Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538313a333536323a3a2f34382d3438203d3e203136393039.roa
File: 326131343a373538313a333536323a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier: BKueHZPGMTUKUZA2IuFVIXcOE32ugxC491dOwbdVyT0=
Subject key identifier: DA:FF:A6:7B:B8:79:06:34:91:1D:5B:8E:0E:BC:1E:0C:3C:32:D8:A1
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 2952D2C0993A0A1AAC989DCA4AE35DCC20E049A1
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538313a333536323a3a2f34382d3438203d3e203136393039.roa
Signing time: Fri 20 Jun 2025 06:24:45 +0000
ROA not before: Fri 20 Jun 2025 06:19:45 +0000
ROA not after: Fri 19 Jun 2026 06:24:45 +0000
asID: 16909
IP address blocks: 2a14:7581:3562::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 25 Jun 2025 16:06:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
29:52:d2:c0:99:3a:0a:1a:ac:98:9d:ca:4a:e3:5d:cc:20:e0:49:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: Jun 20 06:19:45 2025 GMT
Not After : Jun 19 06:24:45 2026 GMT
Subject: CN=DAFFA67BB8790634911D5B8E0EBC1E0C3C32D8A1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:ab:38:ee:aa:55:71:47:8a:00:40:b2:8a:b4:
d1:e3:b6:b3:d2:37:7f:d2:a1:4b:dc:0d:9d:fb:a1:
c6:c2:c1:46:d3:f9:76:30:cd:38:48:00:3f:60:37:
12:33:34:42:d7:70:76:32:fd:e6:70:e2:e2:8c:0f:
59:ac:3a:41:3e:69:6e:b6:4d:d9:4e:56:80:0b:46:
97:7d:76:59:36:8a:49:5d:ab:fc:a7:0c:a2:f8:30:
a3:c5:7d:ed:df:16:37:a6:94:7b:30:86:44:f4:b9:
44:c1:fe:65:ef:86:7a:b1:2a:f0:28:97:7a:ab:6e:
c9:32:4c:52:77:54:ef:69:95:93:e1:0f:d8:64:4a:
a2:5e:77:e5:19:bf:e9:36:b3:2f:3a:e4:9b:9b:72:
a8:51:2c:ce:fb:a6:44:ef:30:c5:21:b3:59:9f:12:
e9:7a:46:b9:e5:72:bc:5a:45:4e:5b:49:51:31:61:
7e:35:c4:0c:47:c6:c0:4a:18:75:0f:ed:2c:a5:c9:
fa:00:d5:b3:05:48:b6:ae:88:cf:0a:f7:2a:b8:53:
32:5c:3c:6c:bb:13:4f:71:d5:d8:fe:00:93:4c:2a:
84:3e:33:f4:3a:eb:be:e7:4f:11:0b:9b:bf:37:35:
ff:c2:68:68:f4:97:39:fc:f7:df:b9:91:3c:0e:ec:
e6:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:FF:A6:7B:B8:79:06:34:91:1D:5B:8E:0E:BC:1E:0C:3C:32:D8:A1
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538313a333536323a3a2f34382d3438203d3e203136393039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7581:3562::/48
Signature Algorithm: sha256WithRSAEncryption
58:66:d1:97:44:01:b4:4c:aa:74:57:82:3d:85:6d:ae:ce:2e:
55:74:c1:df:10:0c:a5:84:e2:5c:fc:3a:a1:85:cf:e6:b2:61:
ff:5d:a7:cf:68:b6:ed:1d:c2:5d:55:f5:40:40:1c:84:e1:d6:
39:a9:7e:62:99:78:db:61:ea:27:89:49:33:78:35:04:28:73:
27:f9:c1:e0:bf:78:e9:b8:64:0e:37:ad:95:38:fb:ff:4a:22:
af:80:01:80:5a:ac:2c:b1:e5:f8:63:72:85:b3:7f:0e:a7:58:
27:ad:dc:e1:50:8e:13:f5:d0:5f:4b:de:3a:db:a7:b4:51:a7:
d9:23:da:7b:c1:f4:9d:f8:ec:a5:27:36:98:d7:ae:1f:56:41:
fe:89:75:10:d2:0d:75:97:69:e3:a4:ad:4d:b0:ba:a7:1a:e1:
d1:00:29:9b:6a:08:4a:cd:8f:ab:91:76:65:4c:66:aa:6b:0f:
c7:6a:de:3b:b1:f2:c2:f9:51:37:e3:57:80:c6:2a:25:b2:bc:
cc:d4:2f:ff:e6:36:1f:3b:48:e4:04:b1:91:c7:b6:ff:05:cf:
a2:57:03:36:aa:ff:36:b1:c2:68:f4:39:72:eb:8a:77:a1:54:
f3:85:a1:c9:f6:43:79:94:12:bf:1b:5b:27:fa:0d:8e:32:8d:
3f:9c:87:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 23 23:53:13 2025 by rpki-client