Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538313a333533653a3a2f34382d3438203d3e203136393039.roa
File: 326131343a373538313a333533653a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier: WyrpKdJ9HI+PbxCu1/VPVqEUXy9g3VTsSKx3oTZzIiw=
Subject key identifier: AA:F2:37:2A:6F:EC:BA:3D:1E:82:4C:BB:D7:28:A8:B8:FA:76:A2:07
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 5235B21098E985B162D5381FAE811D3C68D81DE2
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538313a333533653a3a2f34382d3438203d3e203136393039.roa
Signing time: Fri 20 Jun 2025 06:31:02 +0000
ROA not before: Fri 20 Jun 2025 06:26:02 +0000
ROA not after: Fri 19 Jun 2026 06:31:02 +0000
asID: 16909
IP address blocks: 2a14:7581:353e::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 25 Jun 2025 16:06:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
52:35:b2:10:98:e9:85:b1:62:d5:38:1f:ae:81:1d:3c:68:d8:1d:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: Jun 20 06:26:02 2025 GMT
Not After : Jun 19 06:31:02 2026 GMT
Subject: CN=AAF2372A6FECBA3D1E824CBBD728A8B8FA76A207
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:6f:f2:94:8f:48:40:80:91:a6:9a:35:ff:9f:
fb:5c:48:0b:1a:a1:65:a2:c8:15:3c:40:8c:cc:dd:
da:f0:e6:d8:d1:66:66:6f:36:d3:f8:ba:6e:f1:a5:
63:94:f7:82:f0:20:b4:1b:dd:2d:47:c6:d9:3e:01:
d6:65:b8:27:52:9b:a4:b2:b1:00:ff:21:ca:11:4e:
c0:33:9a:88:70:5e:70:c6:a3:cb:35:67:0e:25:16:
1f:ed:36:90:53:e3:5a:bb:94:2c:ad:bd:75:05:51:
37:6e:f8:1a:73:2b:90:72:f3:02:89:57:2d:21:de:
5b:d0:23:9d:28:81:46:c9:db:17:9c:82:88:7f:8c:
78:76:04:84:73:be:67:ef:2f:22:d1:92:07:e9:49:
8a:58:f0:f9:6a:ba:b5:17:cb:84:4b:49:83:47:3b:
26:68:50:1e:74:ec:cc:c5:70:9c:7b:80:e3:04:cb:
6b:93:fb:3a:49:ff:ec:82:05:e8:40:c5:d3:8e:98:
ac:ee:c0:6a:5d:17:c9:fb:6b:c9:61:b1:23:e4:82:
5f:ff:fa:0c:05:29:d2:28:62:90:a7:5c:69:fb:a9:
5f:fe:a1:e8:ee:6c:bc:e2:32:2d:4c:d5:bb:f3:f7:
11:c3:11:6f:da:fa:ca:64:a8:95:07:8a:86:42:c4:
32:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:F2:37:2A:6F:EC:BA:3D:1E:82:4C:BB:D7:28:A8:B8:FA:76:A2:07
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538313a333533653a3a2f34382d3438203d3e203136393039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7581:353e::/48
Signature Algorithm: sha256WithRSAEncryption
a5:3d:fa:86:e6:cc:d6:79:67:60:c7:25:bb:b9:d6:79:c8:de:
c1:ce:9e:79:88:db:b2:58:40:36:07:64:65:4d:36:39:e3:97:
d5:c7:1a:cb:4b:3d:ad:45:fa:c6:f6:ba:d6:8e:56:d1:47:5a:
6e:c8:5d:40:5b:a4:fe:54:a1:80:6d:ca:03:a6:b0:b7:2e:87:
9f:73:1f:ce:a7:30:43:a0:6c:7d:d8:5b:cb:9a:b0:bb:ec:be:
0d:3a:b2:7f:87:c9:92:1b:8b:53:52:68:93:9e:f7:d3:cd:9c:
e0:95:26:da:aa:d0:5d:9a:f5:5a:8b:69:e5:c3:9c:3e:3c:2d:
41:f8:42:40:50:77:c1:66:94:d9:6f:f5:c4:78:88:40:8d:6c:
15:c7:80:3b:07:82:75:09:64:24:a0:63:34:f0:87:b1:f6:ce:
73:90:3f:ea:27:cb:87:42:89:01:b9:0b:b0:9f:74:87:26:dc:
dc:9b:a3:68:f8:f9:b1:1f:39:39:9e:64:de:6a:59:3c:f7:9c:
50:6f:0b:97:a9:45:ca:b8:da:33:53:25:e6:85:78:99:8f:0a:
a2:0d:b2:c6:38:b2:0e:cb:bd:b8:0c:26:49:81:83:ff:60:e8:
28:a7:5b:91:a6:b5:59:72:46:85:27:19:10:d4:77:6a:71:a2:
33:81:1a:a8
-----BEGIN CERTIFICATE-----
MIIFXjCCBEagAwIBAgIUUjWyEJjphbFi1TgfroEdPGjYHeIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN0NCMjZGNzY0MkZENkI0Q0JGMzVGQkVFNDU1RjFFRkIw
QzlGMEE0NTAeFw0yNTA2MjAwNjI2MDJaFw0yNjA2MTkwNjMxMDJaMDMxMTAvBgNV
BAMTKEFBRjIzNzJBNkZFQ0JBM0QxRTgyNENCQkQ3MjhBOEI4RkE3NkEyMDcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwb/KUj0hAgJGmmjX/n/tcSAsa
oWWiyBU8QIzM3drw5tjRZmZvNtP4um7xpWOU94LwILQb3S1Hxtk+AdZluCdSm6Sy
sQD/IcoRTsAzmohwXnDGo8s1Zw4lFh/tNpBT41q7lCytvXUFUTdu+BpzK5By8wKJ
Vy0h3lvQI50ogUbJ2xecgoh/jHh2BIRzvmfvLyLRkgfpSYpY8PlqurUXy4RLSYNH
OyZoUB507MzFcJx7gOMEy2uT+zpJ/+yCBehAxdOOmKzuwGpdF8n7a8lhsSPkgl//
+gwFKdIoYpCnXGn7qV/+oejubLziMi1M1bvz9xHDEW/a+spkqJUHioZCxDIZAgMB
AAGjggJoMIICZDAdBgNVHQ4EFgQUqvI3Km/suj0egky71yiouPp2ogcwHwYDVR0j
BBgwFoAUfLJvdkL9a0y/NfvuRV8e+wyfCkUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv
cnkvOGE4NDhhZGY5MmVlNGQ4NDAxOTNkZjQ1YTBlYTY2ODcvMS83Q0IyNkY3NjQy
RkQ2QjRDQkYzNUZCRUU0NTVGMUVGQjBDOUYwQTQ1LmNybDCBngYIKwYBBQUHAQEE
gZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5Lzg5MjcwZjZjLWEzZmUtNDI5OS1iMDc5LTMwOWVkOTdm
MzgyNC8wLzdDQjI2Rjc2NDJGRDZCNENCRjM1RkJFRTQ1NUYxRUZCMEM5RjBBNDUu
Y2VyMIGqBggrBgEFBQcBCwSBnTCBmjCBlwYIKwYBBQUHMAuGgYpyc3luYzovL3Jw
a2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY5MmVlNGQ4NDAxOTNk
ZjQ1YTBlYTY2ODcvMS8zMjYxMzEzNDNhMzczNTM4MzEzYTMzMzUzMzY1M2EzYTJm
MzQzODJkMzQzODIwM2QzZTIwMzEzNjM5MzAzOS5yb2EwGAYDVR0gAQH/BA4wDDAK
BggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoUdYE1PjAN
BgkqhkiG9w0BAQsFAAOCAQEApT36hubM1nlnYMclu7nWecjewc6eeYjbslhANgdk
ZU02OeOX1ccay0s9rUX6xva61o5W0UdabshdQFuk/lShgG3KA6awty6Hn3Mfzqcw
Q6Bsfdhby5qwu+y+DTqyf4fJkhuLU1Jok573082c4JUm2qrQXZr1Wotp5cOcPjwt
QfhCQFB3wWaU2W/1xHiIQI1sFceAOweCdQlkJKBjNPCHsfbOc5A/6ifLh0KJAbkL
sJ90hybc3JujaPj5sR85OZ5k3mpZPPecUG8Ll6lFyrjaM1Ml5oV4mY8Kog2yxjiy
Dsu9uAwmSYGD/2DoKKdbkaa1WXJGhScZENR3anGiM4EaqA==
-----END CERTIFICATE-----
Generated at Wed Jul 23 23:53:48 2025 by rpki-client