Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538313a333561623a3a2f34382d3438203d3e203136393039.roa
File: 326131343a373538313a333561623a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier: gCF9+fRmc7D7FgONw5s2223vxf7qRV9PbUR/Vz23oR8=
Subject key identifier: 57:F9:E0:18:4B:EA:79:80:A8:46:8C:04:1E:95:D7:9F:D1:95:C0:49
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 23F33DE9BFEEFDB34E6111463644F582C908FCE8
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538313a333561623a3a2f34382d3438203d3e203136393039.roa
Signing time: Fri 20 Jun 2025 06:24:54 +0000
ROA not before: Fri 20 Jun 2025 06:19:54 +0000
ROA not after: Fri 19 Jun 2026 06:24:54 +0000
asID: 16909
IP address blocks: 2a14:7581:35ab::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 25 Jun 2025 16:06:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
23:f3:3d:e9:bf:ee:fd:b3:4e:61:11:46:36:44:f5:82:c9:08:fc:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: Jun 20 06:19:54 2025 GMT
Not After : Jun 19 06:24:54 2026 GMT
Subject: CN=57F9E0184BEA7980A8468C041E95D79FD195C049
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:82:d2:70:fd:0c:47:f1:2e:a7:cc:91:7c:7d:
91:eb:df:03:ac:9c:f6:71:16:84:5c:a1:86:e4:87:
36:7f:0c:b6:36:5f:d2:30:29:92:c0:05:72:43:7f:
4e:03:13:69:8d:ae:99:75:48:87:45:94:04:cc:5d:
16:d6:0e:b6:7f:5e:36:0c:89:ae:d8:50:dd:68:00:
11:f6:19:8e:67:d3:9b:0b:42:cf:b8:91:0b:e4:11:
d4:25:32:71:d4:7a:6b:64:eb:78:28:fd:43:a6:a8:
88:52:61:d0:3a:f6:de:d1:a3:84:4a:5f:7b:fb:65:
3d:9c:ac:5b:8b:2a:1e:1f:fb:d7:68:4b:47:f2:2a:
ef:88:4b:7c:67:a3:42:54:0d:e0:05:8a:69:e8:c1:
de:89:6c:27:3b:37:f8:a2:d4:7a:9a:58:f5:8c:d9:
d2:bf:ce:7a:db:13:f1:53:f6:69:e3:c4:d2:fb:26:
95:f4:9a:4d:a4:b8:88:9b:e0:5b:66:c4:14:1d:3f:
d5:2a:81:95:ea:55:06:d9:e4:75:10:f6:82:6c:4c:
b8:30:bb:c8:98:70:36:e1:20:f1:2c:f2:f5:ef:3e:
15:e8:9b:6f:2f:d6:ed:8d:8c:1d:db:b5:d8:35:b7:
80:6a:d4:01:31:c6:3c:a1:a2:aa:46:aa:8e:a3:9f:
a4:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:F9:E0:18:4B:EA:79:80:A8:46:8C:04:1E:95:D7:9F:D1:95:C0:49
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538313a333561623a3a2f34382d3438203d3e203136393039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7581:35ab::/48
Signature Algorithm: sha256WithRSAEncryption
72:a3:60:64:f4:b8:f5:39:f6:34:39:59:62:4a:33:af:40:1d:
10:21:28:03:ea:95:b7:4b:5c:d8:8e:90:92:d6:d7:96:1e:ef:
70:6d:11:5a:8a:78:ff:78:3f:ef:44:00:bb:10:5e:57:4a:f7:
ca:a4:81:82:7f:e1:29:68:b4:df:b8:a2:ec:ff:58:b8:b6:1f:
c7:a2:92:4b:ba:7d:a8:89:99:c6:60:26:90:16:06:f1:1f:0f:
25:81:31:c6:89:f5:3a:8a:e7:7a:f1:3f:d4:d8:94:5a:d7:7e:
ce:2e:3c:19:1a:50:53:54:1f:ec:99:db:c3:06:33:d1:47:91:
63:16:b7:be:93:5a:98:87:b3:74:9b:03:12:b6:50:fb:92:13:
d2:8b:66:1f:57:c5:17:00:e7:9e:60:b2:6e:fe:93:12:7a:53:
47:ca:7b:a7:c7:b0:50:11:1e:c2:50:f3:7e:a1:43:57:ec:20:
c2:84:5a:a7:ce:3d:96:5b:89:05:65:a1:fc:fa:cf:aa:45:2e:
d8:74:03:7b:e5:c4:0e:7c:23:c9:b0:06:52:78:4b:1d:a2:ba:
2e:99:f9:c3:bd:c9:1f:64:dc:7c:78:76:1c:8b:19:46:bc:3c:
be:33:87:93:90:1a:eb:b4:71:4c:1f:26:a8:8b:61:59:79:b3:
98:84:47:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 25 00:55:28 2025 by rpki-client