Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538313a333562373a3a2f34382d3438203d3e203136393039.roa
File: 326131343a373538313a333562373a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier: sI4hyBpPvgg2nwIOoZBnJChO98XoZI5fw/kCmxobNao=
Subject key identifier: A2:1E:9D:79:C9:E0:EA:C6:A1:8E:09:E1:7C:D7:F3:22:04:80:4A:6A
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 14D1074103D8530827C0197017F667DB66C7313F
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538313a333562373a3a2f34382d3438203d3e203136393039.roa
Signing time: Fri 20 Jun 2025 06:24:55 +0000
ROA not before: Fri 20 Jun 2025 06:19:55 +0000
ROA not after: Fri 19 Jun 2026 06:24:55 +0000
asID: 16909
IP address blocks: 2a14:7581:35b7::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 25 Jun 2025 16:06:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
14:d1:07:41:03:d8:53:08:27:c0:19:70:17:f6:67:db:66:c7:31:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: Jun 20 06:19:55 2025 GMT
Not After : Jun 19 06:24:55 2026 GMT
Subject: CN=A21E9D79C9E0EAC6A18E09E17CD7F32204804A6A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:ae:44:d9:5f:65:51:45:11:83:4e:5a:4a:51:
2a:2c:c4:7d:76:34:22:62:a0:03:7d:97:70:78:da:
77:d6:c8:ec:cb:d6:ac:9e:d3:2a:07:0a:85:52:75:
90:19:a7:76:50:73:c2:9a:7b:33:98:81:d2:4a:17:
f4:9c:d0:57:b8:04:81:0d:e9:d7:d9:40:13:03:93:
3d:f3:66:d1:0f:45:a3:d3:da:1e:ef:e7:79:8d:2e:
96:a9:9c:88:af:f4:be:69:a6:27:6e:b6:a7:a6:cc:
9e:32:da:20:19:af:5d:78:d6:1a:c3:bd:cb:a7:38:
13:83:a7:12:c0:40:df:6c:76:47:cb:a3:85:0d:b2:
ac:2c:57:e7:1f:23:71:f9:df:90:7a:17:64:53:b3:
9b:6d:84:1d:f4:cb:c0:39:73:90:fc:7b:b0:60:5c:
08:3b:d0:3c:6c:af:10:f4:dc:3c:50:dc:89:d2:b8:
fe:bf:29:8f:65:c2:ec:97:03:8e:d5:4d:13:a0:77:
6b:de:e4:94:ed:25:1a:1b:a5:fd:1e:3f:46:3a:99:
06:9b:ac:e5:1b:f8:37:cf:29:74:34:6e:05:46:f5:
98:33:ca:72:4f:78:db:fb:92:18:e5:d2:1a:48:08:
cf:ff:9b:2e:35:c0:36:72:3f:8e:48:2d:a3:9d:ff:
8c:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:1E:9D:79:C9:E0:EA:C6:A1:8E:09:E1:7C:D7:F3:22:04:80:4A:6A
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538313a333562373a3a2f34382d3438203d3e203136393039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7581:35b7::/48
Signature Algorithm: sha256WithRSAEncryption
3f:10:b9:7c:af:d2:b2:bd:23:74:00:7e:91:33:80:4f:06:ec:
6f:be:e6:6d:f5:1f:60:ad:b9:dc:89:de:53:77:8e:33:87:7b:
77:28:38:e5:30:1d:91:40:c7:11:85:f9:c4:a9:e0:58:e5:13:
df:a6:62:a2:b7:f7:49:19:ef:6d:2e:32:5e:92:cd:7b:f2:44:
9f:6a:96:40:7a:cf:eb:1b:c1:09:1e:00:c2:2f:f8:a6:5c:b4:
62:da:66:c8:f1:ba:b9:2e:8b:ee:50:46:20:b5:42:7e:21:02:
00:19:a5:b2:70:0d:0f:ff:4d:be:a6:92:ed:73:bd:18:4b:0e:
6b:2c:0a:f8:1a:91:87:cf:32:ea:c8:20:d0:dd:7f:af:4b:ee:
32:b3:69:81:56:d1:66:fd:c9:84:76:f3:6e:39:2d:19:1c:27:
9f:af:0b:61:b0:6b:40:9e:a0:d8:d8:1a:97:0c:57:97:0e:ad:
9d:8f:a0:0e:0d:07:bc:48:ce:b3:6a:a4:33:0c:6d:ff:62:d1:
93:1b:91:94:b3:51:0b:67:db:0a:82:b3:b7:48:75:d2:b3:cb:
68:c9:34:03:2a:ae:d1:c6:73:9d:af:47:ab:62:05:29:63:44:
79:58:83:02:a5:bb:67:5d:75:3a:90:6c:aa:56:c4:31:b2:86:
75:ef:c8:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 23 23:52:03 2025 by rpki-client