Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538313a333531643a3a2f34382d3438203d3e203136393039.roa
File: 326131343a373538313a333531643a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier: TS5wVoihW4bTSDUtojYI+JpOGI0uGnnmHG9FNbw2b74=
Subject key identifier: 60:37:DE:2F:4D:76:53:46:C1:CD:C6:89:4F:49:EC:09:26:6B:BD:4B
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 6F9F4D7F098DD4ABDB06B81182E09D3740314236
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538313a333531643a3a2f34382d3438203d3e203136393039.roa
Signing time: Fri 20 Jun 2025 06:24:55 +0000
ROA not before: Fri 20 Jun 2025 06:19:55 +0000
ROA not after: Fri 19 Jun 2026 06:24:55 +0000
asID: 16909
IP address blocks: 2a14:7581:351d::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 25 Jun 2025 16:06:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6f:9f:4d:7f:09:8d:d4:ab:db:06:b8:11:82:e0:9d:37:40:31:42:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: Jun 20 06:19:55 2025 GMT
Not After : Jun 19 06:24:55 2026 GMT
Subject: CN=6037DE2F4D765346C1CDC6894F49EC09266BBD4B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:14:13:0f:8f:53:5f:36:ba:fa:c2:3f:f2:75:
fa:a8:84:5a:9f:09:29:20:f8:41:e9:45:d4:b4:f2:
7b:a8:cf:ee:75:19:29:f1:3b:9a:15:75:61:b3:57:
40:b6:da:5e:9b:05:3c:7d:3f:f9:7f:5f:de:86:63:
63:70:5e:bc:33:0c:35:b1:05:dc:79:ba:0d:d4:57:
1f:42:7a:90:d8:fd:3e:2f:57:4f:73:aa:78:e6:02:
58:82:45:a5:f1:c0:98:3f:10:d8:7c:f6:a8:66:df:
4f:36:d6:4f:6d:fd:b9:8c:08:98:1f:44:b3:20:5e:
01:52:4e:6e:80:11:77:e1:c1:18:ca:1b:02:a1:ed:
e1:d5:82:50:5b:b6:7b:d8:39:43:2d:65:6b:6d:10:
51:4d:9a:0f:53:39:3a:f4:23:6d:0a:82:cb:72:8b:
14:16:6f:2b:52:20:53:b1:43:d4:1a:50:02:63:df:
c6:9e:68:49:6e:79:54:79:5e:f8:c1:a6:a3:5d:a9:
01:ab:b0:02:a8:2b:ce:46:ad:ef:42:f9:ca:2b:fd:
74:27:a7:ac:fc:00:b2:97:be:99:02:38:c9:e0:2a:
5b:bf:10:80:fb:cf:bd:10:fd:b8:69:e2:23:2b:e5:
cc:82:c2:87:9d:27:91:a7:c6:19:d4:af:91:82:c9:
9d:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:37:DE:2F:4D:76:53:46:C1:CD:C6:89:4F:49:EC:09:26:6B:BD:4B
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538313a333531643a3a2f34382d3438203d3e203136393039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7581:351d::/48
Signature Algorithm: sha256WithRSAEncryption
27:05:b6:9b:44:0e:29:f3:c7:c0:05:cd:60:80:00:cd:f2:4c:
bf:ec:88:42:43:54:cc:1f:eb:11:a4:d9:03:c4:29:49:7a:7d:
4a:39:5b:c7:40:d0:fe:60:4f:90:da:99:9d:62:65:73:04:e2:
65:55:1b:55:d1:5b:88:90:34:aa:1a:8c:00:75:79:4a:5e:86:
98:9a:42:a2:18:32:20:87:33:3c:d8:f4:d1:b1:0d:7c:59:59:
15:35:03:98:4d:7d:07:2e:5a:3b:e0:a3:ed:1b:56:2a:03:3b:
27:d1:32:de:52:c5:48:4b:1d:18:66:c7:36:a0:2c:2d:7c:0c:
24:fd:5f:5f:07:da:5f:13:3b:d2:d8:22:4d:04:cb:07:49:84:
02:ac:ef:2a:37:97:7e:8d:51:02:42:9a:cb:71:78:50:3f:da:
70:61:cd:a4:47:c5:53:cb:4c:53:e4:f6:5e:06:b2:a3:56:3a:
28:5f:93:70:06:ca:71:16:e9:6b:7f:2d:3f:3b:e4:fe:cf:3a:
3f:62:2c:b9:0f:6a:72:52:58:00:09:b1:2e:56:99:a4:2f:34:
bf:dd:89:28:8a:48:b2:80:4a:18:18:85:2f:56:f5:68:93:74:
be:ef:2b:f9:22:7c:70:c2:a1:e1:61:2c:8d:72:60:19:8a:9c:
ae:7d:27:6e
-----BEGIN CERTIFICATE-----
MIIFXjCCBEagAwIBAgIUb59NfwmN1KvbBrgRguCdN0AxQjYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN0NCMjZGNzY0MkZENkI0Q0JGMzVGQkVFNDU1RjFFRkIw
QzlGMEE0NTAeFw0yNTA2MjAwNjE5NTVaFw0yNjA2MTkwNjI0NTVaMDMxMTAvBgNV
BAMTKDYwMzdERTJGNEQ3NjUzNDZDMUNEQzY4OTRGNDlFQzA5MjY2QkJENEIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0FBMPj1NfNrr6wj/ydfqohFqf
CSkg+EHpRdS08nuoz+51GSnxO5oVdWGzV0C22l6bBTx9P/l/X96GY2NwXrwzDDWx
Bdx5ug3UVx9CepDY/T4vV09zqnjmAliCRaXxwJg/ENh89qhm30821k9t/bmMCJgf
RLMgXgFSTm6AEXfhwRjKGwKh7eHVglBbtnvYOUMtZWttEFFNmg9TOTr0I20Kgsty
ixQWbytSIFOxQ9QaUAJj38aeaElueVR5XvjBpqNdqQGrsAKoK85Gre9C+cor/XQn
p6z8ALKXvpkCOMngKlu/EID7z70Q/bhp4iMr5cyCwoedJ5GnxhnUr5GCyZ0vAgMB
AAGjggJoMIICZDAdBgNVHQ4EFgQUYDfeL012U0bBzcaJT0nsCSZrvUswHwYDVR0j
BBgwFoAUfLJvdkL9a0y/NfvuRV8e+wyfCkUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv
cnkvOGE4NDhhZGY5MmVlNGQ4NDAxOTNkZjQ1YTBlYTY2ODcvMS83Q0IyNkY3NjQy
RkQ2QjRDQkYzNUZCRUU0NTVGMUVGQjBDOUYwQTQ1LmNybDCBngYIKwYBBQUHAQEE
gZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5Lzg5MjcwZjZjLWEzZmUtNDI5OS1iMDc5LTMwOWVkOTdm
MzgyNC8wLzdDQjI2Rjc2NDJGRDZCNENCRjM1RkJFRTQ1NUYxRUZCMEM5RjBBNDUu
Y2VyMIGqBggrBgEFBQcBCwSBnTCBmjCBlwYIKwYBBQUHMAuGgYpyc3luYzovL3Jw
a2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY5MmVlNGQ4NDAxOTNk
ZjQ1YTBlYTY2ODcvMS8zMjYxMzEzNDNhMzczNTM4MzEzYTMzMzUzMTY0M2EzYTJm
MzQzODJkMzQzODIwM2QzZTIwMzEzNjM5MzAzOS5yb2EwGAYDVR0gAQH/BA4wDDAK
BggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoUdYE1HTAN
BgkqhkiG9w0BAQsFAAOCAQEAJwW2m0QOKfPHwAXNYIAAzfJMv+yIQkNUzB/rEaTZ
A8QpSXp9Sjlbx0DQ/mBPkNqZnWJlcwTiZVUbVdFbiJA0qhqMAHV5Sl6GmJpCohgy
IIczPNj00bENfFlZFTUDmE19By5aO+Cj7RtWKgM7J9Ey3lLFSEsdGGbHNqAsLXwM
JP1fXwfaXxM70tgiTQTLB0mEAqzvKjeXfo1RAkKay3F4UD/acGHNpEfFU8tMU+T2
Xgayo1Y6KF+TcAbKcRbpa38tPzvk/s86P2IsuQ9qclJYAAmxLlaZpC80v92JKIpI
soBKGBiFL1b1aJN0vu8r+SJ8cMKh4WEsjXJgGYqcrn0nbg==
-----END CERTIFICATE-----
Generated at Wed Jul 23 23:52:50 2025 by rpki-client