Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363263343a3a2f34382d3438203d3e20343031353037.roa
File:                     326131343a373538343a363263343a3a2f34382d3438203d3e20343031353037.roa (raw, json)
Hash identifier:          gPKLb8F3zBwyzBGzut6Fpn5ACrvt2yG7oKoXV2IQC4I=
Subject key identifier:   1E:74:CF:D5:E7:15:3D:06:4D:5F:7A:B8:DE:B0:73:57:C6:3C:88:7B
Certificate issuer:       /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial:       62DE70A0FC55FEDF1C5393DE60F9E74EECF36D13
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363263343a3a2f34382d3438203d3e20343031353037.roa
Signing time:             Sat 17 May 2025 15:12:02 +0000
ROA not before:           Sat 17 May 2025 15:07:02 +0000
ROA not after:            Sat 16 May 2026 15:12:02 +0000
asID:                     401507
IP address blocks:        2a14:7584:62c4::/48 maxlen: 48
Validation:               Failed, certificate revoked on Wed 21 May 2025 16:12:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:de:70:a0:fc:55:fe:df:1c:53:93:de:60:f9:e7:4e:ec:f3:6d:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
        Validity
            Not Before: May 17 15:07:02 2025 GMT
            Not After : May 16 15:12:02 2026 GMT
        Subject: CN=1E74CFD5E7153D064D5F7AB8DEB07357C63C887B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:cc:05:27:e3:07:3f:c3:8e:fa:7e:9d:d9:bb:
                    78:9a:72:eb:07:65:0f:00:43:5b:fd:62:0c:61:c6:
                    dd:a2:f6:ac:5f:a3:5b:8e:4c:54:b0:29:59:2d:0d:
                    08:64:e1:a7:39:24:a6:7b:5f:45:fc:d2:7c:62:da:
                    11:4d:ba:02:7e:12:81:78:a6:26:12:b1:10:99:9d:
                    f6:ce:24:b8:ed:c3:48:72:fc:1b:e8:82:e4:ea:4b:
                    21:8b:f1:28:e7:53:60:e9:49:7e:e7:1a:96:fb:00:
                    8f:25:4f:95:8f:c5:ad:dc:bf:b5:e0:d1:d8:16:8d:
                    ef:a5:59:1d:09:ac:b5:b8:e3:68:da:22:7a:92:71:
                    fd:a5:fc:a6:68:e0:03:50:17:72:eb:10:cf:ae:ca:
                    ec:14:95:12:78:68:5b:db:3e:7d:7d:b9:8a:c1:38:
                    cc:da:4f:5e:e3:77:54:ee:fd:d0:e9:56:2d:e9:a3:
                    0e:20:34:68:a8:3a:c0:ff:a9:d7:32:d3:79:75:67:
                    c4:c1:83:e6:a2:e2:c8:33:cc:1d:4a:41:8b:d8:6b:
                    ec:fa:7b:a7:c9:2a:5d:96:4a:ee:23:b9:e5:6e:c4:
                    e6:c1:d5:e1:f7:0b:65:8c:ea:c2:c1:28:22:1c:17:
                    a8:3b:af:0b:e5:76:92:43:63:2d:ee:ed:93:d7:52:
                    8e:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:74:CF:D5:E7:15:3D:06:4D:5F:7A:B8:DE:B0:73:57:C6:3C:88:7B
            X509v3 Authority Key Identifier:
                keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363263343a3a2f34382d3438203d3e20343031353037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a14:7584:62c4::/48

    Signature Algorithm: sha256WithRSAEncryption
         69:81:6b:67:ae:78:99:4b:49:7a:bd:61:d7:42:85:c7:de:c8:
         99:8c:b2:68:bd:d2:fd:4c:42:2c:5e:89:d2:15:0f:8f:18:b6:
         67:ad:1c:96:69:cc:46:e3:3b:68:40:f6:20:3f:e3:d4:5f:60:
         84:a7:ca:e3:b5:f1:1e:db:7f:55:83:7a:d1:8c:57:f3:b2:f7:
         58:b0:bd:b6:49:d7:0b:4a:7b:8f:20:1e:f2:56:97:3f:cc:6e:
         2c:6a:2b:06:61:67:88:b5:cd:9a:ed:d6:e5:c7:d5:75:4d:52:
         12:79:c4:e2:aa:a0:33:42:58:82:46:6a:bb:03:88:33:90:49:
         f6:67:32:ba:3c:fe:f2:5a:20:26:ad:fe:04:ba:16:50:6c:ea:
         ff:d9:5b:c6:3e:23:15:b2:73:a2:ff:1f:a4:1d:1c:6d:33:96:
         73:d7:cd:21:f6:dc:02:5e:c2:b8:1a:5c:de:ae:28:68:c3:fc:
         11:80:2a:53:fd:0d:ec:84:ab:09:03:a8:6b:2c:97:37:3a:a7:
         0b:21:6f:65:99:0e:43:dc:ef:40:f2:80:3f:61:1f:ba:0c:bb:
         51:ea:1e:25:4d:af:67:4f:89:d5:7b:80:de:49:38:f9:5c:90:
         91:17:72:e4:98:84:cf:ed:5a:52:08:e7:24:de:bd:82:27:f7:
         38:57:f3:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 25 01:03:39 2025 by rpki-client