Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538313a333561303a3a2f34382d3438203d3e203136393039.roa
File: 326131343a373538313a333561303a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier: D1KApAH5ZyPeVjT5eUeMFjJ1DhxJb/yMyGQkSpyAl2Y=
Subject key identifier: 59:12:38:12:10:7B:07:D4:1D:80:87:45:A8:0E:57:71:31:96:59:91
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 0FC85ACD9A152AC831437BE995EC6D2DDDCA75D1
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538313a333561303a3a2f34382d3438203d3e203136393039.roa
Signing time: Fri 20 Jun 2025 06:31:29 +0000
ROA not before: Fri 20 Jun 2025 06:26:29 +0000
ROA not after: Fri 19 Jun 2026 06:31:29 +0000
asID: 16909
IP address blocks: 2a14:7581:35a0::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 25 Jun 2025 16:06:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0f:c8:5a:cd:9a:15:2a:c8:31:43:7b:e9:95:ec:6d:2d:dd:ca:75:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: Jun 20 06:26:29 2025 GMT
Not After : Jun 19 06:31:29 2026 GMT
Subject: CN=59123812107B07D41D808745A80E577131965991
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:da:b2:29:8e:4d:46:70:05:37:ec:dd:b6:db:
43:98:78:ff:0e:e1:43:50:71:42:f8:c6:81:61:b7:
cc:ae:ed:ed:e9:03:47:6b:f7:cb:ce:76:aa:cd:48:
2a:c3:1f:37:15:d4:88:54:07:66:0e:65:73:e7:39:
d7:9d:4c:1d:0c:a5:c6:5f:f5:5e:e2:0d:9a:94:16:
57:84:ed:8c:ca:2e:a5:fe:29:a4:dd:d1:ca:e2:74:
8d:cb:d4:5f:dc:8e:af:f9:5c:47:7e:72:7d:f4:d3:
ca:11:c4:53:8f:af:d8:24:ea:31:e2:42:89:57:1a:
6f:a9:07:ce:16:9a:24:0b:9f:6a:b4:60:9f:a0:3a:
4f:8d:48:e9:21:18:7f:0a:a8:44:93:fc:5a:92:5f:
f4:93:16:7e:f9:9d:f0:8d:6f:60:ea:00:0b:6a:69:
ce:ad:03:06:3e:5c:85:29:4c:c3:f2:87:d0:42:2e:
71:2a:86:35:b3:19:85:07:a8:f4:6d:c4:0a:1f:de:
b2:da:68:1b:88:ea:74:3d:c8:00:09:b4:45:1f:36:
47:8e:60:30:df:13:dd:7b:b1:2e:1b:91:7b:dc:d5:
bb:eb:11:49:9f:aa:9b:fd:06:28:93:e5:da:6d:f2:
b4:88:6f:8a:63:c8:fa:b2:2b:d2:ed:08:e5:3d:02:
ab:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:12:38:12:10:7B:07:D4:1D:80:87:45:A8:0E:57:71:31:96:59:91
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538313a333561303a3a2f34382d3438203d3e203136393039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7581:35a0::/48
Signature Algorithm: sha256WithRSAEncryption
4a:1c:b8:b6:70:49:40:d4:36:de:6d:13:f0:ee:d7:1d:79:80:
64:de:aa:3f:61:39:e8:7b:48:9c:d8:de:ec:ff:30:4c:26:0f:
16:c6:21:ed:bc:0d:33:a1:2a:b6:54:4e:14:41:04:df:34:6b:
96:09:59:56:b4:57:6a:db:ea:28:4e:82:5a:9a:83:47:90:7b:
ca:60:ca:0b:ec:e2:84:a6:23:97:27:5c:18:1d:b0:cf:44:6c:
bd:63:fa:bf:aa:55:f6:2d:c7:91:27:64:ff:5d:e4:69:42:12:
43:16:76:77:21:c1:98:22:da:94:dd:9c:ce:5e:d5:7c:ab:69:
71:99:1d:86:17:c8:60:a8:2f:eb:d8:a2:d9:e2:d9:1b:f8:bc:
bf:46:10:a0:91:45:39:58:7f:b7:91:c8:da:3d:5c:d6:93:e4:
23:8b:80:b1:77:a3:8c:92:f4:4d:d9:ce:9c:71:a5:b5:30:a0:
a4:f7:bf:7f:4d:2e:a1:bd:2e:52:e3:5c:92:b8:23:60:6d:12:
c0:6a:68:cd:d0:2d:fd:d3:3b:d7:23:7f:53:a5:43:37:0b:b2:
63:c4:9f:d7:6f:aa:6d:90:8c:b0:e7:28:1f:05:a1:3a:ad:1e:
09:c1:5e:47:8f:81:2b:ec:e8:cc:65:75:f7:67:57:50:cf:1e:
8b:5b:70:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 25 00:58:30 2025 by rpki-client