Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538313a333539643a3a2f34382d3438203d3e203136393039.roa
File: 326131343a373538313a333539643a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier: woMkZNlGNPfmYzfP9dJMfRYMjZ7n78CHS11RuInQoDE=
Subject key identifier: A4:C0:FA:72:2D:C7:27:83:89:15:C6:69:51:BA:A9:66:68:EA:61:1D
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 1E1A276B570C835A4749494892D5F93A8E5F62EE
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538313a333539643a3a2f34382d3438203d3e203136393039.roa
Signing time: Fri 20 Jun 2025 06:30:35 +0000
ROA not before: Fri 20 Jun 2025 06:25:35 +0000
ROA not after: Fri 19 Jun 2026 06:30:35 +0000
asID: 16909
IP address blocks: 2a14:7581:359d::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 25 Jun 2025 16:06:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1e:1a:27:6b:57:0c:83:5a:47:49:49:48:92:d5:f9:3a:8e:5f:62:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: Jun 20 06:25:35 2025 GMT
Not After : Jun 19 06:30:35 2026 GMT
Subject: CN=A4C0FA722DC727838915C66951BAA96668EA611D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:36:4d:b4:0f:f9:e5:32:d7:e6:f8:8c:68:37:
2e:3a:77:d1:32:45:61:db:f7:a1:10:07:cb:f0:43:
a4:cc:8c:99:eb:de:91:74:0c:5c:ed:27:b5:bf:5d:
da:24:14:cc:2c:2a:8b:b0:1e:e6:c9:e0:c5:80:82:
0e:0b:68:ac:f3:a6:7e:07:e7:54:34:69:fa:3e:5b:
91:34:d2:dd:dd:91:e9:07:7a:02:ea:ee:f1:fb:04:
6c:0d:61:be:a3:b2:0f:67:b0:c0:37:19:29:ea:11:
51:c0:09:f4:9c:3e:27:cd:f9:e8:f6:97:b3:1c:27:
8d:bf:35:63:e3:2c:1f:9b:49:fa:d6:48:db:24:0c:
4b:0f:57:e5:d0:de:00:04:8a:cd:dd:3f:17:71:6e:
b9:38:4d:87:ec:c9:8e:a0:0c:c2:0f:29:11:48:4b:
eb:fa:fe:b3:18:ae:cc:39:c3:d5:8c:52:5e:10:95:
91:47:7c:0e:f2:f8:ce:99:17:cd:27:c5:4f:36:7a:
82:68:2b:bf:8d:a9:46:54:0e:ad:c0:1f:0f:d4:37:
7d:91:15:4c:a3:aa:b8:4a:1d:43:41:66:55:da:68:
4e:3f:3a:da:4e:89:4e:92:87:b4:f5:6c:22:72:e5:
17:07:d3:3d:db:5f:3d:eb:0a:42:1d:9c:f7:44:1c:
85:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:C0:FA:72:2D:C7:27:83:89:15:C6:69:51:BA:A9:66:68:EA:61:1D
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538313a333539643a3a2f34382d3438203d3e203136393039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7581:359d::/48
Signature Algorithm: sha256WithRSAEncryption
33:99:a1:e9:bf:1e:f5:54:f3:c3:1b:43:db:7f:37:1e:53:00:
08:dc:16:76:0f:52:2d:fa:f0:51:cf:d4:4f:68:15:65:20:5e:
cf:dd:89:75:76:38:02:1f:54:5b:4f:34:5d:98:f8:9c:7a:da:
78:6f:7b:f0:7b:4a:55:c5:65:b6:8b:38:db:dd:e1:06:76:5c:
f2:9a:71:f1:43:c8:11:ce:22:a1:c7:c9:c8:86:0b:84:ba:c4:
4c:65:ef:c4:db:7a:a4:85:c6:b1:71:d9:c7:fb:34:7a:b3:bc:
60:9a:a5:37:7e:45:e4:c7:b3:a0:d4:65:17:79:9c:03:7c:97:
fd:6a:96:85:91:c1:a5:15:e9:11:ce:fe:8c:5f:58:b3:e9:58:
c4:ed:3e:be:9c:68:61:e8:14:4d:12:c0:99:43:df:9c:bd:86:
3b:22:58:83:89:5a:ba:82:b8:27:18:71:96:a7:75:11:49:cd:
ab:d2:11:6a:13:2a:62:ad:63:ee:6b:7a:b1:df:0d:da:b4:31:
49:55:39:54:7b:d0:8c:e3:48:bc:4b:b4:45:56:28:53:c3:7d:
ed:77:2d:5a:9d:db:06:52:4a:1c:7c:be:8f:80:a1:cf:c4:21:
c6:ee:6f:23:2b:c6:2d:68:63:bc:9f:ad:0d:91:cd:b1:ea:8a:
48:bb:b6:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 23 23:52:06 2025 by rpki-client