Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538313a333538653a3a2f34382d3438203d3e203136393039.roa
File: 326131343a373538313a333538653a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier: 57bJtJhyI8EIRkYTQ40Jg+bGJ4Lw0KmM6Y9h41jMXmM=
Subject key identifier: 72:FA:5F:CC:6E:FD:C5:A4:9A:E2:EC:E2:02:8C:F0:33:D6:EB:CD:AD
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 3A577CE9E6F45EA3124FFEAE0E2C2930636CDF5D
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538313a333538653a3a2f34382d3438203d3e203136393039.roa
Signing time: Fri 20 Jun 2025 06:24:44 +0000
ROA not before: Fri 20 Jun 2025 06:19:44 +0000
ROA not after: Fri 19 Jun 2026 06:24:44 +0000
asID: 16909
IP address blocks: 2a14:7581:358e::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 25 Jun 2025 16:06:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3a:57:7c:e9:e6:f4:5e:a3:12:4f:fe:ae:0e:2c:29:30:63:6c:df:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: Jun 20 06:19:44 2025 GMT
Not After : Jun 19 06:24:44 2026 GMT
Subject: CN=72FA5FCC6EFDC5A49AE2ECE2028CF033D6EBCDAD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:0c:80:41:07:08:42:67:57:06:3d:cd:67:70:
1b:e7:5b:01:cf:5a:a6:44:64:5e:b4:d8:e3:7e:34:
93:fe:91:8e:38:8d:9c:21:0a:b2:1e:41:47:c1:0b:
b8:9b:86:e5:8e:5b:c4:62:3f:ed:23:45:f4:4a:26:
05:8b:69:0d:5b:fb:ba:bf:3d:b2:0f:50:96:c2:ec:
27:b1:98:40:14:b5:22:e5:f1:f4:10:e0:76:c1:74:
04:03:a8:de:63:e0:b4:2d:b2:5a:57:28:59:c3:75:
f2:35:c0:9a:2f:e7:9d:63:6d:d3:2d:d8:25:fc:2c:
96:fe:15:18:89:10:c2:55:2c:c1:c8:d9:98:c8:cf:
f8:58:f1:25:34:63:16:11:5e:6b:88:b0:e1:d1:c3:
aa:50:63:d7:f9:3f:bd:e8:6a:c5:a6:ae:26:d0:05:
b8:59:f7:22:d0:f0:b1:a3:5a:c6:31:82:88:1e:92:
bb:5f:a0:55:a3:b4:c6:32:59:81:9d:7c:73:c6:dc:
07:d7:23:cd:29:63:76:23:70:a5:90:05:77:47:d2:
23:65:a6:8d:c5:1b:55:61:70:ea:9b:02:c1:08:b9:
49:c9:7a:f4:24:71:df:70:6c:4a:bf:68:1e:45:cb:
62:83:e7:1c:96:af:0b:23:40:25:52:60:4a:71:b6:
f7:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:FA:5F:CC:6E:FD:C5:A4:9A:E2:EC:E2:02:8C:F0:33:D6:EB:CD:AD
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538313a333538653a3a2f34382d3438203d3e203136393039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7581:358e::/48
Signature Algorithm: sha256WithRSAEncryption
33:8d:69:96:7a:54:be:28:e7:4b:35:c7:46:e3:d6:2a:fc:be:
85:a4:ad:27:3b:3e:52:2f:70:f9:1c:cc:63:21:0a:34:b2:2c:
14:01:83:0b:b1:82:62:96:af:76:54:92:5f:9d:42:62:f2:c5:
f0:40:d7:cd:48:ef:ba:87:bb:07:8f:5e:66:c1:da:22:76:2d:
ff:5c:68:41:6a:3e:b4:dd:ea:9c:e2:fd:0c:9a:0b:e4:33:e6:
24:0a:75:16:77:a0:9e:e7:a9:c4:06:3b:da:7f:b3:21:f8:84:
c4:a5:4b:f5:fe:79:95:cd:17:69:02:10:1b:ad:8f:c5:00:8a:
0a:28:a5:95:c1:1e:51:4a:2a:9d:57:07:79:86:d0:fa:46:78:
75:8c:8f:6d:56:97:81:87:a4:09:f1:cd:20:46:82:48:ab:20:
64:d4:cd:3a:99:87:51:cf:de:5d:6f:93:cc:17:6e:b0:72:b8:
c9:3d:10:04:3a:ab:cb:d9:10:bf:2b:5e:f0:69:50:60:ee:48:
8d:2c:95:b5:1b:55:13:41:f9:90:3c:f4:ce:3f:09:f2:0a:7b:
48:35:9a:04:41:82:f0:90:37:a2:6d:3b:7f:c6:8d:22:eb:82:
da:ce:d2:a1:ad:67:5d:22:31:1d:0a:95:55:a6:b1:3d:a1:7c:
85:b8:ca:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 23 23:53:13 2025 by rpki-client