Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538313a333534333a3a2f34382d3438203d3e203136393039.roa
File: 326131343a373538313a333534333a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier: RkQwsoym516T3xrCVo+cXW6gDPzzxKh0/2MFDgRIls4=
Subject key identifier: F1:25:F9:8B:44:F5:54:FF:FB:4E:D9:0C:DF:E4:FF:22:37:F5:03:20
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 22902CAF1FA8B3C3DB495884D9F5F8020888DD97
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538313a333534333a3a2f34382d3438203d3e203136393039.roa
Signing time: Fri 20 Jun 2025 06:26:13 +0000
ROA not before: Fri 20 Jun 2025 06:21:13 +0000
ROA not after: Fri 19 Jun 2026 06:26:13 +0000
asID: 16909
IP address blocks: 2a14:7581:3543::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 25 Jun 2025 16:06:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
22:90:2c:af:1f:a8:b3:c3:db:49:58:84:d9:f5:f8:02:08:88:dd:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: Jun 20 06:21:13 2025 GMT
Not After : Jun 19 06:26:13 2026 GMT
Subject: CN=F125F98B44F554FFFB4ED90CDFE4FF2237F50320
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:bc:03:ab:af:6f:51:e0:f8:45:92:8e:cb:fd:
a7:8c:e3:9c:2d:cc:b2:07:51:c0:38:48:db:df:d8:
ec:d3:4b:af:f2:b1:b8:0d:51:52:f6:64:f2:d7:ea:
c6:f3:61:bb:55:3e:3a:93:3c:9d:4d:7d:d6:ed:c7:
e8:8a:45:9b:21:9b:ca:e8:5d:4d:ba:27:48:cb:18:
d4:b4:68:5f:16:d6:1c:2e:5b:2a:33:fd:31:69:30:
b5:f5:5d:4d:98:80:ac:40:d8:67:ab:69:f5:46:de:
50:59:6c:cc:2a:b4:12:b3:82:50:a0:c3:6e:d3:2b:
5d:24:5c:ee:c9:66:47:9b:89:16:3a:3b:70:13:3b:
90:35:50:6b:7b:f2:a3:2d:22:1e:f7:2b:73:5d:bd:
f9:96:62:72:fa:ce:4b:29:0c:a5:50:23:00:c9:47:
8b:94:36:b9:fc:6f:fb:d9:53:10:1e:2c:bf:7d:d9:
bc:c3:ae:f5:71:2d:52:8d:bb:bc:a1:e7:ca:e6:de:
4d:8e:0e:9d:e8:fd:5a:d9:af:66:06:17:8f:d7:d2:
a3:2a:61:33:9a:d1:dd:6a:1e:92:4d:96:7f:46:e8:
3a:43:bb:b3:ec:5f:59:c2:3b:c5:d5:91:da:de:b4:
45:fd:8b:2f:3a:5e:6d:71:e8:b7:d3:59:2c:db:38:
de:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:25:F9:8B:44:F5:54:FF:FB:4E:D9:0C:DF:E4:FF:22:37:F5:03:20
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538313a333534333a3a2f34382d3438203d3e203136393039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7581:3543::/48
Signature Algorithm: sha256WithRSAEncryption
12:bf:ff:7c:5a:aa:5c:05:bd:7c:12:d0:6c:62:9e:65:57:ad:
36:18:89:63:44:ba:9d:b2:e1:75:97:2b:38:9e:c6:98:9e:7f:
f8:c3:fe:18:d0:a1:07:bd:c3:76:e8:12:d2:44:a3:47:53:92:
51:3d:ce:03:e8:1a:20:0f:49:21:a5:1d:7b:9f:d1:2a:68:72:
04:9b:6d:95:9e:68:fa:4c:05:6d:9d:21:69:46:23:93:c1:e6:
d1:58:6d:24:93:2d:0b:9d:d8:94:1c:45:de:c6:fa:28:7a:12:
7a:9d:9a:59:91:21:d4:23:d7:9f:60:e6:8c:30:52:41:2c:7d:
06:3d:66:92:ac:e9:eb:29:66:81:5c:54:f1:6e:ad:7e:df:1c:
44:48:a8:d7:d4:43:58:09:fa:f0:19:94:37:1c:db:5e:cd:4e:
41:82:d2:f3:0c:7a:cf:bf:e5:53:6e:f3:14:0f:db:18:ec:8f:
de:e9:99:e2:e0:45:df:89:8b:33:0f:67:78:bc:8f:50:ba:9c:
60:23:dc:43:fa:88:56:f1:0a:30:b8:89:de:9e:5d:85:f7:5d:
2c:cc:fc:ab:70:3f:1c:f4:4b:ee:14:d6:78:17:af:52:f3:a1:
7a:a7:27:ee:4e:2f:de:e3:7b:25:25:6f:13:a2:5e:e2:5a:e1:
dc:ff:d1:cc
-----BEGIN CERTIFICATE-----
MIIFXjCCBEagAwIBAgIUIpAsrx+os8PbSViE2fX4AgiI3ZcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN0NCMjZGNzY0MkZENkI0Q0JGMzVGQkVFNDU1RjFFRkIw
QzlGMEE0NTAeFw0yNTA2MjAwNjIxMTNaFw0yNjA2MTkwNjI2MTNaMDMxMTAvBgNV
BAMTKEYxMjVGOThCNDRGNTU0RkZGQjRFRDkwQ0RGRTRGRjIyMzdGNTAzMjAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6vAOrr29R4PhFko7L/aeM45wt
zLIHUcA4SNvf2OzTS6/ysbgNUVL2ZPLX6sbzYbtVPjqTPJ1Nfdbtx+iKRZshm8ro
XU26J0jLGNS0aF8W1hwuWyoz/TFpMLX1XU2YgKxA2GerafVG3lBZbMwqtBKzglCg
w27TK10kXO7JZkebiRY6O3ATO5A1UGt78qMtIh73K3NdvfmWYnL6zkspDKVQIwDJ
R4uUNrn8b/vZUxAeLL992bzDrvVxLVKNu7yh58rm3k2ODp3o/VrZr2YGF4/X0qMq
YTOa0d1qHpJNln9G6DpDu7PsX1nCO8XVkdretEX9iy86Xm1x6LfTWSzbON79AgMB
AAGjggJoMIICZDAdBgNVHQ4EFgQU8SX5i0T1VP/7TtkM3+T/Ijf1AyAwHwYDVR0j
BBgwFoAUfLJvdkL9a0y/NfvuRV8e+wyfCkUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv
cnkvOGE4NDhhZGY5MmVlNGQ4NDAxOTNkZjQ1YTBlYTY2ODcvMS83Q0IyNkY3NjQy
RkQ2QjRDQkYzNUZCRUU0NTVGMUVGQjBDOUYwQTQ1LmNybDCBngYIKwYBBQUHAQEE
gZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5Lzg5MjcwZjZjLWEzZmUtNDI5OS1iMDc5LTMwOWVkOTdm
MzgyNC8wLzdDQjI2Rjc2NDJGRDZCNENCRjM1RkJFRTQ1NUYxRUZCMEM5RjBBNDUu
Y2VyMIGqBggrBgEFBQcBCwSBnTCBmjCBlwYIKwYBBQUHMAuGgYpyc3luYzovL3Jw
a2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY5MmVlNGQ4NDAxOTNk
ZjQ1YTBlYTY2ODcvMS8zMjYxMzEzNDNhMzczNTM4MzEzYTMzMzUzNDMzM2EzYTJm
MzQzODJkMzQzODIwM2QzZTIwMzEzNjM5MzAzOS5yb2EwGAYDVR0gAQH/BA4wDDAK
BggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoUdYE1QzAN
BgkqhkiG9w0BAQsFAAOCAQEAEr//fFqqXAW9fBLQbGKeZVetNhiJY0S6nbLhdZcr
OJ7GmJ5/+MP+GNChB73DdugS0kSjR1OSUT3OA+gaIA9JIaUde5/RKmhyBJttlZ5o
+kwFbZ0haUYjk8Hm0VhtJJMtC53YlBxF3sb6KHoSep2aWZEh1CPXn2DmjDBSQSx9
Bj1mkqzp6ylmgVxU8W6tft8cREio19RDWAn68BmUNxzbXs1OQYLS8wx6z7/lU27z
FA/bGOyP3umZ4uBF34mLMw9neLyPULqcYCPcQ/qIVvEKMLiJ3p5dhfddLMz8q3A/
HPRL7hTWeBevUvOheqcn7k4v3uN7JSVvE6Je4lrh3P/RzA==
-----END CERTIFICATE-----
Generated at Sat Jul 26 11:41:17 2025 by rpki-client