Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538313a333536353a3a2f34382d3438203d3e203136393039.roa
File: 326131343a373538313a333536353a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier: hVRbM6Cx/JZghKv1ZGb8Z18dYrBITlpEyfg8oF7ReBo=
Subject key identifier: 19:35:17:13:5F:DE:3D:2B:8D:79:EB:4A:05:A0:D4:58:A1:47:F6:63
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 6C8AC1A684F140394AD5BF93AA5FD708C08C0F98
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538313a333536353a3a2f34382d3438203d3e203136393039.roa
Signing time: Fri 20 Jun 2025 06:26:15 +0000
ROA not before: Fri 20 Jun 2025 06:21:15 +0000
ROA not after: Fri 19 Jun 2026 06:26:15 +0000
asID: 16909
IP address blocks: 2a14:7581:3565::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 25 Jun 2025 16:06:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6c:8a:c1:a6:84:f1:40:39:4a:d5:bf:93:aa:5f:d7:08:c0:8c:0f:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: Jun 20 06:21:15 2025 GMT
Not After : Jun 19 06:26:15 2026 GMT
Subject: CN=193517135FDE3D2B8D79EB4A05A0D458A147F663
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:9d:85:76:79:f2:39:a2:a2:9a:46:d2:42:45:
dd:65:b9:de:1e:02:6d:e1:10:47:24:cd:ff:dd:78:
4f:c7:69:00:f7:b2:b0:2b:ac:b7:1c:eb:e8:58:38:
dc:53:bb:0a:52:bc:cd:9e:26:a0:13:3e:1d:31:ca:
75:ef:08:fc:6b:9c:68:97:51:5a:57:76:1d:a3:c7:
c8:8f:c2:00:92:b6:28:72:ec:18:0b:06:00:2b:95:
20:c8:1a:0f:8c:68:bf:55:97:aa:3b:0f:b6:0d:d3:
fa:9c:e7:ef:50:06:76:d6:5b:eb:96:dc:2d:ef:23:
fc:3a:6d:90:52:67:1f:d6:fd:46:52:cb:9c:0a:9e:
b5:a2:1b:25:d4:ba:b6:b9:2f:77:1d:9e:37:0d:47:
98:f4:17:c0:f7:e0:45:d4:14:76:9d:61:8a:e5:eb:
2b:8f:c1:97:9a:6e:7a:cf:73:3e:53:89:b1:58:3a:
f7:46:70:7d:e9:b5:38:27:be:db:59:81:6c:5d:ef:
a9:4f:42:44:8f:10:82:74:1c:50:02:b3:98:3e:e4:
a0:82:75:4c:1f:cd:93:d5:bf:6e:fe:3e:62:c2:46:
32:84:a9:fd:2c:36:12:de:32:1d:71:02:09:39:ff:
f5:27:44:4d:37:75:0a:b8:a5:27:c4:6e:59:02:e6:
a8:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:35:17:13:5F:DE:3D:2B:8D:79:EB:4A:05:A0:D4:58:A1:47:F6:63
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538313a333536353a3a2f34382d3438203d3e203136393039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7581:3565::/48
Signature Algorithm: sha256WithRSAEncryption
a0:88:78:7f:b3:fa:8c:05:d9:90:15:67:14:6e:78:16:b0:06:
30:f3:63:69:e3:f7:5c:6e:e2:10:1d:b5:4c:e9:41:11:d8:f4:
41:0c:4c:76:53:54:30:b2:6e:57:0d:64:e3:3b:be:28:3e:36:
72:00:ab:06:76:43:e2:7e:91:0c:16:fd:ad:1c:eb:c7:61:1b:
37:3f:97:0f:85:90:e3:24:b2:98:fc:c8:46:2a:74:8d:d6:b8:
70:3d:86:50:40:f3:44:27:59:23:b9:43:02:09:21:a8:23:dd:
37:7d:db:90:ab:2d:64:9c:2e:0b:bb:03:e9:0f:a9:e0:d9:2b:
21:44:38:84:25:ac:8e:3a:b2:30:b4:7a:91:04:34:b7:e0:90:
59:48:50:dd:c0:ce:34:47:7d:09:9e:85:6d:ce:b5:36:04:eb:
a3:a5:eb:73:b2:76:64:41:9d:52:8e:76:ba:d4:35:d3:ba:ab:
e2:84:0e:fd:ef:71:f0:69:48:9b:e3:e0:75:7a:55:df:99:02:
ee:2e:64:4a:b6:a6:bb:e2:7e:6d:2e:2a:4d:8a:fe:9e:c1:cd:
33:e9:e0:5e:ec:4b:be:ac:39:35:1f:3d:6e:7c:53:90:1d:34:
ab:a9:f0:f4:c2:dd:01:76:ee:86:93:a3:a2:65:6a:8a:ff:ce:
aa:31:33:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 25 00:57:44 2025 by rpki-client