Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538313a333532333a3a2f34382d3438203d3e203136393039.roa
File: 326131343a373538313a333532333a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier: wqncpvnSTTWRrdKoJ1mFi0GuAZQvED+iAftXLcTEqI8=
Subject key identifier: 88:DB:EC:59:6A:6F:2D:4E:DC:B4:98:66:F3:E3:F2:BF:88:C4:08:B8
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 2317AC04CB409169C8F387F8D99116BA60051038
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538313a333532333a3a2f34382d3438203d3e203136393039.roa
Signing time: Fri 20 Jun 2025 06:26:08 +0000
ROA not before: Fri 20 Jun 2025 06:21:08 +0000
ROA not after: Fri 19 Jun 2026 06:26:08 +0000
asID: 16909
IP address blocks: 2a14:7581:3523::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 25 Jun 2025 16:06:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
23:17:ac:04:cb:40:91:69:c8:f3:87:f8:d9:91:16:ba:60:05:10:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: Jun 20 06:21:08 2025 GMT
Not After : Jun 19 06:26:08 2026 GMT
Subject: CN=88DBEC596A6F2D4EDCB49866F3E3F2BF88C408B8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:f4:15:80:69:43:ab:d9:06:3f:90:79:f5:31:
41:e3:62:7d:ef:bd:92:f6:8e:19:c7:80:00:a5:fb:
78:d3:3c:bf:73:a9:7f:71:c4:15:36:19:33:0b:f6:
3c:b1:a4:71:20:18:f9:35:40:06:d7:e8:0e:1a:94:
62:1f:69:29:40:30:c8:65:c1:fa:be:ac:c4:a1:20:
0e:05:e0:8d:65:27:d2:11:94:59:9a:e3:f8:f9:27:
a5:d5:17:cb:d5:72:92:28:57:dd:59:5e:15:0c:55:
6f:e5:99:2d:48:56:68:54:f0:11:2a:17:e7:0b:6e:
66:f9:4e:0e:55:60:5d:67:80:ee:5f:b5:19:ff:bf:
fc:6a:ba:03:7a:fe:e5:ca:45:4c:e8:02:6d:52:a9:
4a:c9:aa:4f:6e:9a:37:38:1c:eb:64:78:0b:38:1c:
4d:f2:d5:74:e3:b9:15:4f:a0:d2:56:74:ee:0d:65:
72:4e:b0:f8:5f:c0:bc:37:ce:03:49:eb:48:b7:c2:
59:4f:4c:18:7a:52:b1:14:94:77:72:00:f5:b5:13:
29:23:5d:37:8c:7c:7e:bc:be:9c:0b:3f:c4:39:7f:
a9:bd:9b:40:05:cd:ef:63:b8:66:2d:31:83:2b:58:
3b:c5:63:37:32:c6:50:30:11:66:bc:c1:8b:c9:7e:
99:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:DB:EC:59:6A:6F:2D:4E:DC:B4:98:66:F3:E3:F2:BF:88:C4:08:B8
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538313a333532333a3a2f34382d3438203d3e203136393039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7581:3523::/48
Signature Algorithm: sha256WithRSAEncryption
83:d4:62:6d:3d:08:9f:eb:bc:7a:f6:0e:06:53:ae:46:dd:70:
6a:67:e1:c8:3d:21:b9:3b:9e:ce:67:3b:8b:f6:c4:d6:3c:7b:
1c:87:11:fd:d2:07:9c:a1:55:a5:6a:9b:f5:b5:81:13:7f:f2:
49:9b:3b:e2:b5:47:42:34:e5:c9:3b:99:93:38:7e:52:bf:38:
94:2b:7d:11:2d:8e:12:c4:1a:89:50:6d:f2:fa:61:f4:9e:16:
28:e2:5c:9c:f0:da:e2:c9:87:15:10:b8:c3:b3:6d:ed:ed:d3:
d4:b6:d6:d7:b5:26:5d:66:2f:4c:76:1a:33:14:2f:2e:67:73:
0f:d6:89:b8:82:3a:9a:57:30:54:3a:6c:98:78:c6:c1:d7:38:
b4:95:6f:b4:b9:32:2c:4a:a9:51:54:9d:8a:00:11:a9:29:5a:
6c:c5:61:9f:05:bd:e8:61:2f:c3:12:e7:58:9b:83:c3:14:cb:
e7:21:df:14:21:fe:fb:b4:00:5d:b3:2e:93:05:17:32:12:3c:
0a:bf:4e:4d:42:ee:b7:b7:b5:a6:26:56:8f:98:37:bb:1e:d2:
50:81:21:69:b3:86:95:1f:0d:af:06:9d:01:b5:3f:06:66:7c:
dc:f2:7a:f5:f2:41:28:45:19:e5:a1:a8:b1:92:e9:6d:20:19:
df:60:0c:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 23 23:52:29 2025 by rpki-client