Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538313a333538613a3a2f34382d3438203d3e203136393039.roa
File: 326131343a373538313a333538613a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier: /92B9xhKN62v0GDXHhRjgK2s4WttoVnuLiHRlydg6Ac=
Subject key identifier: 93:A6:2E:DE:DE:48:CF:BF:48:FA:91:51:AE:21:FB:B5:55:FE:DF:73
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 4D934909B523AFB761097607EB0F6204E635FB01
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538313a333538613a3a2f34382d3438203d3e203136393039.roa
Signing time: Fri 20 Jun 2025 06:24:45 +0000
ROA not before: Fri 20 Jun 2025 06:19:45 +0000
ROA not after: Fri 19 Jun 2026 06:24:45 +0000
asID: 16909
IP address blocks: 2a14:7581:358a::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 25 Jun 2025 16:06:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4d:93:49:09:b5:23:af:b7:61:09:76:07:eb:0f:62:04:e6:35:fb:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: Jun 20 06:19:45 2025 GMT
Not After : Jun 19 06:24:45 2026 GMT
Subject: CN=93A62EDEDE48CFBF48FA9151AE21FBB555FEDF73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:6d:aa:30:44:8e:e4:ee:e9:36:f5:ee:6d:46:
dd:7a:72:e8:f8:48:bb:72:3a:28:e8:4c:4d:3a:0b:
a2:1a:2a:b1:7d:2a:17:2b:2d:59:a3:bf:d5:d2:b0:
28:37:94:ad:e5:0b:7e:cd:0e:70:5e:4f:50:91:c4:
50:47:9a:99:59:be:a5:95:ad:b6:c3:da:97:6d:5c:
88:62:16:be:23:db:ee:f0:8d:d3:ea:f3:9e:46:df:
74:71:0c:aa:40:97:bc:6e:76:b5:a6:3b:ad:25:67:
78:33:c9:31:50:ed:f4:e2:14:30:2b:f8:2b:06:4b:
32:97:74:52:bf:db:e3:ff:b9:4d:04:58:df:da:c4:
19:b2:bc:d4:87:83:c3:d0:a1:28:59:93:dc:35:bd:
4e:fa:15:cc:38:ee:e0:57:48:80:97:e5:de:e8:3f:
f2:1f:b1:ae:a3:94:d4:0e:38:05:c6:6a:da:fb:f5:
da:7d:45:a4:f4:87:a9:58:e5:53:4c:61:a6:95:b2:
62:ef:db:b0:b4:46:fe:05:0b:99:cf:aa:a0:6f:e0:
a3:99:a3:c8:3e:2f:c3:b4:a7:36:ee:fb:93:70:5a:
57:7c:98:3a:16:3d:77:33:1f:43:8c:d7:3d:a7:15:
b6:2e:fe:36:40:23:49:1f:20:6c:00:0e:df:d8:a2:
14:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:A6:2E:DE:DE:48:CF:BF:48:FA:91:51:AE:21:FB:B5:55:FE:DF:73
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538313a333538613a3a2f34382d3438203d3e203136393039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7581:358a::/48
Signature Algorithm: sha256WithRSAEncryption
4b:af:a7:00:fd:21:11:db:3c:3d:37:cb:68:1a:b2:d5:35:92:
f4:59:7c:63:3e:a6:cb:c2:06:f3:63:63:49:4f:94:cd:f0:bd:
59:0c:4b:57:81:18:d3:35:14:5f:e7:25:f3:de:09:4c:b5:55:
ea:a3:7f:14:b9:4c:f7:61:4a:72:f1:8a:40:40:8a:d9:41:ff:
1c:23:96:e4:1d:1d:21:7b:23:07:c6:63:cb:34:21:05:71:7d:
fc:b9:c2:41:44:7a:a6:bc:f4:5d:47:2c:24:42:c7:99:26:21:
1d:fa:22:3e:c6:e4:bb:f1:36:f3:f0:b2:49:96:11:1d:be:8f:
af:fa:04:46:7a:c7:4b:44:4b:05:88:39:b4:e5:50:32:84:3d:
cb:be:48:4c:d1:57:f0:32:d6:d6:aa:01:63:21:23:0e:70:fc:
7e:1c:56:5d:ee:94:72:ba:29:e7:c5:c0:fd:9c:21:e3:29:0a:
62:49:95:3c:1a:56:03:4c:8b:be:ef:01:fc:97:18:2d:9f:85:
89:e1:0a:cf:c7:5b:e6:fc:c8:3d:fa:e2:9e:fb:83:4a:d3:26:
1f:a1:fa:e4:ee:81:c2:a7:1a:89:d0:12:51:9c:b5:71:eb:f0:
4b:6a:1b:c2:ad:9b:38:2b:af:42:74:93:1d:1e:a4:7a:28:80:
e8:6c:cf:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 23 23:52:13 2025 by rpki-client