Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538313a333532343a3a2f34382d3438203d3e203136393039.roa
File: 326131343a373538313a333532343a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier: qTRerRjdQ8nEnYHgNLOYh2lTYajgcTQ4ZTSk5/bakac=
Subject key identifier: BC:E9:66:6B:3B:0A:20:A8:3F:4B:01:38:BB:37:0A:06:3E:38:26:4E
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 1DF6AEE6FC995E955711C47FDEE8976087A2A787
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538313a333532343a3a2f34382d3438203d3e203136393039.roa
Signing time: Fri 20 Jun 2025 06:31:01 +0000
ROA not before: Fri 20 Jun 2025 06:26:01 +0000
ROA not after: Fri 19 Jun 2026 06:31:01 +0000
asID: 16909
IP address blocks: 2a14:7581:3524::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 25 Jun 2025 16:06:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1d:f6:ae:e6:fc:99:5e:95:57:11:c4:7f:de:e8:97:60:87:a2:a7:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: Jun 20 06:26:01 2025 GMT
Not After : Jun 19 06:31:01 2026 GMT
Subject: CN=BCE9666B3B0A20A83F4B0138BB370A063E38264E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:4d:63:04:82:d5:b3:47:e7:61:2a:7d:0e:07:
fb:c7:55:7a:a4:78:30:2e:3f:9d:91:b2:1a:e2:e3:
ea:a5:0f:f5:aa:02:a3:0c:7d:43:8d:4e:93:8b:5c:
7e:1a:19:50:7a:4f:13:ef:33:ee:94:a1:a7:3e:89:
94:47:e5:e6:79:c9:dd:40:f8:ab:98:d8:9f:fb:70:
6f:ee:34:98:2e:27:67:6b:3f:d6:79:4b:01:45:6f:
8b:a0:95:17:e6:a4:0b:ad:cc:78:c7:4b:4c:64:fa:
8e:33:df:b1:0f:bb:01:76:aa:83:ac:c1:f2:5c:43:
a2:30:ce:f8:38:db:ec:a8:50:11:26:ed:01:32:4d:
e1:f9:ad:08:eb:a5:fd:34:93:dc:63:b8:e4:75:45:
5e:96:b8:f5:37:4b:9f:6c:78:f0:81:4e:04:50:8c:
78:ba:fd:72:bd:ab:dd:e7:a2:67:e4:e9:50:b4:2b:
9b:85:8e:45:f2:1c:92:d6:81:bc:f8:5d:ae:a9:69:
1b:99:36:eb:41:d5:88:52:c7:d6:8a:81:df:7e:d5:
8c:38:bc:a1:b5:a8:e4:12:96:70:59:84:31:c6:77:
29:ae:33:7c:5a:31:d1:ba:a4:4b:c0:e3:03:5f:69:
50:02:8f:14:95:37:69:57:9f:41:a6:b7:26:7d:00:
d5:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:E9:66:6B:3B:0A:20:A8:3F:4B:01:38:BB:37:0A:06:3E:38:26:4E
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538313a333532343a3a2f34382d3438203d3e203136393039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7581:3524::/48
Signature Algorithm: sha256WithRSAEncryption
1a:5c:09:72:ef:7f:ec:a8:c3:a2:2f:0a:24:80:ba:a2:b5:ed:
8c:fb:24:e3:9d:f3:19:00:a8:68:d3:80:2a:fd:b9:7b:fa:f6:
8c:a9:f9:fd:22:a0:81:4e:07:e8:51:b3:5d:4f:d1:00:be:77:
8a:e5:54:73:8f:4a:56:76:f6:b4:19:3f:0d:59:fd:d8:e3:3a:
07:16:5b:ee:73:46:a1:9d:43:d7:be:2a:4b:8c:8b:53:b2:72:
10:61:ee:d1:fa:ea:44:3e:22:2f:cf:13:f6:da:8d:b6:b0:60:
da:a5:ef:20:97:11:92:f6:65:87:60:92:73:90:3e:7a:d7:86:
25:23:25:f0:bf:73:f0:e1:c1:9d:ee:50:d7:a0:69:51:5f:2a:
f8:43:66:da:61:99:b6:98:53:34:37:ec:d4:8a:1a:06:92:3c:
3e:54:e0:17:bd:f2:22:eb:c2:5f:d6:c1:e5:c9:d6:f0:a8:64:
66:87:ff:0b:e8:5a:df:fc:39:d4:2c:4b:c7:87:73:dd:23:cd:
89:aa:22:83:08:5e:5a:d6:24:93:81:18:bc:ba:95:53:75:ee:
47:f1:c8:5d:66:ca:79:3e:71:7c:d1:31:49:28:ad:62:89:45:
1d:b1:ff:9d:75:bc:2d:b2:50:6f:de:65:b5:a5:e2:b8:e4:c6:
39:e7:df:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 23 23:52:40 2025 by rpki-client