Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363130333a3a2f34382d3438203d3e203136393039.roa
File: 326131343a373538343a363130333a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier: 5TOXqdeUlufVb+EhkHaZM8hTMn/13RJw9Bh576hCNeI=
Subject key identifier: 3E:73:B4:FD:73:D6:E8:6A:87:06:F7:14:8B:46:5F:FA:DB:C8:9A:5A
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 39AB5CC40F63FFB50699473DEF67824EE194D93E
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363130333a3a2f34382d3438203d3e203136393039.roa
Signing time: Wed 02 Apr 2025 18:46:15 +0000
ROA not before: Wed 02 Apr 2025 18:41:15 +0000
ROA not after: Wed 01 Apr 2026 18:46:15 +0000
asID: 16909
IP address blocks: 2a14:7584:6103::/48 maxlen: 48
Validation: Failed, certificate revoked on Fri 11 Apr 2025 18:31:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
39:ab:5c:c4:0f:63:ff:b5:06:99:47:3d:ef:67:82:4e:e1:94:d9:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: Apr 2 18:41:15 2025 GMT
Not After : Apr 1 18:46:15 2026 GMT
Subject: CN=3E73B4FD73D6E86A8706F7148B465FFADBC89A5A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:a3:08:70:22:8e:bc:89:00:c3:ed:5e:20:ad:
ea:1c:25:38:d5:81:93:7a:6d:72:e6:eb:f2:76:5c:
88:60:50:99:b6:09:79:93:98:04:e4:34:63:79:92:
67:78:84:f2:04:56:81:77:7f:a5:82:89:6e:58:3e:
87:9d:ed:51:95:d5:ea:9f:3d:fe:c1:b0:47:4d:35:
9c:a6:b5:39:a0:a5:1c:65:85:d8:61:d3:e4:8e:9d:
23:8a:2e:71:64:9d:5a:a0:3d:08:38:cc:43:1f:53:
39:1e:5e:14:9e:9d:53:1b:49:c7:5b:0d:55:c9:68:
99:21:20:e7:ff:05:f3:e5:41:b8:f8:0c:aa:e6:b7:
90:a5:e4:62:fc:cc:b0:1d:f7:c7:ac:26:c3:e5:e8:
3c:e1:a5:3d:7c:79:ae:50:0b:2c:93:74:65:4f:5b:
d2:f9:60:d2:30:9b:c0:ee:6b:6e:e4:bf:aa:9b:37:
a9:5b:89:f6:2d:96:ee:43:1f:f5:69:4e:a1:55:b8:
21:b1:76:f0:e3:1f:48:06:f5:01:e8:1a:ce:43:c9:
b2:64:bb:5f:4a:96:32:b2:22:7a:9f:68:30:3b:f9:
1e:36:33:e1:7a:c8:ac:35:ea:4f:fa:b8:18:e0:8d:
0d:07:e7:ba:a9:93:9d:fa:4c:4d:56:3a:0f:1e:db:
a6:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:73:B4:FD:73:D6:E8:6A:87:06:F7:14:8B:46:5F:FA:DB:C8:9A:5A
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363130333a3a2f34382d3438203d3e203136393039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:6103::/48
Signature Algorithm: sha256WithRSAEncryption
ad:92:72:92:92:a4:98:ac:ce:6b:23:98:03:af:b6:11:ce:90:
99:14:66:5b:5b:80:e3:f6:bf:cf:20:84:51:ca:07:b6:3f:84:
fd:1c:6f:1f:0a:88:42:a4:6a:37:85:ad:05:95:45:24:9b:00:
b9:6b:40:2c:33:ec:ed:a4:dc:f5:3b:b3:60:6c:f1:ac:a2:11:
e1:6f:3e:76:f0:b0:ee:da:cc:22:be:22:90:04:44:9e:be:33:
cb:c9:39:4a:55:5a:90:f9:d9:0d:3f:07:3f:03:b3:36:61:ac:
30:bd:b2:61:e8:4e:e2:1c:90:24:31:22:43:d9:61:71:41:ac:
50:c9:4d:c8:c5:3d:eb:61:40:bf:81:eb:67:77:45:b4:6f:22:
1e:14:5b:12:21:48:77:81:a4:28:cf:1d:84:c5:1d:8b:30:85:
4f:e5:20:7a:5b:f2:95:70:13:6c:87:c5:22:e1:f6:42:bc:be:
ae:7b:78:52:22:3e:cb:c6:68:35:9e:05:25:ed:5a:09:04:40:
d0:4d:a0:9e:b3:2d:cf:b3:0f:bd:b2:bb:77:9d:dc:c1:b4:ab:
04:e0:0d:10:e8:f4:9e:31:5a:38:d2:34:9b:14:d9:a0:b2:82:
a5:40:c6:ac:1b:22:88:5c:88:3b:fb:59:74:84:1b:2f:d6:e2:
b6:0a:fa:37
-----BEGIN CERTIFICATE-----
MIIFXjCCBEagAwIBAgIUOatcxA9j/7UGmUc972eCTuGU2T4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN0NCMjZGNzY0MkZENkI0Q0JGMzVGQkVFNDU1RjFFRkIw
QzlGMEE0NTAeFw0yNTA0MDIxODQxMTVaFw0yNjA0MDExODQ2MTVaMDMxMTAvBgNV
BAMTKDNFNzNCNEZENzNENkU4NkE4NzA2RjcxNDhCNDY1RkZBREJDODlBNUEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDUowhwIo68iQDD7V4greocJTjV
gZN6bXLm6/J2XIhgUJm2CXmTmATkNGN5kmd4hPIEVoF3f6WCiW5YPoed7VGV1eqf
Pf7BsEdNNZymtTmgpRxlhdhh0+SOnSOKLnFknVqgPQg4zEMfUzkeXhSenVMbScdb
DVXJaJkhIOf/BfPlQbj4DKrmt5Cl5GL8zLAd98esJsPl6DzhpT18ea5QCyyTdGVP
W9L5YNIwm8Dua27kv6qbN6lbifYtlu5DH/VpTqFVuCGxdvDjH0gG9QHoGs5DybJk
u19KljKyInqfaDA7+R42M+F6yKw16k/6uBjgjQ0H57qpk536TE1WOg8e26bZAgMB
AAGjggJoMIICZDAdBgNVHQ4EFgQUPnO0/XPW6GqHBvcUi0Zf+tvImlowHwYDVR0j
BBgwFoAUfLJvdkL9a0y/NfvuRV8e+wyfCkUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv
cnkvOGE4NDhhZGY5MmVlNGQ4NDAxOTNkZjQ1YTBlYTY2ODcvMS83Q0IyNkY3NjQy
RkQ2QjRDQkYzNUZCRUU0NTVGMUVGQjBDOUYwQTQ1LmNybDCBngYIKwYBBQUHAQEE
gZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5Lzg5MjcwZjZjLWEzZmUtNDI5OS1iMDc5LTMwOWVkOTdm
MzgyNC8wLzdDQjI2Rjc2NDJGRDZCNENCRjM1RkJFRTQ1NUYxRUZCMEM5RjBBNDUu
Y2VyMIGqBggrBgEFBQcBCwSBnTCBmjCBlwYIKwYBBQUHMAuGgYpyc3luYzovL3Jw
a2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY5MmVlNGQ4NDAxOTNk
ZjQ1YTBlYTY2ODcvMS8zMjYxMzEzNDNhMzczNTM4MzQzYTM2MzEzMDMzM2EzYTJm
MzQzODJkMzQzODIwM2QzZTIwMzEzNjM5MzAzOS5yb2EwGAYDVR0gAQH/BA4wDDAK
BggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoUdYRhAzAN
BgkqhkiG9w0BAQsFAAOCAQEArZJykpKkmKzOayOYA6+2Ec6QmRRmW1uA4/a/zyCE
UcoHtj+E/RxvHwqIQqRqN4WtBZVFJJsAuWtALDPs7aTc9TuzYGzxrKIR4W8+dvCw
7trMIr4ikAREnr4zy8k5SlVakPnZDT8HPwOzNmGsML2yYehO4hyQJDEiQ9lhcUGs
UMlNyMU962FAv4HrZ3dFtG8iHhRbEiFId4GkKM8dhMUdizCFT+UgelvylXATbIfF
IuH2Qry+rnt4UiI+y8ZoNZ4FJe1aCQRA0E2gnrMtz7MPvbK7d53cwbSrBOANEOj0
njFaONI0mxTZoLKCpUDGrBsiiFyIO/tZdIQbL9bitgr6Nw==
-----END CERTIFICATE-----
Generated at Fri Jul 25 01:01:50 2025 by rpki-client