:59:de:83:71:
f4:47:3d:40:0d:da:70:f1:1a:be:c7:ad:50:cc:a8:05:0e:c9:
55:89:07:29:75:47:01:a8:a0:21:5e:97:81:89:c1:5d:78:e0:
e3:e0:4a:1a:50:5c:41:0d:9f:df:d0:33:a5:71:3a:17:07:53:
7c:1e:72:59:2b:40:d0:fa:f4:5d:92:9f:02:57:0a:d5:9f:f2:
88:d4:5b:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 06:24:30 2025 by rpki-client