Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538313a333565333a3a2f34382d3438203d3e203136393039.roa
File: 326131343a373538313a333565333a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier: IaqJozMjk+L1AFOI/w696Ed8gj4s9hIII6g2/YtmgIY=
Subject key identifier: E3:AA:3F:6F:BC:FC:20:18:72:01:08:13:E2:10:81:F4:48:18:BF:B9
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 71025CF00FD410C5E8076C4CC23B506952F421F2
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538313a333565333a3a2f34382d3438203d3e203136393039.roa
Signing time: Fri 20 Jun 2025 06:28:56 +0000
ROA not before: Fri 20 Jun 2025 06:23:56 +0000
ROA not after: Fri 19 Jun 2026 06:28:56 +0000
asID: 16909
IP address blocks: 2a14:7581:35e3::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 25 Jun 2025 16:06:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
71:02:5c:f0:0f:d4:10:c5:e8:07:6c:4c:c2:3b:50:69:52:f4:21:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: Jun 20 06:23:56 2025 GMT
Not After : Jun 19 06:28:56 2026 GMT
Subject: CN=E3AA3F6FBCFC201872010813E21081F44818BFB9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:dd:57:97:5c:e3:83:d0:5b:4a:c0:ff:81:62:
85:c0:9c:64:bd:0c:db:91:30:5c:da:3c:e3:26:dc:
91:ac:b2:58:0f:b6:ee:46:9a:27:4d:05:de:aa:30:
2e:ed:f8:17:30:73:96:90:dd:e0:45:ce:cc:80:fe:
a2:77:97:fe:7a:13:28:ac:68:7d:4d:00:60:36:ae:
10:53:14:29:66:c1:64:ba:b3:3d:11:55:72:cc:6c:
90:42:51:97:35:64:26:14:45:b5:2b:b6:f8:fd:8f:
ce:e4:0e:6f:0f:74:d0:60:3c:ce:02:00:14:5a:80:
67:12:0c:a5:81:c4:53:fb:61:37:7b:87:b3:e2:1f:
40:37:62:19:dd:0f:b3:d6:f2:67:4e:0d:5c:10:87:
10:2b:e2:d2:e5:03:12:f4:5a:84:b5:20:9f:b1:aa:
a8:ea:15:0d:ac:04:24:b4:42:c2:00:10:e4:97:81:
6b:52:9e:f4:4c:85:a1:c7:32:be:50:1d:53:fc:2b:
e9:77:74:36:ef:0a:29:7f:f9:40:2a:5b:d4:9c:90:
c8:2a:8d:88:24:95:9e:08:54:bc:46:d7:5b:b9:c5:
95:47:47:5d:4e:b2:1b:dd:9b:67:71:15:f2:4b:cb:
25:67:6b:7a:11:c4:c8:cd:14:75:55:34:e5:aa:24:
50:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:AA:3F:6F:BC:FC:20:18:72:01:08:13:E2:10:81:F4:48:18:BF:B9
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538313a333565333a3a2f34382d3438203d3e203136393039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7581:35e3::/48
Signature Algorithm: sha256WithRSAEncryption
a6:f0:62:1f:f3:2e:3a:63:4b:56:7c:27:11:88:84:7c:19:0d:
ec:3f:5d:68:24:d1:52:7b:a5:14:7b:01:ba:9c:45:0a:48:4b:
97:59:7a:49:1b:20:94:12:9d:6a:20:eb:96:2c:73:90:84:09:
ff:2b:b9:64:e1:d1:7e:74:4a:3b:68:e0:f6:86:91:43:3a:e2:
42:68:a5:9e:f0:d6:ed:5c:1c:1c:78:4a:ac:2f:5a:4a:c4:3f:
a6:95:8f:29:38:bf:e9:86:71:37:73:03:9f:c1:4e:23:39:c6:
80:e0:87:e8:8e:8c:d4:34:d8:a8:36:e1:76:f5:7f:f5:cd:bb:
b8:d6:32:de:e1:a9:ed:2f:d5:bf:ad:59:71:b6:75:84:df:49:
f6:d5:19:e0:7b:07:22:db:02:1a:78:cd:66:f4:42:e3:09:11:
00:5f:45:38:d2:31:33:e0:ea:80:ad:d4:e1:82:e8:16:59:6b:
dd:a3:8a:dd:b8:2c:fc:90:69:b3:92:5b:eb:61:8a:f7:87:65:
39:6e:7e:f7:10:26:fb:9b:71:65:45:ff:12:28:4c:e7:24:4b:
a3:c3:0b:9a:0e:ad:a3:49:39:75:2f:03:06:49:98:5c:ee:c3:
f4:c3:d6:50:23:ad:48:3f:09:0d:1d:05:91:b6:d1:95:54:e3:
df:67:fe:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 11:38:56 2025 by rpki-client