Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538313a333565323a3a2f34382d3438203d3e203136393039.roa
File: 326131343a373538313a333565323a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier: 4i7qcQU6Q/GrNqT2pjcj0904g6QTqXfE73UirJ2J7JE=
Subject key identifier: 94:1A:83:9F:34:20:C2:21:99:0E:25:5B:A0:68:45:4F:80:7D:8B:CE
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 0779512F1F9F880FDC613969E70D5DB4F47ADAE1
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538313a333565323a3a2f34382d3438203d3e203136393039.roa
Signing time: Fri 20 Jun 2025 06:28:55 +0000
ROA not before: Fri 20 Jun 2025 06:23:55 +0000
ROA not after: Fri 19 Jun 2026 06:28:55 +0000
asID: 16909
IP address blocks: 2a14:7581:35e2::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 25 Jun 2025 16:06:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
07:79:51:2f:1f:9f:88:0f:dc:61:39:69:e7:0d:5d:b4:f4:7a:da:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: Jun 20 06:23:55 2025 GMT
Not After : Jun 19 06:28:55 2026 GMT
Subject: CN=941A839F3420C221990E255BA068454F807D8BCE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:d8:bd:f9:8f:bf:e0:c7:47:a5:86:09:69:f5:
8e:87:7e:ba:a5:41:1b:e6:1f:1c:b2:7a:a2:ae:d2:
b6:a7:06:4e:e7:c8:8d:0e:85:68:d5:0e:13:02:64:
09:8a:38:00:51:0c:1e:5e:4f:14:b4:ab:de:c3:34:
06:02:6c:32:13:5f:fa:d2:41:ea:4c:76:dc:b6:5e:
7b:9b:59:92:22:9a:eb:10:8e:60:e3:bf:c3:f3:75:
79:39:ad:71:ac:89:96:31:c5:51:16:e6:38:df:44:
96:6a:a8:83:a2:52:c8:6c:d1:18:28:84:a3:0d:6d:
d4:7f:94:8c:12:7c:e1:6c:a5:1a:8c:c6:19:8d:e6:
37:06:e5:5d:91:dc:38:f8:be:e5:78:b4:75:98:40:
96:8b:51:d2:c5:90:df:eb:75:f6:70:a1:07:e8:34:
f6:83:9b:69:20:ce:02:85:5c:2c:27:1f:1a:98:2d:
c2:4a:d4:23:62:23:e2:0c:17:0e:8c:a4:94:75:24:
cf:9f:6f:3f:3c:f2:df:93:f1:50:56:7d:7c:7a:03:
4a:9c:23:42:68:40:2d:03:4e:86:1d:56:d1:ed:89:
71:3c:51:6b:30:d9:1f:b8:6c:1d:d4:37:4a:16:79:
3f:7c:22:eb:bf:45:2e:4d:2f:2d:3f:ee:a9:dc:56:
ac:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:1A:83:9F:34:20:C2:21:99:0E:25:5B:A0:68:45:4F:80:7D:8B:CE
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538313a333565323a3a2f34382d3438203d3e203136393039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7581:35e2::/48
Signature Algorithm: sha256WithRSAEncryption
5f:99:0f:7a:e1:f9:9f:b5:89:9f:56:b2:fa:5f:bb:dd:7c:2f:
44:4e:e3:77:e9:5a:98:f6:31:15:4a:0f:fb:de:8b:f1:f6:de:
8d:2a:ea:bd:c3:78:5c:c8:d5:73:19:84:5d:35:d6:e1:73:7f:
f7:24:4d:6b:ee:7f:c9:fb:b5:97:af:1c:49:2e:b5:84:9f:b3:
32:a5:14:ff:37:a5:dc:d5:50:e7:c7:04:19:14:5f:62:07:17:
2f:91:08:8b:93:b6:01:28:ce:80:14:37:2c:4c:25:2c:f9:7a:
88:66:58:86:7f:2f:79:71:bc:25:af:3d:47:63:6b:47:ac:f4:
4f:87:b2:26:57:e6:0e:05:ff:7e:b3:c4:cf:61:42:06:d8:cb:
ae:5d:ef:a5:a0:4d:3a:90:f0:9d:51:37:d8:5e:37:68:31:e1:
fb:58:65:27:a8:10:0a:e9:c0:28:8d:8b:3b:8c:b7:59:be:14:
fa:89:fb:fc:1e:66:17:b6:6c:27:8e:1e:a3:6b:38:70:6c:2a:
76:f7:55:4a:e0:1a:7e:62:fd:13:2c:9c:8a:f5:52:93:9d:54:
b0:c7:77:1f:8b:7a:88:b8:8c:bc:4e:32:81:f6:a4:8b:81:c9:
34:c1:9b:36:aa:ed:57:04:23:63:d2:a2:f0:10:d0:be:0e:e2:
f6:ef:25:86
-----BEGIN CERTIFICATE-----
MIIFXjCCBEagAwIBAgIUB3lRLx+fiA/cYTlp5w1dtPR62uEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN0NCMjZGNzY0MkZENkI0Q0JGMzVGQkVFNDU1RjFFRkIw
QzlGMEE0NTAeFw0yNTA2MjAwNjIzNTVaFw0yNjA2MTkwNjI4NTVaMDMxMTAvBgNV
BAMTKDk0MUE4MzlGMzQyMEMyMjE5OTBFMjU1QkEwNjg0NTRGODA3RDhCQ0UwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCR2L35j7/gx0elhglp9Y6Hfrql
QRvmHxyyeqKu0ranBk7nyI0OhWjVDhMCZAmKOABRDB5eTxS0q97DNAYCbDITX/rS
QepMdty2XnubWZIimusQjmDjv8PzdXk5rXGsiZYxxVEW5jjfRJZqqIOiUshs0Rgo
hKMNbdR/lIwSfOFspRqMxhmN5jcG5V2R3Dj4vuV4tHWYQJaLUdLFkN/rdfZwoQfo
NPaDm2kgzgKFXCwnHxqYLcJK1CNiI+IMFw6MpJR1JM+fbz888t+T8VBWfXx6A0qc
I0JoQC0DToYdVtHtiXE8UWsw2R+4bB3UN0oWeT98Iuu/RS5NLy0/7qncVqydAgMB
AAGjggJoMIICZDAdBgNVHQ4EFgQUlBqDnzQgwiGZDiVboGhFT4B9i84wHwYDVR0j
BBgwFoAUfLJvdkL9a0y/NfvuRV8e+wyfCkUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv
cnkvOGE4NDhhZGY5MmVlNGQ4NDAxOTNkZjQ1YTBlYTY2ODcvMS83Q0IyNkY3NjQy
RkQ2QjRDQkYzNUZCRUU0NTVGMUVGQjBDOUYwQTQ1LmNybDCBngYIKwYBBQUHAQEE
gZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5Lzg5MjcwZjZjLWEzZmUtNDI5OS1iMDc5LTMwOWVkOTdm
MzgyNC8wLzdDQjI2Rjc2NDJGRDZCNENCRjM1RkJFRTQ1NUYxRUZCMEM5RjBBNDUu
Y2VyMIGqBggrBgEFBQcBCwSBnTCBmjCBlwYIKwYBBQUHMAuGgYpyc3luYzovL3Jw
a2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY5MmVlNGQ4NDAxOTNk
ZjQ1YTBlYTY2ODcvMS8zMjYxMzEzNDNhMzczNTM4MzEzYTMzMzU2NTMyM2EzYTJm
MzQzODJkMzQzODIwM2QzZTIwMzEzNjM5MzAzOS5yb2EwGAYDVR0gAQH/BA4wDDAK
BggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoUdYE14jAN
BgkqhkiG9w0BAQsFAAOCAQEAX5kPeuH5n7WJn1ay+l+73XwvRE7jd+lamPYxFUoP
+96L8fbejSrqvcN4XMjVcxmEXTXW4XN/9yRNa+5/yfu1l68cSS61hJ+zMqUU/zel
3NVQ58cEGRRfYgcXL5EIi5O2ASjOgBQ3LEwlLPl6iGZYhn8veXG8Ja89R2NrR6z0
T4eyJlfmDgX/frPEz2FCBtjLrl3vpaBNOpDwnVE32F43aDHh+1hlJ6gQCunAKI2L
O4y3Wb4U+on7/B5mF7ZsJ44eo2s4cGwqdvdVSuAafmL9EyycivVSk51UsMd3H4t6
iLiMvE4ygfaki4HJNMGbNqrtVwQjY9Ki8BDQvg7i9u8lhg==
-----END CERTIFICATE-----
Generated at Fri Jul 25 00:59:09 2025 by rpki-client