Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538313a333530363a3a2f34382d3438203d3e203136393039.roa
File: 326131343a373538313a333530363a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier: iyYDjZ7d4bQVrsFXBfZy5rl9Pw44rYaalylbcjHhng8=
Subject key identifier: 17:12:CB:62:15:8D:E0:B6:E4:90:84:74:C2:76:61:DB:F0:BA:FB:33
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 309FB1A24CE769F3275524CD2C16302787214308
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538313a333530363a3a2f34382d3438203d3e203136393039.roa
Signing time: Fri 20 Jun 2025 06:31:29 +0000
ROA not before: Fri 20 Jun 2025 06:26:29 +0000
ROA not after: Fri 19 Jun 2026 06:31:29 +0000
asID: 16909
IP address blocks: 2a14:7581:3506::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 25 Jun 2025 16:06:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
30:9f:b1:a2:4c:e7:69:f3:27:55:24:cd:2c:16:30:27:87:21:43:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: Jun 20 06:26:29 2025 GMT
Not After : Jun 19 06:31:29 2026 GMT
Subject: CN=1712CB62158DE0B6E4908474C27661DBF0BAFB33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:8c:8f:5c:5c:f6:1c:a6:8c:90:74:66:ce:09:
f1:6e:e8:c0:05:56:30:2d:53:a4:1b:2e:53:bb:ed:
71:97:c2:df:a2:9f:f8:08:91:12:ac:e7:58:ae:02:
2e:0f:cb:9a:32:19:95:7e:2a:12:5e:f5:98:10:f9:
57:1d:11:01:25:60:6d:22:5c:f2:ba:d6:c0:86:52:
5a:fb:be:ee:70:bb:9c:db:b3:1f:02:7b:33:42:10:
b9:7b:6a:94:52:48:5e:08:6a:8d:1d:fd:d4:34:5b:
f2:d3:ba:06:1c:80:a5:4c:0b:3d:c3:58:f3:f4:70:
42:8a:56:a6:9d:dd:e5:ba:ac:08:1e:6d:ad:6c:11:
59:6b:96:50:cc:21:17:d9:8d:dc:cd:ce:82:13:33:
61:b1:4c:05:fb:3e:69:24:24:00:f1:c6:de:e6:b8:
87:6a:25:00:c6:be:77:fb:d0:3e:b4:f6:3c:6d:2c:
ab:19:03:25:c1:fb:94:7f:01:91:11:ec:30:7f:96:
d0:c7:55:3d:95:35:bb:f9:be:c5:5d:b2:c7:36:94:
0f:9e:54:db:a8:4e:92:6c:fc:c7:c5:ca:2d:4f:d0:
11:ee:4a:4b:0f:cb:d1:3a:39:87:3f:75:76:51:22:
cc:ea:6b:32:1b:1f:38:27:01:5b:66:81:4f:ca:94:
5b:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:12:CB:62:15:8D:E0:B6:E4:90:84:74:C2:76:61:DB:F0:BA:FB:33
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538313a333530363a3a2f34382d3438203d3e203136393039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7581:3506::/48
Signature Algorithm: sha256WithRSAEncryption
15:41:c4:b8:9d:9c:c2:0f:31:08:94:b2:65:a3:a3:6a:47:30:
a3:c9:3c:c7:22:c5:5e:e5:44:82:94:66:dc:6e:9f:0f:e5:70:
48:03:e9:f7:3c:31:1b:52:a1:04:7c:56:dc:45:0a:c8:3b:d8:
b3:c3:1c:3c:b0:80:f6:94:57:73:4f:4d:6f:ae:50:05:68:18:
18:9a:d5:b9:6a:46:6d:e2:1d:a0:62:df:15:20:46:96:6b:d3:
dc:55:16:c5:a5:80:dd:bf:ff:be:2d:7b:ee:ce:e9:89:d7:7d:
45:90:9f:39:9a:25:80:43:ee:3d:7e:65:94:8b:26:38:9e:56:
47:21:06:d8:da:d4:8f:9d:16:a5:5a:45:85:6f:e9:a5:f5:63:
9c:12:4f:06:82:a8:b9:e8:61:2a:81:46:60:84:dc:d7:f0:f8:
82:52:9b:51:2b:4d:c6:96:f0:e8:66:84:df:fe:4e:64:9a:75:
f8:e0:63:6a:86:f7:26:25:a0:49:e8:66:33:c1:b2:2c:f8:70:
ef:d7:29:e0:db:b6:a4:86:7d:13:f5:fa:d0:cc:a2:d2:45:62:
cb:90:0d:fa:e8:35:47:23:57:a5:42:cf:4b:cd:15:5d:00:b6:
da:f3:a4:ca:fb:2f:40:ce:b9:94:d1:3e:ca:32:cb:de:33:a5:
23:c8:dc:86
-----BEGIN CERTIFICATE-----
MIIFXjCCBEagAwIBAgIUMJ+xokznafMnVSTNLBYwJ4chQwgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN0NCMjZGNzY0MkZENkI0Q0JGMzVGQkVFNDU1RjFFRkIw
QzlGMEE0NTAeFw0yNTA2MjAwNjI2MjlaFw0yNjA2MTkwNjMxMjlaMDMxMTAvBgNV
BAMTKDE3MTJDQjYyMTU4REUwQjZFNDkwODQ3NEMyNzY2MURCRjBCQUZCMzMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBjI9cXPYcpoyQdGbOCfFu6MAF
VjAtU6QbLlO77XGXwt+in/gIkRKs51iuAi4Py5oyGZV+KhJe9ZgQ+VcdEQElYG0i
XPK61sCGUlr7vu5wu5zbsx8CezNCELl7apRSSF4Iao0d/dQ0W/LTugYcgKVMCz3D
WPP0cEKKVqad3eW6rAgeba1sEVlrllDMIRfZjdzNzoITM2GxTAX7PmkkJADxxt7m
uIdqJQDGvnf70D609jxtLKsZAyXB+5R/AZER7DB/ltDHVT2VNbv5vsVdssc2lA+e
VNuoTpJs/MfFyi1P0BHuSksPy9E6OYc/dXZRIszqazIbHzgnAVtmgU/KlFsdAgMB
AAGjggJoMIICZDAdBgNVHQ4EFgQUFxLLYhWN4LbkkIR0wnZh2/C6+zMwHwYDVR0j
BBgwFoAUfLJvdkL9a0y/NfvuRV8e+wyfCkUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv
cnkvOGE4NDhhZGY5MmVlNGQ4NDAxOTNkZjQ1YTBlYTY2ODcvMS83Q0IyNkY3NjQy
RkQ2QjRDQkYzNUZCRUU0NTVGMUVGQjBDOUYwQTQ1LmNybDCBngYIKwYBBQUHAQEE
gZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5Lzg5MjcwZjZjLWEzZmUtNDI5OS1iMDc5LTMwOWVkOTdm
MzgyNC8wLzdDQjI2Rjc2NDJGRDZCNENCRjM1RkJFRTQ1NUYxRUZCMEM5RjBBNDUu
Y2VyMIGqBggrBgEFBQcBCwSBnTCBmjCBlwYIKwYBBQUHMAuGgYpyc3luYzovL3Jw
a2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY5MmVlNGQ4NDAxOTNk
ZjQ1YTBlYTY2ODcvMS8zMjYxMzEzNDNhMzczNTM4MzEzYTMzMzUzMDM2M2EzYTJm
MzQzODJkMzQzODIwM2QzZTIwMzEzNjM5MzAzOS5yb2EwGAYDVR0gAQH/BA4wDDAK
BggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoUdYE1BjAN
BgkqhkiG9w0BAQsFAAOCAQEAFUHEuJ2cwg8xCJSyZaOjakcwo8k8xyLFXuVEgpRm
3G6fD+VwSAPp9zwxG1KhBHxW3EUKyDvYs8McPLCA9pRXc09Nb65QBWgYGJrVuWpG
beIdoGLfFSBGlmvT3FUWxaWA3b//vi177s7pidd9RZCfOZolgEPuPX5llIsmOJ5W
RyEG2NrUj50WpVpFhW/ppfVjnBJPBoKouehhKoFGYITc1/D4glKbUStNxpbw6GaE
3/5OZJp1+OBjaob3JiWgSehmM8GyLPhw79cp4Nu2pIZ9E/X60Myi0kViy5AN+ug1
RyNXpULPS80VXQC22vOkyvsvQM65lNE+yjLL3jOlI8jchg==
-----END CERTIFICATE-----
Generated at Fri Jul 25 00:58:34 2025 by rpki-client