Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538313a333532653a3a2f34382d3438203d3e203136393039.roa
File: 326131343a373538313a333532653a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier: /6fdIqa8pL/7+anqVVOwrK8BMMST5OgCojcRYvBlXqY=
Subject key identifier: B8:83:CA:61:F8:FD:AF:6C:BA:13:F8:69:A5:99:A6:91:DB:5C:22:13
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 0AB8C39D1693D076A7DD4B259D5A23D50C3ED1F0
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538313a333532653a3a2f34382d3438203d3e203136393039.roa
Signing time: Fri 20 Jun 2025 06:26:14 +0000
ROA not before: Fri 20 Jun 2025 06:21:14 +0000
ROA not after: Fri 19 Jun 2026 06:26:14 +0000
asID: 16909
IP address blocks: 2a14:7581:352e::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 25 Jun 2025 16:06:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0a:b8:c3:9d:16:93:d0:76:a7:dd:4b:25:9d:5a:23:d5:0c:3e:d1:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: Jun 20 06:21:14 2025 GMT
Not After : Jun 19 06:26:14 2026 GMT
Subject: CN=B883CA61F8FDAF6CBA13F869A599A691DB5C2213
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:59:0a:7f:33:5b:79:57:94:6b:5e:59:b0:d0:
89:09:52:1c:3c:96:36:a0:96:8f:5f:2a:10:3f:58:
a8:4d:cd:07:c2:7d:8c:c5:5c:ce:b0:57:8d:93:d1:
37:fe:9b:2b:06:4d:66:12:7b:b1:69:61:e2:b3:ac:
4a:e0:cd:98:ac:49:7a:8c:ce:f6:f9:49:a0:5d:75:
ba:d7:c1:61:c9:c6:e7:c5:f8:b4:09:91:95:d8:82:
79:ec:b6:59:27:74:44:cb:1b:1b:6d:79:ec:15:5c:
c3:54:3f:6b:d2:64:e9:24:29:00:16:52:67:fe:5a:
57:a1:36:95:3a:c2:44:23:6e:66:24:68:99:f3:24:
78:f3:11:3a:d5:0c:91:1f:63:cc:ac:89:51:ce:78:
c4:86:43:f0:66:9e:5e:b2:52:7f:ae:69:52:7d:4d:
ed:e6:67:55:2c:6d:d3:45:94:bc:c9:19:ea:fe:cf:
a9:b8:ed:40:96:ed:05:5d:23:fd:ed:40:d4:d4:fc:
24:7a:bf:81:45:ee:09:25:76:ba:97:91:6e:3a:68:
96:c6:4e:a2:f3:1b:60:74:47:8a:90:22:9f:e6:b2:
a0:35:29:0e:e1:c2:83:fc:a5:bb:6c:60:0c:13:bb:
99:dd:2f:e2:5a:c4:cf:e6:f1:2d:f5:b7:53:58:9d:
2e:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:83:CA:61:F8:FD:AF:6C:BA:13:F8:69:A5:99:A6:91:DB:5C:22:13
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538313a333532653a3a2f34382d3438203d3e203136393039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7581:352e::/48
Signature Algorithm: sha256WithRSAEncryption
81:e2:cd:9e:a6:8c:ca:55:0f:79:be:04:c5:94:28:64:ca:f4:
c1:f5:46:31:05:1d:a1:88:47:f1:7c:cd:fe:29:53:0b:55:9f:
f2:c3:67:2d:f6:92:a6:b5:22:d4:36:42:0f:a8:7d:3a:ea:5b:
b1:7d:32:06:2a:51:6a:94:03:3a:77:30:1a:34:31:29:6a:e6:
38:6e:65:f7:ca:2a:06:ba:19:d1:07:92:e1:72:91:ce:23:d1:
6c:5b:7a:e7:8f:0c:ff:b4:05:a8:f9:39:13:ba:99:49:c0:48:
a8:3f:be:41:e1:6c:7c:b7:c9:ed:67:07:e1:89:6d:d6:38:b4:
92:6c:93:b4:82:59:d4:87:00:55:32:5c:24:f1:05:8a:e6:0a:
53:e9:00:d2:76:af:24:07:67:6f:ce:48:82:25:77:a9:ea:33:
02:3f:4b:c5:ba:49:c1:66:dc:71:64:28:5e:ad:2b:6a:28:b0:
71:3f:ca:8d:da:0d:96:39:fe:3c:77:cb:76:e1:72:1f:d7:41:
81:f8:4b:2d:66:0b:8c:ed:e4:fc:e8:cb:12:b8:30:87:d3:7a:
97:9b:ad:ed:4a:eb:54:9e:ea:bb:94:04:fa:b1:77:5c:9b:bd:
b1:ed:18:f9:f6:f4:1a:be:f6:c6:50:19:4d:4a:a5:54:c4:4a:
73:bf:1c:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 11:38:55 2025 by rpki-client