Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363266373a3a2f34382d3438203d3e20343031353037.roa
File: 326131343a373538343a363266373a3a2f34382d3438203d3e20343031353037.roa (raw, json)
Hash identifier: wLKuXz4Yx9a7zji1xpoQUCgjek2JS8pE5yviSz+gSks=
Subject key identifier: AC:2A:02:84:3F:B2:65:F2:E9:68:25:43:B9:2A:AB:CF:67:F2:54:17
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 624A5DD365871F84ABB64C231B711F6C3E539CC0
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363266373a3a2f34382d3438203d3e20343031353037.roa
Signing time: Mon 19 May 2025 02:06:01 +0000
ROA not before: Mon 19 May 2025 02:01:01 +0000
ROA not after: Mon 18 May 2026 02:06:01 +0000
asID: 401507
IP address blocks: 2a14:7584:62f7::/48 maxlen: 48
Validation: Failed, certificate revoked on Thu 22 May 2025 16:24:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
62:4a:5d:d3:65:87:1f:84:ab:b6:4c:23:1b:71:1f:6c:3e:53:9c:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: May 19 02:01:01 2025 GMT
Not After : May 18 02:06:01 2026 GMT
Subject: CN=AC2A02843FB265F2E9682543B92AABCF67F25417
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:bd:26:2c:83:2c:60:6d:29:bf:35:98:91:d9:
79:03:f3:7d:37:c0:66:45:bc:c6:c6:f3:20:a9:c4:
a2:41:66:1f:aa:1e:3a:4c:42:80:9c:5b:5e:83:d1:
33:26:c4:25:eb:1f:51:0d:5d:2a:1e:f6:c7:9d:cb:
6f:4f:80:b4:1b:72:2c:60:5f:e0:91:48:0c:62:1c:
e9:b4:2c:cd:ab:c6:29:59:31:65:8b:c0:90:94:0a:
7b:c0:43:a9:de:83:59:fc:d7:c7:24:2c:e1:c7:b1:
ba:b3:08:c5:c3:9e:53:56:1d:e9:a6:fb:c7:4c:49:
2a:a7:27:32:68:7a:e9:31:e5:0a:f9:22:6a:ad:65:
1f:0b:a0:b4:60:3c:e8:10:ff:79:46:67:5e:0c:fb:
fd:98:38:ac:db:8e:24:8d:61:50:a3:3c:62:ab:f4:
1b:32:d8:6e:fe:13:03:f3:d4:db:41:30:2b:20:c3:
09:f9:f3:4f:03:c5:90:df:04:29:79:3e:b8:04:8b:
e9:70:21:74:1c:b0:9b:ae:e6:8a:f3:cf:5e:48:e9:
25:19:f3:1f:e3:25:c1:cb:29:c9:4c:bb:46:ed:d7:
8d:96:2c:57:2f:2e:8b:49:71:bf:1e:df:c3:4a:e7:
e3:87:36:d5:98:bc:2d:b1:fe:3a:03:f2:eb:b4:c9:
15:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:2A:02:84:3F:B2:65:F2:E9:68:25:43:B9:2A:AB:CF:67:F2:54:17
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363266373a3a2f34382d3438203d3e20343031353037.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:62f7::/48
Signature Algorithm: sha256WithRSAEncryption
a6:21:fe:8c:ed:f0:c3:ca:c3:05:7f:b8:33:8d:e0:dd:c0:96:
11:fc:0c:2d:34:31:a2:2b:b7:08:26:85:f5:b7:85:16:15:f2:
d3:06:31:24:7f:e5:99:08:b6:bf:b5:d6:cf:ed:5a:39:a9:27:
1e:a4:0c:81:22:13:d2:29:c0:68:4f:ee:18:f5:40:cd:14:dd:
0a:1e:0d:27:59:b9:80:18:02:bb:3c:bb:57:fc:fa:6a:d1:47:
a5:79:f5:b5:57:99:cd:49:8b:bc:f2:50:f4:7d:6e:88:40:b1:
95:61:81:95:a6:c7:83:bc:31:eb:ea:71:65:44:ad:0b:7b:cf:
44:1d:1c:3a:ac:1a:29:46:90:75:08:3e:62:06:15:8d:cf:51:
27:1a:ae:ab:0d:8e:f8:f0:f2:f4:88:09:3b:e0:46:fb:b6:92:
d8:ab:b0:62:d1:71:45:0d:a0:48:87:2b:c1:6a:f2:9d:ab:a1:
23:3b:b5:9e:15:bf:d7:27:43:14:eb:72:6c:a6:9f:15:ca:bc:
b7:51:58:c4:1c:3c:8a:57:38:ac:44:ed:ec:90:c4:de:18:3f:
d4:7a:67:80:ca:0f:9f:e7:93:4e:1a:62:ad:92:ed:d2:2e:14:
da:05:e4:85:eb:86:3d:9f:57:8f:05:88:bb:10:8d:ce:de:0c:
9e:7b:31:e1
-----BEGIN CERTIFICATE-----
MIIFYDCCBEigAwIBAgIUYkpd02WHH4SrtkwjG3EfbD5TnMAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN0NCMjZGNzY0MkZENkI0Q0JGMzVGQkVFNDU1RjFFRkIw
QzlGMEE0NTAeFw0yNTA1MTkwMjAxMDFaFw0yNjA1MTgwMjA2MDFaMDMxMTAvBgNV
BAMTKEFDMkEwMjg0M0ZCMjY1RjJFOTY4MjU0M0I5MkFBQkNGNjdGMjU0MTcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPvSYsgyxgbSm/NZiR2XkD8303
wGZFvMbG8yCpxKJBZh+qHjpMQoCcW16D0TMmxCXrH1ENXSoe9sedy29PgLQbcixg
X+CRSAxiHOm0LM2rxilZMWWLwJCUCnvAQ6neg1n818ckLOHHsbqzCMXDnlNWHemm
+8dMSSqnJzJoeukx5Qr5ImqtZR8LoLRgPOgQ/3lGZ14M+/2YOKzbjiSNYVCjPGKr
9Bsy2G7+EwPz1NtBMCsgwwn5808DxZDfBCl5PrgEi+lwIXQcsJuu5orzz15I6SUZ
8x/jJcHLKclMu0bt142WLFcvLotJcb8e38NK5+OHNtWYvC2x/joD8uu0yRWFAgMB
AAGjggJqMIICZjAdBgNVHQ4EFgQUrCoChD+yZfLpaCVDuSqrz2fyVBcwHwYDVR0j
BBgwFoAUfLJvdkL9a0y/NfvuRV8e+wyfCkUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv
cnkvOGE4NDhhZGY5MmVlNGQ4NDAxOTNkZjQ1YTBlYTY2ODcvMS83Q0IyNkY3NjQy
RkQ2QjRDQkYzNUZCRUU0NTVGMUVGQjBDOUYwQTQ1LmNybDCBngYIKwYBBQUHAQEE
gZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5Lzg5MjcwZjZjLWEzZmUtNDI5OS1iMDc5LTMwOWVkOTdm
MzgyNC8wLzdDQjI2Rjc2NDJGRDZCNENCRjM1RkJFRTQ1NUYxRUZCMEM5RjBBNDUu
Y2VyMIGsBggrBgEFBQcBCwSBnzCBnDCBmQYIKwYBBQUHMAuGgYxyc3luYzovL3Jw
a2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY5MmVlNGQ4NDAxOTNk
ZjQ1YTBlYTY2ODcvMS8zMjYxMzEzNDNhMzczNTM4MzQzYTM2MzI2NjM3M2EzYTJm
MzQzODJkMzQzODIwM2QzZTIwMzQzMDMxMzUzMDM3LnJvYTAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKhR1hGL3
MA0GCSqGSIb3DQEBCwUAA4IBAQCmIf6M7fDDysMFf7gzjeDdwJYR/AwtNDGiK7cI
JoX1t4UWFfLTBjEkf+WZCLa/tdbP7Vo5qScepAyBIhPSKcBoT+4Y9UDNFN0KHg0n
WbmAGAK7PLtX/Ppq0UelefW1V5nNSYu88lD0fW6IQLGVYYGVpseDvDHr6nFlRK0L
e89EHRw6rBopRpB1CD5iBhWNz1EnGq6rDY748PL0iAk74Eb7tpLYq7Bi0XFFDaBI
hyvBavKdq6EjO7WeFb/XJ0MU63Jspp8Vyry3UVjEHDyKVzisRO3skMTeGD/UemeA
yg+f55NOGmKtku3SLhTaBeSF64Y9n1ePBYi7EI3O3gyeezHh
-----END CERTIFICATE-----
Generated at Fri Jul 25 01:01:07 2025 by rpki-client