Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363030303a3a2f33362d3438203d3e20333639363938.roa
File: 326131343a373538343a363030303a3a2f33362d3438203d3e20333639363938.roa (raw, json)
Hash identifier: DfBY6seX+U4xxpLmDwl+bPxkG8EUiaP2x6NQGB/bqDI=
Subject key identifier: DA:25:AE:9E:82:7B:65:29:7F:8F:47:BC:BD:4B:BB:E6:75:FD:27:A9
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 18003C2D14B6C9FD45FCA876AE08E4DC8BAB26D9
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363030303a3a2f33362d3438203d3e20333639363938.roa
Signing time: Wed 25 Jun 2025 15:27:39 +0000
ROA not before: Wed 25 Jun 2025 15:22:39 +0000
ROA not after: Wed 24 Jun 2026 15:27:39 +0000
asID: 369698
IP address blocks: 2a14:7584:6000::/36 maxlen: 48
Validation: Failed, certificate revoked on Wed 25 Jun 2025 16:06:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
18:00:3c:2d:14:b6:c9:fd:45:fc:a8:76:ae:08:e4:dc:8b:ab:26:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: Jun 25 15:22:39 2025 GMT
Not After : Jun 24 15:27:39 2026 GMT
Subject: CN=DA25AE9E827B65297F8F47BCBD4BBBE675FD27A9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:19:67:43:f3:63:f4:d3:bf:4c:c7:65:b1:19:
ca:6f:6f:e9:c6:a2:73:f5:b4:bd:a9:10:f8:7d:b7:
0c:65:f8:c4:5a:40:55:45:11:09:5e:0e:8d:29:cc:
60:1d:4f:e9:88:bb:18:d1:f6:7e:36:f0:f3:93:1a:
fc:9a:22:84:a1:45:69:99:0f:7a:e7:13:55:87:66:
be:4b:05:32:38:da:a1:06:20:93:52:c8:60:a9:6a:
90:f4:90:e3:df:01:0d:12:f1:af:94:c9:b7:bd:5a:
19:df:a9:d1:40:ff:c3:8e:82:a5:d1:b1:89:83:b2:
fc:40:92:c0:ca:87:8f:ca:71:78:d7:39:73:3f:53:
84:d9:68:69:b5:1f:98:e4:21:f0:aa:b3:be:f2:25:
b9:33:2a:bc:66:06:e8:5e:44:39:f1:e5:75:89:5b:
71:f7:dd:dc:7b:c8:a0:b0:29:fb:4a:86:f7:e2:44:
e2:94:c5:f6:25:61:02:b0:17:a0:79:4a:a2:71:24:
5d:6b:52:e2:0c:67:17:a7:5b:43:23:0d:ad:d2:86:
4a:72:40:2e:20:23:ad:c4:91:bd:85:20:8a:08:a5:
01:23:2c:f7:6f:3c:bb:95:e7:35:1c:ec:d3:68:95:
06:c2:09:7e:2e:c0:d8:a8:bb:c2:c9:a0:13:63:ad:
17:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:25:AE:9E:82:7B:65:29:7F:8F:47:BC:BD:4B:BB:E6:75:FD:27:A9
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363030303a3a2f33362d3438203d3e20333639363938.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:6000::/36
Signature Algorithm: sha256WithRSAEncryption
9e:6a:98:60:ba:4f:2c:d3:ae:e0:91:6b:d4:6e:7e:69:e2:b1:
37:af:56:38:8c:c4:d4:63:22:fb:99:fd:86:d1:43:09:de:a2:
30:af:71:c3:d5:69:cd:b2:66:0b:9f:43:88:38:a3:34:29:70:
76:50:40:94:31:a1:d9:07:e9:dc:77:82:06:94:bf:42:70:19:
df:6d:d8:56:45:96:5f:34:96:75:5f:46:43:b5:fe:53:15:23:
4b:43:05:0d:70:b7:b8:30:ca:7d:4c:4e:b0:a3:0e:e7:17:61:
6d:ca:da:9c:bb:cf:d7:83:e2:01:63:b6:ee:0a:98:ba:36:d3:
0b:cd:36:4f:ec:e5:d1:2e:b3:51:d1:be:74:b6:cd:e4:43:08:
4d:8a:29:c0:9e:eb:2d:a6:8b:85:1d:2a:5f:07:78:4f:02:8f:
2b:a8:11:a5:93:a6:7b:29:57:68:1c:a7:69:b6:5f:c1:53:e9:
14:e9:65:b9:7a:e2:81:3f:25:1d:31:34:6b:83:28:d9:5e:fa:
55:a2:fb:f6:74:b7:67:ae:3f:8a:a2:8d:7a:8a:74:50:b0:7d:
59:d5:0c:87:57:de:fa:9f:44:1d:fc:5d:26:4c:4b:d4:d0:21:
30:9b:bd:a1:35:37:49:e7:90:81:fc:81:6f:c0:1a:d3:15:ff:
ec:df:d3:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 25 01:01:01 2025 by rpki-client