Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538313a333565393a3a2f34382d3438203d3e203136393039.roa
File: 326131343a373538313a333565393a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier: 5Il6fz6xZHR6ri+YsUdg7BVHH0lBNbLwC1NtbjV+Xus=
Subject key identifier: EB:3A:34:F1:87:03:FE:84:36:7B:90:E3:35:AE:42:03:98:88:10:B9
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 02343210C185A1135FD6989EB9A9AC399CA45439
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538313a333565393a3a2f34382d3438203d3e203136393039.roa
Signing time: Fri 20 Jun 2025 06:31:01 +0000
ROA not before: Fri 20 Jun 2025 06:26:01 +0000
ROA not after: Fri 19 Jun 2026 06:31:01 +0000
asID: 16909
IP address blocks: 2a14:7581:35e9::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 25 Jun 2025 16:06:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
02:34:32:10:c1:85:a1:13:5f:d6:98:9e:b9:a9:ac:39:9c:a4:54:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: Jun 20 06:26:01 2025 GMT
Not After : Jun 19 06:31:01 2026 GMT
Subject: CN=EB3A34F18703FE84367B90E335AE4203988810B9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:d2:ad:f0:a0:24:d5:e0:3d:fd:1e:6a:0c:10:
ae:9e:8e:24:e0:da:3c:f9:aa:6a:cd:1d:70:03:af:
05:59:50:27:0c:0e:c5:b9:1e:21:4e:f1:18:c3:e8:
9d:5a:f9:f0:88:58:bb:c9:50:fe:2d:ee:cb:0f:3a:
dc:3d:e5:df:85:a9:8d:5c:e6:8e:f6:01:4d:db:e3:
fc:23:b9:b3:fb:05:4b:c4:48:d8:32:2e:bb:f5:bb:
16:bb:aa:77:ac:2f:5e:c1:6a:b5:20:c3:5d:c0:bb:
c0:49:28:c2:e5:62:aa:f2:f8:77:89:84:bd:36:2d:
74:22:30:ba:12:83:db:0c:77:59:a8:70:34:ad:4b:
ed:7a:cd:9b:ad:5b:ed:1d:11:db:04:2c:fb:22:76:
10:17:4c:36:66:11:84:96:fe:b9:59:be:08:ad:84:
70:da:b4:99:ed:2c:b1:3f:0d:a5:e4:a2:fc:ad:4e:
17:63:37:a7:46:39:c2:81:08:b5:53:35:41:17:25:
b4:29:44:9c:bf:4e:b5:09:4b:e8:9a:54:be:1b:26:
91:51:98:0c:ad:01:be:01:a9:8e:a9:93:45:0c:4e:
1b:58:f9:69:7d:61:73:c7:39:f6:86:ae:71:0c:7d:
76:fc:7a:cd:cc:eb:a7:13:35:8e:c2:72:54:bc:e3:
cf:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:3A:34:F1:87:03:FE:84:36:7B:90:E3:35:AE:42:03:98:88:10:B9
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538313a333565393a3a2f34382d3438203d3e203136393039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7581:35e9::/48
Signature Algorithm: sha256WithRSAEncryption
90:62:a2:6c:3d:09:52:24:f2:3a:e8:18:33:29:0d:26:b0:5d:
24:77:6a:42:9f:41:f3:10:ad:1f:62:b2:9a:db:b8:54:5f:94:
22:db:61:ee:4b:79:70:6f:0c:ea:a7:49:0a:4a:79:f3:b2:fa:
43:4b:df:f8:35:fc:61:b7:02:4f:37:47:12:ca:d5:b9:6b:65:
de:84:39:3e:30:af:af:42:69:20:ec:8b:0b:78:b0:12:c6:4e:
fe:8e:5a:22:88:16:63:7b:32:89:c7:3e:f2:27:cd:67:36:ba:
33:f5:fd:29:55:8e:74:30:c7:1a:1b:14:fb:d2:1c:6a:b6:c3:
2b:bc:80:7e:70:5a:d8:c7:8d:71:77:a5:00:9a:50:86:e3:29:
17:cb:13:b7:78:de:a6:48:02:f4:b0:27:54:97:f7:20:72:02:
21:19:40:fb:11:21:32:1f:cc:76:f8:b5:2e:70:94:ba:ab:1e:
7a:eb:79:1a:1d:1c:e3:6d:07:72:12:ff:c8:df:96:f6:dd:f1:
24:a1:5e:1e:38:66:a4:b2:87:bc:6e:c3:6e:f5:4e:98:15:2b:
9e:ae:c0:7a:29:39:f1:8b:a2:6f:66:cf:fc:f8:cd:fb:d3:03:
aa:8e:cc:38:55:7b:ee:4a:48:88:41:1f:8c:33:ec:20:ab:2c:
f3:bd:09:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 11:41:21 2025 by rpki-client