Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363337633a3a2f34382d3438203d3e203136393039.roa
File: 326131343a373538343a363337633a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier: LesjKDVvc/Yd1I9QFCUHkwHa12fDmv70rYY/QJUjxbc=
Subject key identifier: 4A:B6:0A:66:5E:64:05:D1:EA:AB:C9:58:41:67:81:E4:41:F6:DD:61
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 129EDEBA341B919C197EDF543CECA8A156E2D144
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363337633a3a2f34382d3438203d3e203136393039.roa
Signing time: Fri 23 May 2025 20:42:02 +0000
ROA not before: Fri 23 May 2025 20:37:02 +0000
ROA not after: Fri 22 May 2026 20:42:02 +0000
asID: 16909
IP address blocks: 2a14:7584:637c::/48 maxlen: 48
Validation: Failed, certificate revoked on Sat 24 May 2025 17:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
12:9e:de:ba:34:1b:91:9c:19:7e:df:54:3c:ec:a8:a1:56:e2:d1:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: May 23 20:37:02 2025 GMT
Not After : May 22 20:42:02 2026 GMT
Subject: CN=4AB60A665E6405D1EAABC958416781E441F6DD61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:ce:f9:c1:19:17:62:71:ca:45:c8:20:ae:e3:
bd:f7:b7:b6:9f:5b:b2:f7:a0:2b:99:41:01:ed:c0:
c4:1f:3a:5d:88:b1:70:d9:36:28:2f:a9:c9:20:4e:
01:6f:a9:60:e7:1c:ea:59:dc:26:e7:c7:c9:c6:46:
be:c8:ab:95:17:07:e1:08:7b:bf:b1:60:72:d2:de:
93:ad:16:3c:ce:ff:5f:67:7a:6e:85:ec:84:9a:bc:
59:00:63:95:4b:02:90:3f:91:a7:42:4e:21:d9:f0:
9a:83:b4:96:58:0f:db:ad:99:23:23:d1:ef:d9:90:
35:e7:bc:91:3d:2a:fa:03:52:05:8a:4f:79:0d:06:
39:29:2c:f7:f4:dc:4e:30:bf:a3:f6:2c:da:05:d1:
ae:22:00:6a:41:f5:00:ee:f7:bf:79:ab:55:41:e0:
3b:78:09:b1:20:37:e2:76:bf:39:29:c9:89:bc:2b:
72:5f:36:ed:92:6e:69:c6:31:fe:9f:ab:2e:24:06:
f3:0c:4e:cd:bd:59:56:bf:e5:36:ac:98:4c:52:6b:
c5:18:98:70:a3:66:06:f5:18:9c:95:1e:15:da:8c:
24:0d:31:26:1f:1b:ab:96:75:2c:e8:24:80:ed:26:
c5:dc:96:55:01:6e:24:fa:aa:a2:a1:f2:d9:79:4b:
4a:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:B6:0A:66:5E:64:05:D1:EA:AB:C9:58:41:67:81:E4:41:F6:DD:61
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363337633a3a2f34382d3438203d3e203136393039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:637c::/48
Signature Algorithm: sha256WithRSAEncryption
12:12:84:fe:05:c8:a6:bc:ad:70:b9:08:53:da:b7:00:80:a2:
b9:01:88:28:af:64:78:2b:b2:ba:01:63:f3:8f:20:4c:69:6b:
5f:a4:f9:db:6b:18:29:46:40:fa:ca:06:7e:24:ec:59:35:93:
6d:07:39:bc:8b:8b:08:23:cd:a5:3e:51:cf:50:9f:be:f1:01:
44:63:2c:f9:0a:03:95:0f:b7:6a:80:0e:86:95:9f:26:e5:f8:
71:32:fd:6e:6e:77:61:4e:48:38:ed:5a:c6:c9:21:79:9d:a2:
7d:6e:a9:31:3d:36:b7:54:26:6b:13:b1:db:1b:48:36:a4:04:
6c:39:ab:db:67:b1:57:3c:89:e6:a5:7e:62:e3:07:90:ff:77:
0d:e4:3f:b3:57:94:19:17:6b:3a:21:59:52:12:c0:d6:58:33:
31:9e:a7:80:11:25:fd:9a:ae:b1:8a:fb:20:ae:58:27:37:a2:
a5:ce:74:eb:00:16:8a:71:34:de:2b:0d:fe:83:14:59:33:c8:
5e:31:14:10:6e:43:1c:88:2a:7d:07:e4:a0:22:1e:8a:26:78:
9e:72:00:81:b3:7c:a8:06:d3:b3:27:67:89:1e:9d:92:80:3f:
9e:71:b3:70:e1:67:80:4d:74:7a:2b:9f:e0:d1:a5:53:b7:28:
29:63:c4:6f
-----BEGIN CERTIFICATE-----
MIIFXjCCBEagAwIBAgIUEp7eujQbkZwZft9UPOyooVbi0UQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN0NCMjZGNzY0MkZENkI0Q0JGMzVGQkVFNDU1RjFFRkIw
QzlGMEE0NTAeFw0yNTA1MjMyMDM3MDJaFw0yNjA1MjIyMDQyMDJaMDMxMTAvBgNV
BAMTKDRBQjYwQTY2NUU2NDA1RDFFQUFCQzk1ODQxNjc4MUU0NDFGNkRENjEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmzvnBGRdiccpFyCCu4733t7af
W7L3oCuZQQHtwMQfOl2IsXDZNigvqckgTgFvqWDnHOpZ3Cbnx8nGRr7Iq5UXB+EI
e7+xYHLS3pOtFjzO/19nem6F7ISavFkAY5VLApA/kadCTiHZ8JqDtJZYD9utmSMj
0e/ZkDXnvJE9KvoDUgWKT3kNBjkpLPf03E4wv6P2LNoF0a4iAGpB9QDu9795q1VB
4Dt4CbEgN+J2vzkpyYm8K3JfNu2SbmnGMf6fqy4kBvMMTs29WVa/5TasmExSa8UY
mHCjZgb1GJyVHhXajCQNMSYfG6uWdSzoJIDtJsXcllUBbiT6qqKh8tl5S0rxAgMB
AAGjggJoMIICZDAdBgNVHQ4EFgQUSrYKZl5kBdHqq8lYQWeB5EH23WEwHwYDVR0j
BBgwFoAUfLJvdkL9a0y/NfvuRV8e+wyfCkUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv
cnkvOGE4NDhhZGY5MmVlNGQ4NDAxOTNkZjQ1YTBlYTY2ODcvMS83Q0IyNkY3NjQy
RkQ2QjRDQkYzNUZCRUU0NTVGMUVGQjBDOUYwQTQ1LmNybDCBngYIKwYBBQUHAQEE
gZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5Lzg5MjcwZjZjLWEzZmUtNDI5OS1iMDc5LTMwOWVkOTdm
MzgyNC8wLzdDQjI2Rjc2NDJGRDZCNENCRjM1RkJFRTQ1NUYxRUZCMEM5RjBBNDUu
Y2VyMIGqBggrBgEFBQcBCwSBnTCBmjCBlwYIKwYBBQUHMAuGgYpyc3luYzovL3Jw
a2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY5MmVlNGQ4NDAxOTNk
ZjQ1YTBlYTY2ODcvMS8zMjYxMzEzNDNhMzczNTM4MzQzYTM2MzMzNzYzM2EzYTJm
MzQzODJkMzQzODIwM2QzZTIwMzEzNjM5MzAzOS5yb2EwGAYDVR0gAQH/BA4wDDAK
BggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoUdYRjfDAN
BgkqhkiG9w0BAQsFAAOCAQEAEhKE/gXIprytcLkIU9q3AICiuQGIKK9keCuyugFj
848gTGlrX6T522sYKUZA+soGfiTsWTWTbQc5vIuLCCPNpT5Rz1CfvvEBRGMs+QoD
lQ+3aoAOhpWfJuX4cTL9bm53YU5IOO1axskheZ2ifW6pMT02t1QmaxOx2xtINqQE
bDmr22exVzyJ5qV+YuMHkP93DeQ/s1eUGRdrOiFZUhLA1lgzMZ6ngBEl/ZqusYr7
IK5YJzeipc506wAWinE03isN/oMUWTPIXjEUEG5DHIgqfQfkoCIeiiZ4nnIAgbN8
qAbTsydniR6dkoA/nnGzcOFngE10eiuf4NGlU7coKWPEbw==
-----END CERTIFICATE-----
Generated at Wed Jul 23 23:54:28 2025 by rpki-client