Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538313a333565313a3a2f34382d3438203d3e203136393039.roa
File: 326131343a373538313a333565313a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier: Gky+vQggMIZPXhPpQLbceBRWCGXe3GhRBeKrGBBzKO0=
Subject key identifier: 62:D3:F7:75:97:31:2F:1B:20:8C:EE:6B:1D:43:59:DA:07:9B:F4:1A
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 35CD2A6C2CA8D0E8046A1FEFF1F6CC8E3BD5CEAC
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538313a333565313a3a2f34382d3438203d3e203136393039.roa
Signing time: Fri 20 Jun 2025 06:26:13 +0000
ROA not before: Fri 20 Jun 2025 06:21:13 +0000
ROA not after: Fri 19 Jun 2026 06:26:13 +0000
asID: 16909
IP address blocks: 2a14:7581:35e1::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 25 Jun 2025 16:06:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
35:cd:2a:6c:2c:a8:d0:e8:04:6a:1f:ef:f1:f6:cc:8e:3b:d5:ce:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: Jun 20 06:21:13 2025 GMT
Not After : Jun 19 06:26:13 2026 GMT
Subject: CN=62D3F77597312F1B208CEE6B1D4359DA079BF41A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:ff:33:e1:f6:5d:8b:fd:68:23:1e:dc:30:de:
47:1a:e0:ad:cb:42:42:ac:44:dc:2f:ed:df:ff:69:
8d:ed:1d:67:f8:20:8b:02:1d:36:e7:03:b8:d3:83:
01:58:89:cd:7a:51:65:e6:9e:97:51:f6:45:44:bf:
20:d2:8c:3a:10:a2:5e:40:0a:20:b8:05:6d:ca:b6:
9e:22:2e:a8:32:01:20:5d:e8:32:ff:38:04:5d:3d:
90:56:91:ef:71:2d:b4:8a:fe:df:4b:1c:4f:f1:2a:
84:01:2e:f0:52:ae:37:ac:39:84:2a:85:ea:6d:c6:
08:d0:3d:23:bf:e8:cc:0c:c0:20:c9:28:f3:e4:a0:
40:80:8f:85:2e:c3:bd:dc:5e:a4:da:a8:90:02:fb:
f3:4b:c0:7c:e8:9b:a0:ca:6a:66:9c:a4:6e:76:00:
27:64:ea:1c:dc:9d:3b:1c:75:d2:6a:06:d9:0f:a3:
b9:68:74:b3:4b:d6:bd:66:48:81:4b:0e:09:57:ea:
b0:eb:04:ef:79:03:2b:0c:e2:de:9c:94:60:7d:6b:
90:46:06:0e:4f:ae:e6:ba:7f:bc:b5:7b:bf:c7:d1:
6f:c4:2c:d9:5c:c5:44:f4:01:14:00:a4:bb:3e:35:
46:ed:ea:cb:6c:0e:f0:ef:29:66:31:68:62:9b:90:
9b:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:D3:F7:75:97:31:2F:1B:20:8C:EE:6B:1D:43:59:DA:07:9B:F4:1A
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538313a333565313a3a2f34382d3438203d3e203136393039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7581:35e1::/48
Signature Algorithm: sha256WithRSAEncryption
b1:ac:a4:bc:00:88:1d:75:2d:15:c5:9f:bf:f0:33:ea:9a:ef:
55:32:56:bf:64:dd:45:65:36:d3:01:8c:ad:47:9c:05:a7:cb:
1d:c6:22:04:7f:99:a7:a1:0d:32:d6:56:2c:2a:0b:a7:19:47:
b7:4e:08:f5:c0:7b:9b:32:29:7e:08:38:3f:d2:98:0c:b9:2b:
eb:2c:84:aa:d3:2d:aa:a9:86:cf:40:a4:30:44:a1:b5:65:99:
49:1b:4f:cc:84:76:64:e5:ca:86:b2:84:01:8f:77:10:4a:41:
c3:8b:60:f2:b2:41:18:1a:43:58:6d:44:d5:e5:d9:ce:fe:c7:
70:83:5a:33:c4:6e:47:b7:60:c7:20:df:98:f5:8b:8d:fb:3e:
b2:c2:4c:b6:e5:ce:74:cb:e8:12:e1:51:f2:70:26:87:ce:d7:
ef:e6:e1:4a:09:77:94:ae:4b:c6:5e:9e:84:28:13:8b:c9:73:
15:0c:80:e8:0d:06:a0:2d:65:42:5d:58:24:7b:05:1b:0e:91:
76:17:a3:82:4c:9a:8a:fd:40:0e:89:34:d2:a2:a8:ca:26:58:
a9:1a:62:9f:66:ff:c9:97:01:83:f7:8d:6c:09:6c:e3:e4:4b:
65:2a:28:e3:39:09:b6:1d:9d:66:e7:f6:cf:70:87:c4:b5:46:
06:bd:19:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 23 23:52:30 2025 by rpki-client