Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538313a333562643a3a2f34382d3438203d3e203136393039.roa
File: 326131343a373538313a333562643a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier: CIViw0Fyc4zrsfeG5GkXqfcXcyjYwpm626YeoVJd6QI=
Subject key identifier: 84:AE:C0:6C:88:B1:68:B1:B7:C5:14:99:7B:14:66:9D:7B:30:1D:87
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 55A5C674F2459D5FD1BCD62572D12250F8660EE1
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538313a333562643a3a2f34382d3438203d3e203136393039.roa
Signing time: Fri 20 Jun 2025 06:30:34 +0000
ROA not before: Fri 20 Jun 2025 06:25:34 +0000
ROA not after: Fri 19 Jun 2026 06:30:34 +0000
asID: 16909
IP address blocks: 2a14:7581:35bd::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 25 Jun 2025 16:06:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
55:a5:c6:74:f2:45:9d:5f:d1:bc:d6:25:72:d1:22:50:f8:66:0e:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: Jun 20 06:25:34 2025 GMT
Not After : Jun 19 06:30:34 2026 GMT
Subject: CN=84AEC06C88B168B1B7C514997B14669D7B301D87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:02:5d:fe:62:1e:1d:1d:4a:dc:3f:d9:aa:0f:
5a:d8:14:da:d6:c3:0d:b4:c1:24:61:d9:21:a6:ea:
f3:ba:e1:2b:96:24:fa:41:41:42:4c:1b:6d:39:2f:
48:16:28:9b:fd:1f:aa:94:c4:9c:08:1d:f8:a7:68:
e2:ee:95:69:c4:e7:42:bd:06:6c:64:57:87:b8:58:
36:35:2d:d9:4a:12:c4:a4:7c:ff:ed:d8:8d:6c:3c:
d7:99:5b:5a:95:33:21:5e:8b:11:61:02:d7:6d:de:
b8:b7:a7:34:ca:bd:d8:5c:e2:ad:d9:4b:9d:40:cb:
7a:0d:07:8f:57:81:1e:0f:b3:60:33:1b:22:6e:cd:
b1:29:c9:e8:af:f5:97:58:a6:02:46:e5:6c:98:92:
89:49:6b:bb:a3:6b:2f:0e:31:7b:7a:88:f1:0e:38:
97:7b:aa:dc:33:92:9c:39:5c:33:7d:eb:41:38:8c:
fc:9a:73:d7:49:04:8a:82:1e:13:ad:9a:dc:23:ec:
e4:c1:21:48:5f:f1:45:a8:21:a5:d2:bb:9a:bd:7a:
da:75:5a:4e:66:42:61:12:49:cf:6c:cb:7c:a2:c2:
d6:98:a8:b3:69:48:63:d1:13:e8:c7:50:0c:42:9e:
51:47:e6:7c:75:93:0a:71:c3:6a:8e:2f:a0:31:65:
59:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:AE:C0:6C:88:B1:68:B1:B7:C5:14:99:7B:14:66:9D:7B:30:1D:87
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538313a333562643a3a2f34382d3438203d3e203136393039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7581:35bd::/48
Signature Algorithm: sha256WithRSAEncryption
18:eb:26:06:ed:f0:81:c1:ee:5f:9c:da:d5:2e:9a:9a:4d:90:
a7:13:34:23:8e:fa:54:07:21:63:24:fe:16:88:cf:ed:8a:3d:
5d:10:ea:53:62:48:db:7d:66:54:e2:19:10:24:9a:26:eb:9e:
91:ca:70:22:1c:c1:17:99:7c:cb:9a:6f:a0:e5:0e:f9:f6:99:
3d:55:28:6a:c4:69:ea:3d:f5:85:39:bf:a8:7b:ae:29:58:ea:
c8:60:19:03:c2:49:17:cc:7d:d3:44:cf:e2:e6:39:ca:fe:91:
8f:0b:1a:1d:7e:97:60:4d:1d:59:8f:b7:39:bc:9f:8e:69:d7:
96:82:44:bb:25:b7:67:d1:21:a1:36:2c:a4:eb:57:1c:eb:8d:
d1:ea:29:9b:21:3d:98:9f:7a:8f:09:1f:e1:1d:02:c7:27:de:
f6:de:eb:d1:3d:ad:ca:48:d0:08:22:45:78:ba:a8:73:07:11:
dc:b9:77:d8:ba:65:b8:3d:50:35:ca:d6:03:0f:3a:f1:54:6a:
7f:b1:6e:e7:89:6a:5e:c2:06:bd:a5:63:cf:3f:bb:86:d2:0f:
29:ce:5a:ef:8f:cf:34:dd:15:2a:e4:e2:1e:7b:68:20:24:01:
74:d5:2c:f3:d4:55:81:d1:6e:0b:24:10:18:34:90:b9:ed:52:
16:de:fe:0f
-----BEGIN CERTIFICATE-----
MIIFXjCCBEagAwIBAgIUVaXGdPJFnV/RvNYlctEiUPhmDuEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN0NCMjZGNzY0MkZENkI0Q0JGMzVGQkVFNDU1RjFFRkIw
QzlGMEE0NTAeFw0yNTA2MjAwNjI1MzRaFw0yNjA2MTkwNjMwMzRaMDMxMTAvBgNV
BAMTKDg0QUVDMDZDODhCMTY4QjFCN0M1MTQ5OTdCMTQ2NjlEN0IzMDFEODcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDUAl3+Yh4dHUrcP9mqD1rYFNrW
ww20wSRh2SGm6vO64SuWJPpBQUJMG205L0gWKJv9H6qUxJwIHfinaOLulWnE50K9
BmxkV4e4WDY1LdlKEsSkfP/t2I1sPNeZW1qVMyFeixFhAtdt3ri3pzTKvdhc4q3Z
S51Ay3oNB49XgR4Ps2AzGyJuzbEpyeiv9ZdYpgJG5WyYkolJa7ujay8OMXt6iPEO
OJd7qtwzkpw5XDN960E4jPyac9dJBIqCHhOtmtwj7OTBIUhf8UWoIaXSu5q9etp1
Wk5mQmESSc9sy3yiwtaYqLNpSGPRE+jHUAxCnlFH5nx1kwpxw2qOL6AxZVn/AgMB
AAGjggJoMIICZDAdBgNVHQ4EFgQUhK7AbIixaLG3xRSZexRmnXswHYcwHwYDVR0j
BBgwFoAUfLJvdkL9a0y/NfvuRV8e+wyfCkUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv
cnkvOGE4NDhhZGY5MmVlNGQ4NDAxOTNkZjQ1YTBlYTY2ODcvMS83Q0IyNkY3NjQy
RkQ2QjRDQkYzNUZCRUU0NTVGMUVGQjBDOUYwQTQ1LmNybDCBngYIKwYBBQUHAQEE
gZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5Lzg5MjcwZjZjLWEzZmUtNDI5OS1iMDc5LTMwOWVkOTdm
MzgyNC8wLzdDQjI2Rjc2NDJGRDZCNENCRjM1RkJFRTQ1NUYxRUZCMEM5RjBBNDUu
Y2VyMIGqBggrBgEFBQcBCwSBnTCBmjCBlwYIKwYBBQUHMAuGgYpyc3luYzovL3Jw
a2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY5MmVlNGQ4NDAxOTNk
ZjQ1YTBlYTY2ODcvMS8zMjYxMzEzNDNhMzczNTM4MzEzYTMzMzU2MjY0M2EzYTJm
MzQzODJkMzQzODIwM2QzZTIwMzEzNjM5MzAzOS5yb2EwGAYDVR0gAQH/BA4wDDAK
BggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoUdYE1vTAN
BgkqhkiG9w0BAQsFAAOCAQEAGOsmBu3wgcHuX5za1S6amk2QpxM0I476VAchYyT+
FojP7Yo9XRDqU2JI231mVOIZECSaJuuekcpwIhzBF5l8y5pvoOUO+faZPVUoasRp
6j31hTm/qHuuKVjqyGAZA8JJF8x900TP4uY5yv6RjwsaHX6XYE0dWY+3ObyfjmnX
loJEuyW3Z9EhoTYspOtXHOuN0eopmyE9mJ96jwkf4R0Cxyfe9t7r0T2tykjQCCJF
eLqocwcR3Ll32LpluD1QNcrWAw868VRqf7Fu54lqXsIGvaVjzz+7htIPKc5a74/P
NN0VKuTiHntoICQBdNUs89RVgdFuCyQQGDSQue1SFt7+Dw==
-----END CERTIFICATE-----
Generated at Sat Jul 26 00:26:43 2025 by rpki-client