Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538313a333563323a3a2f34382d3438203d3e203136393039.roa
File: 326131343a373538313a333563323a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier: xEqq0Y4tzQMOSVYASI1VpjROFr1NSbLOqncVYRmvx80=
Subject key identifier: EA:3C:F1:3D:44:64:22:1F:65:83:51:3E:9A:6B:0D:D2:49:5C:78:D3
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 153D7B2BF4AEFB3C9BC325A93AFA9012C30A8FC5
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538313a333563323a3a2f34382d3438203d3e203136393039.roa
Signing time: Fri 20 Jun 2025 06:24:44 +0000
ROA not before: Fri 20 Jun 2025 06:19:44 +0000
ROA not after: Fri 19 Jun 2026 06:24:44 +0000
asID: 16909
IP address blocks: 2a14:7581:35c2::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 25 Jun 2025 16:06:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
15:3d:7b:2b:f4:ae:fb:3c:9b:c3:25:a9:3a:fa:90:12:c3:0a:8f:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: Jun 20 06:19:44 2025 GMT
Not After : Jun 19 06:24:44 2026 GMT
Subject: CN=EA3CF13D4464221F6583513E9A6B0DD2495C78D3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:1a:91:a9:c8:c3:e9:0e:62:0e:5d:29:ee:89:
53:34:5e:f8:2d:32:b0:62:30:f7:40:dc:73:73:59:
de:83:fc:1c:d7:ce:d2:a7:04:b7:34:d9:35:7b:68:
b9:c2:a0:01:0e:b4:fe:fb:48:ae:88:ba:cd:2d:07:
10:39:e6:eb:9d:aa:f0:2d:f4:b7:cf:19:9d:d3:94:
8f:3d:35:55:98:f8:a2:fb:55:52:87:4f:94:24:98:
e9:63:01:6e:d6:af:ab:d6:b9:e5:5f:fc:a7:de:96:
25:59:54:93:a9:97:78:db:e9:6a:64:48:43:2c:9b:
b0:3b:17:b3:2f:d6:03:85:1b:72:80:d8:9c:b7:d9:
92:bd:f8:90:7f:a9:af:a0:a1:f1:b6:2d:3d:1f:ca:
f3:dd:23:b4:15:6c:16:60:32:36:7a:63:64:d0:e0:
7c:8a:a0:46:aa:ea:94:ca:e0:e9:cc:d7:d3:0d:09:
5e:07:b8:8b:0e:94:fc:ed:12:ac:3e:ed:de:7d:a2:
76:38:ca:95:52:64:06:47:8d:8f:72:ab:6a:c2:27:
90:71:ab:11:58:87:88:83:56:ce:f7:82:6c:6c:a3:
2a:5b:41:2f:c6:e9:6c:5b:bf:3f:0a:ac:c7:12:53:
73:79:04:41:bf:a1:dd:91:e0:65:02:d6:25:7f:af:
f2:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:3C:F1:3D:44:64:22:1F:65:83:51:3E:9A:6B:0D:D2:49:5C:78:D3
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538313a333563323a3a2f34382d3438203d3e203136393039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7581:35c2::/48
Signature Algorithm: sha256WithRSAEncryption
9d:17:b1:bc:76:d2:db:ac:10:c1:7a:a7:b9:a4:99:d1:19:ee:
91:ab:cf:3b:f2:3c:b3:cd:b5:38:f8:86:76:32:e9:92:52:48:
fc:0e:d8:9c:d5:12:fb:41:b7:69:fb:9a:37:d8:cf:a4:7e:a7:
23:58:17:b9:a6:6e:ce:67:57:ce:a9:d1:0c:ea:a7:cf:7a:36:
34:8a:51:81:c5:91:cd:c7:41:6d:2a:82:b7:d0:2d:d6:f2:45:
d5:65:7a:12:37:c3:0c:c2:7d:31:ae:a0:b2:45:28:bc:89:78:
d3:d0:92:a4:e7:9c:1f:d4:f1:1f:30:62:f3:6d:fd:18:60:9d:
58:0a:a8:eb:7d:ed:c3:b0:15:f8:9f:c4:4d:27:cb:ed:20:59:
bd:de:cc:97:4f:43:27:2e:eb:e8:90:da:29:7e:8f:37:0e:a4:
89:85:2b:b0:4a:82:61:54:43:10:71:56:1e:5f:f6:20:40:ce:
fa:05:7a:cc:06:b2:4e:71:54:39:09:fa:26:fc:e7:68:01:4c:
59:ca:24:d6:02:9d:b5:df:ec:b3:69:f2:97:21:78:19:33:d4:
62:81:ad:ee:04:43:5a:02:d1:be:13:19:e9:d5:b4:25:f6:4f:
64:14:94:52:70:59:b4:43:da:89:97:88:d1:7a:be:09:6d:22:
da:a1:c7:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 25 00:55:59 2025 by rpki-client