Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538313a333566383a3a2f34382d3438203d3e203136393039.roa
File: 326131343a373538313a333566383a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier: B2Yrr0cg4cVWOSIBxk1yiICjy4Vu7LcNQ3GkES0yIQ0=
Subject key identifier: 79:5D:FC:93:0D:91:37:3F:AF:44:4E:77:51:95:16:55:14:E7:33:40
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 18B4DD78B095A3EB3587456C30312B605EA7A8F1
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538313a333566383a3a2f34382d3438203d3e203136393039.roa
Signing time: Fri 20 Jun 2025 06:30:34 +0000
ROA not before: Fri 20 Jun 2025 06:25:34 +0000
ROA not after: Fri 19 Jun 2026 06:30:34 +0000
asID: 16909
IP address blocks: 2a14:7581:35f8::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 25 Jun 2025 16:06:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
18:b4:dd:78:b0:95:a3:eb:35:87:45:6c:30:31:2b:60:5e:a7:a8:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: Jun 20 06:25:34 2025 GMT
Not After : Jun 19 06:30:34 2026 GMT
Subject: CN=795DFC930D91373FAF444E775195165514E73340
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:4f:3b:73:9a:75:df:79:8b:24:0c:40:73:dc:
00:bc:d4:73:80:1f:3f:69:30:86:aa:f7:64:94:67:
4a:b2:9b:2f:0a:17:cf:8e:9c:82:84:2b:e9:de:60:
d9:02:8d:4c:4a:b3:3b:e4:91:39:18:c0:ec:95:23:
13:2d:3e:12:7f:a5:83:b7:04:d9:a2:3f:03:8a:3f:
d0:f3:12:29:59:b5:90:56:f1:54:ca:13:d2:ae:72:
af:03:b5:ad:5c:66:26:16:2b:26:96:73:4f:77:9c:
f2:4e:86:18:a5:ed:a8:31:75:c2:88:b1:47:ea:79:
56:99:5e:54:82:fd:2f:29:ee:d5:14:e7:1a:f3:11:
f8:17:e9:5e:52:48:6c:81:12:8b:2f:fb:ca:f4:b2:
e0:bf:d3:8a:07:20:44:08:11:bb:31:1c:55:62:f4:
ec:7c:36:b8:0b:53:1a:39:79:c8:13:a7:60:19:c2:
9f:f6:40:84:e2:fe:1f:8f:d4:9c:bf:b9:2f:90:33:
71:ea:ad:c1:bd:ea:b9:49:69:82:39:d8:b8:2f:61:
0f:18:79:e1:94:27:05:44:62:5e:f3:5e:dc:ca:af:
db:cd:33:8d:69:f2:48:0b:7f:86:3b:2f:43:d4:61:
ee:32:67:2a:0c:74:4a:03:0a:33:c0:2b:af:e1:d9:
27:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:5D:FC:93:0D:91:37:3F:AF:44:4E:77:51:95:16:55:14:E7:33:40
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538313a333566383a3a2f34382d3438203d3e203136393039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7581:35f8::/48
Signature Algorithm: sha256WithRSAEncryption
51:09:d7:a6:fa:15:12:04:d5:5b:9b:2c:9e:72:e3:c0:b7:a0:
b4:76:39:53:8b:12:d9:62:d3:7c:ca:63:fe:6e:b8:3c:97:fc:
d1:7d:aa:72:e3:2f:08:8e:b8:32:88:f1:db:8c:b6:7e:33:85:
93:86:21:d0:84:0e:77:50:57:13:58:a4:b7:a4:2a:44:4d:04:
dd:d7:64:11:ea:03:33:9c:34:cb:db:18:41:5b:56:25:88:c7:
99:a7:90:a1:02:93:3a:97:0f:35:58:aa:a0:67:ce:0b:7e:4e:
6a:ec:9b:d2:4d:7a:a6:26:cb:ca:21:df:0d:eb:f0:fa:ff:74:
25:4a:a5:f7:03:09:5e:28:98:53:62:aa:3e:77:b2:14:cc:fd:
0d:ed:b0:7f:94:5f:5d:39:99:6b:91:c8:7f:bc:f4:16:68:f9:
77:34:4f:0f:31:0f:ae:4d:68:74:b3:95:30:1e:1c:3c:a7:5b:
db:bb:04:e5:3c:fa:29:63:65:8f:29:be:5d:ef:aa:b2:56:8c:
5f:50:14:63:36:81:c4:25:e7:a2:b5:ee:bc:03:24:51:ef:40:
1e:e3:8d:88:1e:32:87:3d:97:6f:7c:41:28:c5:fd:61:50:20:
bc:19:81:40:cf:87:84:9e:2a:c0:e2:13:76:b4:72:b2:49:ab:
9b:38:80:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 23 23:53:42 2025 by rpki-client