Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a366132663a3a2f34382d3438203d3e203136393039.roa
File: 326131343a373538343a366132663a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier: Gmm8mVgNb6Rj004OICqlRXdNWfED0naLQ4vg8bCbmC4=
Subject key identifier: 46:FB:11:A3:35:E3:A4:B6:13:6B:4E:88:75:86:7E:80:73:FF:38:F6
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 1F7153FA18DC6EEBA325BB966101AB79AF2237F8
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a366132663a3a2f34382d3438203d3e203136393039.roa
Signing time: Fri 23 May 2025 20:51:03 +0000
ROA not before: Fri 23 May 2025 20:46:03 +0000
ROA not after: Fri 22 May 2026 20:51:03 +0000
asID: 16909
IP address blocks: 2a14:7584:6a2f::/48 maxlen: 48
Validation: Failed, certificate revoked on Sat 24 May 2025 16:42:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1f:71:53:fa:18:dc:6e:eb:a3:25:bb:96:61:01:ab:79:af:22:37:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: May 23 20:46:03 2025 GMT
Not After : May 22 20:51:03 2026 GMT
Subject: CN=46FB11A335E3A4B6136B4E8875867E8073FF38F6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:1b:61:70:2b:c4:97:c3:4b:36:de:95:c7:68:
e3:99:f4:74:0d:c9:b8:a8:39:73:c6:70:95:17:75:
3d:f2:4f:4c:89:0c:31:e9:7e:65:33:8c:7d:35:fb:
d2:cb:af:cf:82:92:47:f7:dd:83:08:58:79:b8:8b:
3b:85:bf:10:84:f0:10:5d:25:47:e9:0f:52:f2:98:
eb:a6:be:df:5a:6a:26:ad:23:fd:73:4b:d5:30:d0:
e3:42:4e:46:47:cb:7f:40:5e:eb:45:34:c3:89:f5:
b9:ae:6d:93:48:2c:97:25:75:8f:3f:93:3a:ce:58:
54:7a:f9:45:ea:2e:37:12:25:c3:14:41:28:e1:dd:
d0:41:28:93:10:88:61:93:44:fe:89:76:88:b1:38:
c7:f5:ae:5f:47:76:6b:51:80:62:a3:47:7e:ff:a5:
c4:f8:94:ce:62:82:67:d8:be:15:73:22:45:e0:e0:
1d:08:be:b8:1c:81:df:ee:cc:b5:30:46:95:f8:ee:
98:32:fd:9f:00:26:0a:c1:92:97:6a:8f:a1:24:e3:
9c:85:7f:db:12:54:da:f7:6c:17:5b:4b:c4:59:e7:
11:1a:83:7d:4c:59:85:e1:46:60:b0:f3:e1:3a:ab:
43:d7:34:68:fa:53:1a:31:ba:6b:54:21:5e:76:a1:
ef:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:FB:11:A3:35:E3:A4:B6:13:6B:4E:88:75:86:7E:80:73:FF:38:F6
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a366132663a3a2f34382d3438203d3e203136393039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:6a2f::/48
Signature Algorithm: sha256WithRSAEncryption
5d:99:fd:d0:bd:ed:cc:bc:c6:09:69:b1:63:59:67:b3:7e:bc:
f3:a6:4b:65:bf:e8:88:b5:71:84:73:ad:d1:3e:22:68:a6:29:
19:6a:69:f3:29:d5:a8:43:1a:2b:e7:5b:b7:14:b8:8a:97:70:
15:76:46:2d:c5:90:83:24:ee:6d:cd:69:0f:4d:f0:d9:a5:bc:
25:d0:2e:57:dc:40:cb:b1:44:1c:e8:e4:45:53:81:0b:4a:35:
e7:5b:d2:9b:81:91:ce:cc:9e:01:0d:4c:2d:93:f8:42:2d:78:
52:12:bc:32:e0:70:ce:5c:a4:bb:c2:23:ad:33:86:38:71:6e:
05:02:06:ab:49:97:f4:57:9f:2a:a6:44:90:26:de:4c:65:ea:
a6:52:83:43:d9:81:47:b1:f8:64:91:66:c4:1d:07:a5:0b:e3:
33:a8:f8:01:84:56:78:67:57:f8:23:dd:bf:cb:14:04:6a:4b:
82:6d:52:95:df:7d:54:18:a4:e6:34:00:22:5c:42:7d:8e:29:
ab:46:80:90:6e:f2:c6:e4:50:fb:67:5e:a3:55:ba:e0:c7:18:
fc:14:85:7d:52:cc:90:35:a5:29:ab:f8:34:bb:bb:f5:2e:73:
27:52:e6:ef:4c:9a:19:71:33:1e:b6:e4:03:64:86:39:0e:39:
11:33:44:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 06:01:03 2025 by rpki-client