Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538313a333563613a3a2f34382d3438203d3e203136393039.roa
File: 326131343a373538313a333563613a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier: FJ7nV6nTUZHl8x0kZ0SaWTtvgg0cBgLSUOcty4okc9E=
Subject key identifier: 26:B2:E4:A6:13:33:89:9F:A6:DA:D3:70:B9:84:0C:5B:04:BF:17:60
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 27894E8441877D1E7E2D16343FF18E0B8308364B
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538313a333563613a3a2f34382d3438203d3e203136393039.roa
Signing time: Fri 20 Jun 2025 06:31:29 +0000
ROA not before: Fri 20 Jun 2025 06:26:29 +0000
ROA not after: Fri 19 Jun 2026 06:31:29 +0000
asID: 16909
IP address blocks: 2a14:7581:35ca::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 25 Jun 2025 16:06:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
27:89:4e:84:41:87:7d:1e:7e:2d:16:34:3f:f1:8e:0b:83:08:36:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: Jun 20 06:26:29 2025 GMT
Not After : Jun 19 06:31:29 2026 GMT
Subject: CN=26B2E4A61333899FA6DAD370B9840C5B04BF1760
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:26:ce:df:93:b8:da:c9:b2:73:c0:b2:cb:15:
d2:99:a2:b8:a6:db:f3:eb:26:b1:91:6f:4e:37:71:
a6:6c:5f:35:f2:d6:c3:92:4b:48:db:db:57:f9:ae:
3a:cb:2d:6f:cd:5a:16:da:5f:1b:51:8e:8d:04:4b:
fe:65:5d:a7:91:76:1e:94:66:28:a0:9a:c2:f1:78:
39:0e:46:49:67:70:3b:c0:ef:4d:5a:88:07:da:0e:
f8:18:33:f4:d3:80:70:db:03:94:fb:9c:bb:74:92:
07:b1:e7:2a:7a:08:9b:92:b8:60:ce:f9:10:2b:d6:
14:f0:a7:98:ee:1c:d3:67:93:27:fb:18:8d:7c:69:
d8:39:31:1c:28:42:7d:2d:11:e4:04:98:a8:60:d2:
b7:87:19:17:07:4e:87:9b:d2:ce:39:96:87:98:70:
c7:3d:f8:8a:c4:bc:80:de:1b:da:97:62:81:e9:ad:
b2:90:f2:fd:bd:34:25:e1:88:48:fd:3c:ed:c5:71:
74:7f:d1:75:d7:b9:95:2f:5c:f1:44:43:9f:01:a9:
09:d0:dd:3d:de:de:f4:2a:3e:3d:fb:29:02:12:c7:
da:14:3a:f5:67:43:36:04:9f:b1:d8:f5:8f:d8:5e:
8a:15:d6:d3:3f:e0:e1:72:4f:65:b6:16:8f:f7:c9:
8c:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:B2:E4:A6:13:33:89:9F:A6:DA:D3:70:B9:84:0C:5B:04:BF:17:60
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538313a333563613a3a2f34382d3438203d3e203136393039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7581:35ca::/48
Signature Algorithm: sha256WithRSAEncryption
4b:2c:70:f3:85:fa:0c:3c:6a:ac:de:74:6b:23:b5:06:f1:70:
f0:8e:c0:93:dd:34:00:2c:0b:08:0d:9d:fd:84:fe:af:d9:63:
d3:d0:1b:e4:d7:9a:ab:02:4f:0d:a3:33:06:1b:05:65:56:2f:
45:f2:9a:1b:ea:37:83:f9:42:aa:4d:e9:ac:d8:40:80:42:cf:
44:0a:b3:9d:70:e4:a0:11:32:6f:b5:56:ae:4c:01:92:63:b8:
f0:cf:94:07:b9:6f:a2:21:9f:47:37:88:93:3f:3e:d0:d4:0a:
7e:ff:ad:87:3d:4d:4a:c4:5a:b7:62:58:94:91:ab:6a:c1:85:
ee:77:52:48:83:62:94:b7:76:c5:03:65:e6:9f:e9:97:87:09:
06:f7:7d:29:a1:9c:df:b1:28:f2:c6:62:be:73:e9:7e:ab:4b:
d1:62:98:2a:7f:00:af:72:8c:95:8e:13:84:29:82:d0:7e:ab:
b5:75:f5:69:1c:da:35:78:6c:23:5e:51:c4:5c:0f:be:39:22:
cf:18:6e:ac:83:85:1a:8c:98:30:ec:e6:ac:d0:bd:ef:16:c3:
01:b1:02:43:95:a2:0f:e1:41:ec:eb:a1:0c:db:ef:88:18:4b:
bc:50:82:df:58:b3:91:c0:d0:9d:61:e8:b9:c8:6e:ae:d2:8b:
94:03:00:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 23 23:52:11 2025 by rpki-client