Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363230333a3a2f34382d3438203d3e203136393039.roa
File: 326131343a373538343a363230333a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier: drGTU4gYhxEdVGHcOXt/Kr7gR6+kAycnJIu/f5X7VgI=
Subject key identifier: EC:3A:31:3D:F5:C7:83:6C:C4:0E:4B:D6:9B:7D:0F:DD:2E:4F:0F:90
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 78347AF6F3276DEF5C49F5B2DA1031E8262AF2A0
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363230333a3a2f34382d3438203d3e203136393039.roa
Signing time: Mon 12 May 2025 16:18:09 +0000
ROA not before: Mon 12 May 2025 16:13:09 +0000
ROA not after: Mon 11 May 2026 16:18:09 +0000
asID: 16909
IP address blocks: 2a14:7584:6203::/48 maxlen: 48
Validation: Failed, certificate revoked on Sat 31 May 2025 17:16:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
78:34:7a:f6:f3:27:6d:ef:5c:49:f5:b2:da:10:31:e8:26:2a:f2:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: May 12 16:13:09 2025 GMT
Not After : May 11 16:18:09 2026 GMT
Subject: CN=EC3A313DF5C7836CC40E4BD69B7D0FDD2E4F0F90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:08:76:f6:37:b2:47:42:95:01:2b:c6:be:2d:
72:11:27:52:12:6a:7d:79:98:fc:a2:7b:34:ea:c3:
29:e5:7d:06:3d:31:7c:75:b7:19:4f:f6:6b:dd:a8:
95:de:06:72:d3:06:db:8c:65:7a:1d:0c:7d:a4:98:
db:c0:82:ca:74:85:99:d4:46:3c:d1:54:72:73:99:
80:19:98:4d:bc:2f:46:99:22:ea:35:f1:22:8a:03:
70:1e:a9:d5:e3:dc:b8:18:db:38:71:82:d3:5a:dd:
b4:84:6a:81:66:ef:11:87:fb:fa:85:fe:f8:2b:c7:
73:99:92:8a:0a:83:1d:25:c7:fc:bd:76:82:ac:70:
72:d3:15:da:79:ea:8a:be:92:47:61:72:f9:16:9d:
f1:c0:9d:83:8e:1e:c6:a9:4a:5a:88:6a:83:6f:fd:
ab:8c:e4:80:8f:4b:9e:33:0a:c3:82:90:d3:10:b3:
2e:83:6c:d0:eb:cb:a4:39:5b:3b:ab:f8:84:3b:cd:
b8:88:ce:a5:a7:95:a1:24:2e:cd:ed:cf:d2:96:0e:
e5:24:81:06:38:1f:08:08:ed:72:ca:ad:93:d2:ba:
ae:59:41:ac:50:06:b0:e5:d4:f7:37:7d:d1:9c:f2:
60:81:40:2a:89:6c:bc:0f:90:3f:41:31:ed:34:fd:
81:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:3A:31:3D:F5:C7:83:6C:C4:0E:4B:D6:9B:7D:0F:DD:2E:4F:0F:90
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363230333a3a2f34382d3438203d3e203136393039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:6203::/48
Signature Algorithm: sha256WithRSAEncryption
60:fc:b9:a6:50:dd:b1:07:c4:9a:54:9d:6d:0e:1c:89:93:cb:
dd:3a:6e:c3:9f:0c:54:c5:a4:36:6f:92:4d:d3:42:4e:14:d6:
66:2f:93:94:93:26:f3:23:1d:78:3b:e4:a9:2c:31:70:e7:b6:
82:8f:7b:2a:a5:58:03:fa:e4:75:55:77:72:b4:c0:7c:45:80:
52:93:bf:b2:05:0b:0d:59:db:bd:42:6f:fa:3d:ba:7f:ee:33:
36:7b:8a:dd:9f:28:09:f7:92:0d:97:6b:38:12:73:e3:2e:96:
e5:5b:4c:6c:e5:81:78:15:8e:3e:d4:ae:7e:ff:35:14:93:91:
77:3e:d2:cb:b5:0f:28:77:79:6e:6c:71:f9:8f:25:b4:7d:18:
ea:6e:47:94:7c:09:b7:80:d1:5d:6c:31:48:1d:b3:2b:51:0d:
ee:e1:73:56:2a:b7:55:6c:38:77:a1:28:ca:f4:d1:39:85:ca:
9d:60:a5:59:a4:07:09:9e:56:c6:25:b3:81:7c:e9:38:0b:d1:
a8:9b:96:d5:c9:f7:5c:c8:fc:c1:be:fe:6b:70:e2:87:fe:54:
65:bf:38:1c:40:b4:27:98:f2:a2:8b:43:48:a7:71:4a:8d:8b:
ae:26:f3:c3:a3:69:fe:4a:6c:cd:9e:c6:d7:17:47:06:c3:f9:
38:c5:0d:31
-----BEGIN CERTIFICATE-----
MIIFXjCCBEagAwIBAgIUeDR69vMnbe9cSfWy2hAx6CYq8qAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN0NCMjZGNzY0MkZENkI0Q0JGMzVGQkVFNDU1RjFFRkIw
QzlGMEE0NTAeFw0yNTA1MTIxNjEzMDlaFw0yNjA1MTExNjE4MDlaMDMxMTAvBgNV
BAMTKEVDM0EzMTNERjVDNzgzNkNDNDBFNEJENjlCN0QwRkREMkU0RjBGOTAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6CHb2N7JHQpUBK8a+LXIRJ1IS
an15mPyiezTqwynlfQY9MXx1txlP9mvdqJXeBnLTBtuMZXodDH2kmNvAgsp0hZnU
RjzRVHJzmYAZmE28L0aZIuo18SKKA3AeqdXj3LgY2zhxgtNa3bSEaoFm7xGH+/qF
/vgrx3OZkooKgx0lx/y9doKscHLTFdp56oq+kkdhcvkWnfHAnYOOHsapSlqIaoNv
/auM5ICPS54zCsOCkNMQsy6DbNDry6Q5Wzur+IQ7zbiIzqWnlaEkLs3tz9KWDuUk
gQY4HwgI7XLKrZPSuq5ZQaxQBrDl1Pc3fdGc8mCBQCqJbLwPkD9BMe00/YEZAgMB
AAGjggJoMIICZDAdBgNVHQ4EFgQU7DoxPfXHg2zEDkvWm30P3S5PD5AwHwYDVR0j
BBgwFoAUfLJvdkL9a0y/NfvuRV8e+wyfCkUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv
cnkvOGE4NDhhZGY5MmVlNGQ4NDAxOTNkZjQ1YTBlYTY2ODcvMS83Q0IyNkY3NjQy
RkQ2QjRDQkYzNUZCRUU0NTVGMUVGQjBDOUYwQTQ1LmNybDCBngYIKwYBBQUHAQEE
gZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5Lzg5MjcwZjZjLWEzZmUtNDI5OS1iMDc5LTMwOWVkOTdm
MzgyNC8wLzdDQjI2Rjc2NDJGRDZCNENCRjM1RkJFRTQ1NUYxRUZCMEM5RjBBNDUu
Y2VyMIGqBggrBgEFBQcBCwSBnTCBmjCBlwYIKwYBBQUHMAuGgYpyc3luYzovL3Jw
a2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY5MmVlNGQ4NDAxOTNk
ZjQ1YTBlYTY2ODcvMS8zMjYxMzEzNDNhMzczNTM4MzQzYTM2MzIzMDMzM2EzYTJm
MzQzODJkMzQzODIwM2QzZTIwMzEzNjM5MzAzOS5yb2EwGAYDVR0gAQH/BA4wDDAK
BggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoUdYRiAzAN
BgkqhkiG9w0BAQsFAAOCAQEAYPy5plDdsQfEmlSdbQ4ciZPL3Tpuw58MVMWkNm+S
TdNCThTWZi+TlJMm8yMdeDvkqSwxcOe2go97KqVYA/rkdVV3crTAfEWAUpO/sgUL
DVnbvUJv+j26f+4zNnuK3Z8oCfeSDZdrOBJz4y6W5VtMbOWBeBWOPtSufv81FJOR
dz7Sy7UPKHd5bmxx+Y8ltH0Y6m5HlHwJt4DRXWwxSB2zK1EN7uFzViq3VWw4d6Eo
yvTROYXKnWClWaQHCZ5WxiWzgXzpOAvRqJuW1cn3XMj8wb7+a3Dih/5UZb84HEC0
J5jyootDSKdxSo2Lribzw6Np/kpszZ7G1xdHBsP5OMUNMQ==
-----END CERTIFICATE-----
Generated at Sun Jul 27 04:54:35 2025 by rpki-client