Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363330313a3a2f34382d3438203d3e203136393039.roa
File: 326131343a373538343a363330313a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier: vGoF469U0NcpEQtuPT+O4JqPSuyRiKgPsZEIWy7u77A=
Subject key identifier: 48:BE:FD:D9:1B:16:15:3C:40:33:5C:9D:F6:7B:D3:5D:D4:96:F9:3C
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 3F115842AAD8A795F9DD0006960F38EA6AA74F68
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363330313a3a2f34382d3438203d3e203136393039.roa
Signing time: Mon 19 May 2025 12:06:02 +0000
ROA not before: Mon 19 May 2025 12:01:02 +0000
ROA not after: Mon 18 May 2026 12:06:02 +0000
asID: 16909
IP address blocks: 2a14:7584:6301::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 21 May 2025 09:12:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3f:11:58:42:aa:d8:a7:95:f9:dd:00:06:96:0f:38:ea:6a:a7:4f:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: May 19 12:01:02 2025 GMT
Not After : May 18 12:06:02 2026 GMT
Subject: CN=48BEFDD91B16153C40335C9DF67BD35DD496F93C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:e3:90:fc:d6:c9:ba:55:db:8f:1e:44:df:10:
19:62:5c:81:6a:91:28:1f:de:a3:ef:8a:29:39:22:
a4:f2:f5:e5:e2:f7:ca:3c:54:3a:dd:66:ed:c5:46:
d7:81:a2:bc:3d:9c:bc:fc:99:25:39:b2:46:26:bb:
f2:8d:10:ba:e1:90:0f:f2:7e:7b:ba:2c:78:3a:0f:
e3:74:53:1c:90:60:c2:5a:40:ab:99:c8:33:94:ff:
86:3e:34:d2:c6:65:1f:17:36:74:bc:9d:74:7d:af:
32:cb:1e:d0:05:26:56:c0:8c:e5:4d:75:7a:c1:9a:
0a:97:7c:b4:2e:60:73:a8:4d:c4:75:51:61:87:7f:
86:68:e7:4a:82:34:6a:ee:c9:ce:c1:11:11:4b:49:
a7:34:36:7f:5a:12:08:c6:20:a6:07:8d:fe:bf:ee:
f7:e9:65:d5:12:72:50:c2:3c:a2:79:dd:ee:2d:d4:
f4:c8:f1:dc:b9:11:8f:97:15:d0:4c:e9:f4:29:a0:
42:1f:a5:b8:ca:ef:44:d6:75:59:cc:ec:e5:58:f0:
56:c3:4b:c0:3e:61:da:d3:48:de:ae:e1:ae:ce:b4:
51:4a:c2:38:46:0d:65:47:e8:14:8f:26:68:2b:2c:
2b:59:70:fd:44:3e:3a:a4:65:95:ce:3e:a6:5d:a4:
80:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:BE:FD:D9:1B:16:15:3C:40:33:5C:9D:F6:7B:D3:5D:D4:96:F9:3C
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363330313a3a2f34382d3438203d3e203136393039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:6301::/48
Signature Algorithm: sha256WithRSAEncryption
93:e1:98:4b:9d:7d:a2:ff:29:2b:15:d1:06:8a:3a:3e:e9:f8:
b3:b6:f9:4d:73:69:57:bd:25:a0:ac:10:b2:3e:d5:f5:07:7c:
aa:55:f9:23:ee:33:e4:d7:70:81:29:d8:62:be:48:b2:32:6b:
b7:2d:3c:8c:5c:73:96:c5:f1:45:31:fd:98:31:5c:4b:31:e8:
ef:66:55:e6:ac:34:60:11:db:49:df:23:27:b1:8f:55:27:02:
c0:10:d7:19:39:8d:94:2f:fd:45:fe:14:c9:15:39:27:9e:b3:
05:ea:64:6b:8b:34:4d:e3:f4:84:4b:75:97:50:ec:55:88:39:
be:e4:a9:67:17:1c:f6:62:96:d9:df:be:7a:c9:5e:00:04:f4:
78:b3:d3:3a:be:ca:d5:37:a5:30:50:dc:8e:c4:e4:7b:1c:d2:
45:be:aa:1f:bc:54:32:99:c3:8d:3e:58:61:ef:87:8c:43:79:
7c:c1:64:a9:18:65:da:18:bc:44:59:ee:2d:da:b7:d2:24:53:
5c:b6:87:3e:b6:26:8a:3f:f2:2d:88:de:a9:4b:2e:66:35:54:
d0:b9:1f:08:3f:a0:60:56:ca:f1:c0:b4:a2:31:4e:3f:d8:7c:
e0:f4:b7:93:1c:b4:54:56:73:3e:1a:74:d4:3e:36:15:dd:ab:
40:d8:8b:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 07:36:35 2025 by rpki-client