Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538313a333536393a3a2f34382d3438203d3e203136393039.roa
File: 326131343a373538313a333536393a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier: bGfR5U0NqlZDUkL5GtZ7j8kBYn4BY81x8k/brfVnnHs=
Subject key identifier: 8B:C0:92:F4:53:B6:CA:4E:6E:39:58:24:DD:7D:AC:C7:D3:95:4D:FD
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 6364B0C97D10E94AAF1BC0490FF9A64B0A76CB95
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538313a333536393a3a2f34382d3438203d3e203136393039.roa
Signing time: Fri 20 Jun 2025 06:26:08 +0000
ROA not before: Fri 20 Jun 2025 06:21:08 +0000
ROA not after: Fri 19 Jun 2026 06:26:08 +0000
asID: 16909
IP address blocks: 2a14:7581:3569::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 25 Jun 2025 16:06:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
63:64:b0:c9:7d:10:e9:4a:af:1b:c0:49:0f:f9:a6:4b:0a:76:cb:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: Jun 20 06:21:08 2025 GMT
Not After : Jun 19 06:26:08 2026 GMT
Subject: CN=8BC092F453B6CA4E6E395824DD7DACC7D3954DFD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:4a:2a:23:83:0c:fb:07:24:36:f4:cc:11:10:
d2:70:9e:f6:3f:38:61:a6:14:ce:86:78:f4:c5:68:
12:c9:03:41:60:63:a8:04:7b:b9:d0:67:ff:91:b9:
c3:83:83:97:66:2d:31:74:17:f5:30:99:04:09:d9:
02:4e:53:04:4a:eb:41:17:eb:d0:55:cf:b1:bb:58:
95:7d:5f:14:6b:3d:bb:05:b9:e4:79:9e:f7:e3:7c:
a7:f9:a4:80:8f:72:62:da:1f:f3:eb:22:05:64:b8:
66:a1:16:a8:70:de:54:b4:19:b7:d3:64:55:c3:a4:
57:f9:ef:f2:51:8d:fb:04:1f:7f:ab:62:97:7e:88:
e5:6c:24:26:7e:79:24:69:01:40:98:79:44:b1:ca:
c3:48:87:7d:ee:5f:83:62:0e:0b:f5:4d:c9:a3:53:
b2:cc:89:9a:10:9e:2b:ba:13:33:c6:b6:0d:90:8a:
2e:e4:41:7a:9a:50:78:bf:0e:07:d7:1e:e8:f2:03:
78:f1:ec:ff:54:c4:49:a3:ec:91:35:2d:cb:24:e2:
fd:7c:cd:ea:9d:41:c5:77:99:c0:2a:b7:e9:58:67:
f6:d5:22:32:1a:cf:f7:81:61:49:e1:42:34:33:18:
f3:c5:fc:ce:dd:4c:9e:47:cc:7d:10:72:31:86:d8:
9d:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:C0:92:F4:53:B6:CA:4E:6E:39:58:24:DD:7D:AC:C7:D3:95:4D:FD
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538313a333536393a3a2f34382d3438203d3e203136393039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7581:3569::/48
Signature Algorithm: sha256WithRSAEncryption
0a:cb:c0:93:7f:7b:e5:b6:66:8c:17:aa:41:5c:02:ee:ca:a7:
bf:c0:44:db:ac:0b:8e:4f:c2:79:a4:56:5d:11:9f:05:dd:2b:
82:38:f1:35:3b:88:0b:45:24:fd:16:8b:5b:4b:1c:42:d7:a0:
43:ea:88:0f:4a:75:9e:70:fc:ea:43:91:2c:29:ee:74:ad:bc:
26:2e:4f:e0:8f:4d:26:09:0d:1b:b4:c3:d9:a2:fc:73:e5:c4:
06:3a:14:22:d0:59:44:22:37:77:09:5e:b8:9f:2a:a6:0e:47:
b5:0b:16:8a:44:15:1d:1a:ca:e6:e3:89:be:ac:50:37:73:8f:
6b:81:7d:26:67:99:17:69:3d:46:b9:fb:b6:f9:c6:47:9b:90:
8a:3e:ec:6a:a9:c0:16:f4:58:0d:7b:cb:43:5f:e3:c8:20:81:
a9:4e:91:14:b8:cd:d5:59:30:c8:7e:da:25:31:d7:6e:47:43:
49:d5:d8:19:07:a8:58:b0:c7:d7:4e:1e:a2:ce:02:f6:10:1f:
91:c0:f8:b3:39:6a:71:e3:b4:76:11:83:f2:6a:dc:84:0e:d4:
85:16:dd:25:0f:5e:a4:83:53:c6:ca:2c:bc:c8:c8:67:61:26:
30:81:b4:29:42:ac:36:35:39:cb:a3:12:d4:49:de:cf:a6:38:
2d:23:1f:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 23 23:53:41 2025 by rpki-client