Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538313a333564343a3a2f34382d3438203d3e203136393039.roa
File: 326131343a373538313a333564343a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier: P2r6hvwwn37ab/quZhE00SuYaZWRNfw79LSZrbh0oME=
Subject key identifier: 26:DA:BD:58:66:F4:75:62:6C:53:C7:70:39:D4:A6:92:38:B4:4C:8C
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 164E72FB9FBE3D7D3A4451EC1946C82B4012C2A6
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538313a333564343a3a2f34382d3438203d3e203136393039.roa
Signing time: Fri 20 Jun 2025 06:27:15 +0000
ROA not before: Fri 20 Jun 2025 06:22:15 +0000
ROA not after: Fri 19 Jun 2026 06:27:15 +0000
asID: 16909
IP address blocks: 2a14:7581:35d4::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 25 Jun 2025 16:06:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
16:4e:72:fb:9f:be:3d:7d:3a:44:51:ec:19:46:c8:2b:40:12:c2:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: Jun 20 06:22:15 2025 GMT
Not After : Jun 19 06:27:15 2026 GMT
Subject: CN=26DABD5866F475626C53C77039D4A69238B44C8C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:5a:9d:55:cd:4d:ac:50:29:92:57:8a:4d:a7:
df:ed:32:e4:ce:dd:8c:30:0c:05:89:ac:2e:1d:d3:
27:0c:1b:bb:cc:77:df:b9:11:1f:e1:71:14:33:db:
12:9f:49:8e:cc:20:74:7c:7e:4c:02:bf:61:72:e0:
c8:cc:23:ec:3a:4c:a2:c7:c3:3d:d2:08:59:b6:71:
2d:59:6b:83:bf:17:cb:4e:bf:e6:3e:e3:c1:7c:b8:
3f:30:0f:59:b1:d2:a4:b2:c4:9e:51:42:96:e5:c0:
ce:5f:e6:01:c5:04:b8:e1:dc:b6:68:57:d2:ba:8b:
07:75:00:7b:c5:db:fc:17:0b:6e:94:90:77:d8:35:
0e:0a:7d:6f:23:62:0d:f2:70:b1:db:d9:eb:76:a0:
db:70:02:b3:fb:f2:ad:5c:4c:c4:2a:3c:64:7c:95:
b3:bb:52:0b:39:90:ad:a3:34:1d:84:5d:c5:c1:e7:
fa:33:3f:a5:9f:fb:ea:4a:03:50:50:c2:48:8c:27:
b4:af:d2:18:ed:57:26:c2:36:c4:f8:e7:19:96:a0:
2e:92:53:f3:ba:bd:9f:2a:3d:11:53:40:62:3f:d2:
b6:04:b2:03:a9:be:d1:ea:2e:e0:eb:75:e8:d1:92:
b4:bc:94:81:b4:d6:04:6f:c0:73:9b:01:78:90:47:
69:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:DA:BD:58:66:F4:75:62:6C:53:C7:70:39:D4:A6:92:38:B4:4C:8C
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538313a333564343a3a2f34382d3438203d3e203136393039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7581:35d4::/48
Signature Algorithm: sha256WithRSAEncryption
3b:fc:2a:4e:7e:26:14:38:6d:53:6a:84:bf:86:91:aa:39:ba:
42:3d:bf:21:74:41:30:f8:67:ed:f1:ac:30:6a:16:38:cb:5a:
9a:60:90:e1:cc:ca:6a:50:4d:54:f3:dd:3c:cf:3a:57:5a:1a:
12:4a:fa:db:f9:6f:b8:2a:33:bd:3f:9a:cf:d4:ff:ad:d2:26:
0f:a9:53:85:5e:8f:80:99:9d:85:3e:5c:a3:f8:31:b8:8f:f2:
f9:a3:78:4e:05:8a:0b:68:7a:6a:88:e0:70:e8:d6:d8:2b:f8:
54:b9:06:9e:2c:c0:d8:44:e1:9b:d4:3c:b1:65:43:e6:c8:5f:
50:cf:52:34:cd:29:ab:e6:8b:7f:aa:87:aa:ee:f8:71:e0:01:
20:33:a0:0d:8f:75:3d:aa:a7:07:ca:e7:66:53:a8:e5:eb:b7:
94:a5:a6:bc:fc:6d:9b:da:04:5e:7c:5f:75:0c:c8:2a:56:6a:
8c:89:bf:d0:22:6a:82:7e:9d:f0:9a:65:d2:cc:09:46:ce:d7:
c2:c1:22:4c:9f:2d:bb:6a:0f:b4:3e:cd:0a:c8:88:64:13:e0:
a1:3d:6b:6d:be:f4:25:59:db:6a:ef:dc:60:3d:a7:bf:6c:bc:
94:f8:bd:79:61:a7:d4:79:49:46:da:04:c5:64:07:c7:96:91:
26:96:ff:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 23 23:53:14 2025 by rpki-client