Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538313a333531333a3a2f34382d3438203d3e203136393039.roa
File: 326131343a373538313a333531333a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier: JWeHRm7AIM75+WZHuyaQuU+8waZUh5k0w9SkHDXP/vs=
Subject key identifier: 62:9E:46:4A:C8:BC:73:FF:11:E5:BF:54:96:F2:BF:90:E3:E3:FF:53
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 1788DD38AE9CEA1492F167FADD8F4AC45BCCCC70
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538313a333531333a3a2f34382d3438203d3e203136393039.roa
Signing time: Fri 20 Jun 2025 06:28:56 +0000
ROA not before: Fri 20 Jun 2025 06:23:56 +0000
ROA not after: Fri 19 Jun 2026 06:28:56 +0000
asID: 16909
IP address blocks: 2a14:7581:3513::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 25 Jun 2025 16:06:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
17:88:dd:38:ae:9c:ea:14:92:f1:67:fa:dd:8f:4a:c4:5b:cc:cc:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: Jun 20 06:23:56 2025 GMT
Not After : Jun 19 06:28:56 2026 GMT
Subject: CN=629E464AC8BC73FF11E5BF5496F2BF90E3E3FF53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:f9:85:4b:42:0c:3c:57:94:ba:d6:c0:98:eb:
d7:5b:10:07:04:6d:02:34:d0:6d:02:e8:2c:ff:a4:
e5:78:4d:99:f3:23:65:de:a0:d3:57:5c:a4:a9:63:
04:95:19:bd:d9:5f:f2:d0:91:7b:a3:ec:e8:6b:5a:
2f:12:09:76:56:72:ad:59:eb:b0:33:1e:83:de:10:
c8:8e:dd:5a:74:33:09:2c:4b:5f:b2:9a:7c:51:f0:
f6:9b:f6:26:5e:4f:ec:8d:66:7e:4e:b0:a5:8f:fe:
36:06:99:9d:21:e1:77:e7:ea:43:fc:f0:f3:d5:58:
0e:38:6b:21:c8:3c:22:97:68:db:0f:4c:c2:f8:03:
53:41:7b:6f:60:cb:24:57:18:d3:a4:c0:8d:45:53:
c7:4d:22:de:3e:c4:72:5e:8b:8c:ad:03:4f:6f:7c:
8d:46:02:fe:23:d5:7b:54:cc:63:be:d4:c2:3e:ac:
ac:78:7e:41:e8:77:ec:d7:e4:40:1b:24:66:7c:0d:
47:35:35:93:21:07:a2:c4:c3:95:ed:e6:5b:b0:f3:
2e:97:c4:24:f6:56:7c:e1:ec:8d:ca:49:90:e0:5c:
29:61:19:47:b8:a8:ca:e8:b2:69:71:ea:f3:e5:d9:
fb:1f:1a:1a:bc:dd:60:ef:09:e1:cc:23:5c:c3:16:
7d:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:9E:46:4A:C8:BC:73:FF:11:E5:BF:54:96:F2:BF:90:E3:E3:FF:53
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538313a333531333a3a2f34382d3438203d3e203136393039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7581:3513::/48
Signature Algorithm: sha256WithRSAEncryption
9a:9d:d6:c5:a0:67:cb:d7:a1:9b:5e:f7:32:a5:07:4b:29:dc:
00:cc:68:3d:72:18:6a:40:ad:32:c2:3c:59:60:bf:c7:76:43:
3d:aa:bd:2e:f2:96:42:bd:96:fc:73:8e:e1:f1:84:ec:3a:c5:
47:5a:89:01:c9:27:ff:e1:44:f6:cc:62:ed:b4:de:ea:60:e7:
da:fb:cc:67:56:05:96:3c:25:4f:00:52:bd:e9:c7:c3:cb:86:
93:f6:fa:c6:4e:c6:77:6d:e9:4f:fa:af:da:1b:91:3f:41:b0:
64:82:39:9a:03:8f:1a:cb:c7:17:e7:33:64:0f:94:1e:54:23:
77:af:80:5e:c2:00:49:2b:ef:84:05:56:7d:ff:65:99:18:7a:
44:7b:a7:ab:f8:56:bf:e3:63:01:85:2b:4e:0e:27:41:bd:7a:
f0:d3:ad:ef:e9:33:9c:40:6e:cd:fe:3d:c1:c7:70:a3:43:8e:
86:aa:ed:bb:eb:31:c1:46:c6:81:63:90:03:c0:53:28:9d:b7:
e1:ac:14:76:04:8c:8f:33:fe:a5:e7:e0:ab:3f:93:73:a5:12:
e7:63:9d:25:38:8c:05:35:92:36:a8:51:e4:b5:5a:dd:6c:ff:
72:8e:aa:67:8b:7d:da:77:89:e5:d2:8d:2e:d9:67:e5:6b:83:
ad:d6:93:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 23 23:52:09 2025 by rpki-client