Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538313a333535653a3a2f34382d3438203d3e203136393039.roa
File: 326131343a373538313a333535653a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier: CRCmvoPyQdYa9CB+sQWepQgajqpaFhWw8N6YpD/gIoY=
Subject key identifier: C9:B0:A4:6F:C2:D1:34:0A:5B:B2:FD:5A:D6:52:57:6E:F2:9A:14:0D
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 563AD8BC352F8CBB319D29867FC0BD986C63EF1A
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538313a333535653a3a2f34382d3438203d3e203136393039.roa
Signing time: Fri 20 Jun 2025 06:24:53 +0000
ROA not before: Fri 20 Jun 2025 06:19:53 +0000
ROA not after: Fri 19 Jun 2026 06:24:53 +0000
asID: 16909
IP address blocks: 2a14:7581:355e::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 25 Jun 2025 16:06:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
56:3a:d8:bc:35:2f:8c:bb:31:9d:29:86:7f:c0:bd:98:6c:63:ef:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: Jun 20 06:19:53 2025 GMT
Not After : Jun 19 06:24:53 2026 GMT
Subject: CN=C9B0A46FC2D1340A5BB2FD5AD652576EF29A140D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:a0:d3:71:84:61:24:f0:2f:50:29:99:94:85:
f1:46:69:0e:cd:7d:e5:3b:c9:05:bf:a8:5a:c2:a3:
dd:7d:fc:e9:b8:c6:cd:0e:0b:b1:70:f0:28:e3:07:
c4:d5:64:d2:bd:17:8f:03:15:90:27:86:b3:55:1f:
e2:ff:cb:c0:fa:f7:b5:dc:c8:07:28:26:e4:65:70:
00:ff:26:fa:80:f5:cb:33:88:19:36:db:c9:34:94:
af:35:5b:a8:8d:9b:86:30:59:8e:20:29:94:3d:e2:
da:b7:71:48:a1:51:97:dd:b3:f9:7b:e4:c9:01:69:
58:52:88:48:e6:ab:74:d2:25:ca:a2:7f:34:6e:14:
62:96:92:44:91:b4:97:47:70:52:a8:34:46:c5:ec:
c6:00:68:37:9f:3f:cf:94:35:5c:e8:fb:f7:c2:39:
24:25:b2:74:37:3b:62:54:bd:15:24:e6:f5:b3:a2:
ae:e3:f4:f0:ff:27:0a:38:fd:b8:d3:fe:48:e0:be:
67:92:1a:b3:0d:9c:34:49:f6:39:29:b9:00:a8:bf:
7c:65:fc:99:a4:94:d9:c3:bb:38:da:d2:e6:b6:c0:
00:55:d9:ae:a3:1e:9f:95:8b:a0:0b:ca:19:79:b6:
b7:70:50:bf:5b:9e:f1:ea:be:f1:05:94:7a:67:76:
20:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:B0:A4:6F:C2:D1:34:0A:5B:B2:FD:5A:D6:52:57:6E:F2:9A:14:0D
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538313a333535653a3a2f34382d3438203d3e203136393039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7581:355e::/48
Signature Algorithm: sha256WithRSAEncryption
b4:6c:12:db:93:c4:37:b7:fe:58:34:44:93:84:44:3c:34:0e:
e3:50:2f:b9:64:1b:2f:a6:3c:e7:df:e3:f3:5e:26:41:fc:4b:
53:f9:f1:d4:d6:87:00:6e:c8:97:bf:95:d2:48:b7:59:1c:a0:
10:f8:56:b8:af:d6:b3:56:bd:60:6a:e2:00:c9:ca:8b:cb:de:
04:fd:5c:13:a7:61:3d:f4:85:88:29:9e:c8:46:68:b8:a7:61:
b3:68:99:e2:0f:22:ac:06:1a:81:c4:5b:1b:09:55:e8:c9:20:
91:f4:90:34:44:59:8a:a4:df:b4:5c:ba:ac:e2:d7:38:db:2f:
0b:15:e3:58:5e:74:42:66:f0:dd:84:03:ee:58:ea:a7:57:ed:
8b:62:97:2c:14:bb:ec:84:38:8f:30:c9:3f:ac:a4:4a:19:d7:
69:65:67:1a:f5:06:38:f2:64:03:59:ca:22:a5:cc:57:8f:68:
08:5f:5f:0a:51:75:44:f3:fe:36:84:a4:2a:a6:2f:6d:6d:eb:
72:52:93:ed:28:3d:f0:b1:83:f9:26:b9:bf:31:9a:88:42:15:
15:c9:7a:e0:78:ff:05:6e:82:36:9d:4f:67:d7:be:53:1f:44:
ad:9a:ba:bb:21:10:f1:75:7a:61:4d:50:cc:08:c2:49:42:e6:
99:19:8c:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 23 23:52:15 2025 by rpki-client