Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363034353a3a2f34382d3438203d3e20343031353037.roa
File: 326131343a373538343a363034353a3a2f34382d3438203d3e20343031353037.roa (raw, json)
Hash identifier: 9p4aUcjix+9r/HtO1nvU5B0NBaY3mhknq3yesFsenfA=
Subject key identifier: 65:56:BC:8D:5D:20:A6:57:3D:DC:AB:00:43:CD:46:77:96:46:B3:62
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 054EDB90B9AC2D048D15BC754330F334A2CC0EE6
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363034353a3a2f34382d3438203d3e20343031353037.roa
Signing time: Sun 02 Mar 2025 15:24:46 +0000
ROA not before: Sun 02 Mar 2025 15:19:46 +0000
ROA not after: Sun 01 Mar 2026 15:24:46 +0000
asID: 401507
IP address blocks: 2a14:7584:6045::/48 maxlen: 48
Validation: Failed, certificate revoked on Mon 10 Mar 2025 12:12:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
05:4e:db:90:b9:ac:2d:04:8d:15:bc:75:43:30:f3:34:a2:cc:0e:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: Mar 2 15:19:46 2025 GMT
Not After : Mar 1 15:24:46 2026 GMT
Subject: CN=6556BC8D5D20A6573DDCAB0043CD46779646B362
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:27:ea:a9:81:94:be:6b:6d:8b:cc:96:2a:c8:
58:ff:44:be:9c:4c:11:a1:e6:52:8c:f1:1f:f5:6c:
6a:f0:c3:a1:e6:4f:ba:6d:5f:f3:05:59:eb:ac:ba:
30:6e:93:37:2a:98:23:c2:03:cc:5b:94:0f:37:7c:
29:b2:50:76:bf:42:b5:b2:93:da:2a:24:e6:bf:1b:
7b:1c:66:a0:8c:83:d4:10:0a:24:e9:6a:f3:55:2c:
c7:78:99:c3:cb:51:29:ff:c5:ab:9c:e2:a3:95:db:
2e:82:2d:35:64:4b:11:00:2f:3f:02:1b:78:a6:f9:
84:51:c9:46:20:fa:8a:1f:c7:10:8a:fb:c6:cc:94:
7c:2f:95:99:a1:27:25:3c:a4:8c:d7:a9:ac:2d:ac:
54:dd:05:43:1d:12:04:fb:20:f4:0c:f6:a1:c6:27:
df:29:c3:fb:33:b2:2a:52:94:3f:2c:d2:3b:0a:c1:
e2:6d:34:37:67:27:d3:fd:38:e7:0c:b9:1b:61:b2:
9e:a2:bc:ee:71:db:85:11:12:d9:4e:14:7d:8c:bd:
88:03:58:28:c1:2e:eb:00:30:fe:f8:a3:e5:c4:04:
79:13:94:4d:bc:a0:37:73:8e:af:60:aa:68:89:f7:
9d:03:dd:14:44:db:9b:d8:5a:29:17:e0:a3:5c:84:
84:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:56:BC:8D:5D:20:A6:57:3D:DC:AB:00:43:CD:46:77:96:46:B3:62
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363034353a3a2f34382d3438203d3e20343031353037.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:6045::/48
Signature Algorithm: sha256WithRSAEncryption
25:d5:d0:19:75:3e:72:cb:cc:36:4d:df:7c:c9:52:59:05:60:
c4:0f:af:ae:d9:1c:64:73:3b:a0:9c:88:6a:14:e7:b1:72:4e:
51:79:08:9e:cf:0b:d8:a7:07:11:9f:9f:7c:f5:1a:7a:2f:8b:
91:47:95:be:83:81:90:10:36:9c:4d:3e:a1:2f:25:63:13:97:
7b:d2:63:7b:a0:ad:dd:66:b1:82:9f:8b:39:92:79:9c:e2:c5:
e8:ae:1f:af:e0:a5:70:7f:c0:19:f5:40:85:1b:f8:d0:23:1a:
d3:b6:d4:ec:78:66:36:f6:bf:cd:6b:b7:db:00:bf:42:44:56:
ae:21:ed:5a:66:d6:ec:08:7e:cb:b6:4a:d3:9e:86:0a:c0:14:
24:e7:73:a6:27:ff:b8:eb:ef:02:3f:99:a3:00:38:44:06:81:
0d:af:b9:50:7e:bb:55:e9:e0:4d:6f:f1:e5:be:8b:94:94:c8:
e2:42:38:28:b7:bc:ef:d9:53:2a:3e:f0:a0:1b:43:93:45:d5:
9e:df:9c:af:47:86:ff:08:c9:2a:db:7a:05:9d:21:3e:74:10:
67:dd:f8:fd:2f:ef:1e:bb:68:d9:eb:63:91:59:e4:2f:46:97:
2c:29:f0:11:29:13:c5:8a:ba:46:66:92:29:35:a3:82:ef:50:
4a:f6:aa:68
-----BEGIN CERTIFICATE-----
MIIFYDCCBEigAwIBAgIUBU7bkLmsLQSNFbx1QzDzNKLMDuYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN0NCMjZGNzY0MkZENkI0Q0JGMzVGQkVFNDU1RjFFRkIw
QzlGMEE0NTAeFw0yNTAzMDIxNTE5NDZaFw0yNjAzMDExNTI0NDZaMDMxMTAvBgNV
BAMTKDY1NTZCQzhENUQyMEE2NTczRERDQUIwMDQzQ0Q0Njc3OTY0NkIzNjIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD0J+qpgZS+a22LzJYqyFj/RL6c
TBGh5lKM8R/1bGrww6HmT7ptX/MFWeusujBukzcqmCPCA8xblA83fCmyUHa/QrWy
k9oqJOa/G3scZqCMg9QQCiTpavNVLMd4mcPLUSn/xauc4qOV2y6CLTVkSxEALz8C
G3im+YRRyUYg+oofxxCK+8bMlHwvlZmhJyU8pIzXqawtrFTdBUMdEgT7IPQM9qHG
J98pw/szsipSlD8s0jsKweJtNDdnJ9P9OOcMuRthsp6ivO5x24UREtlOFH2MvYgD
WCjBLusAMP74o+XEBHkTlE28oDdzjq9gqmiJ950D3RRE25vYWikX4KNchITVAgMB
AAGjggJqMIICZjAdBgNVHQ4EFgQUZVa8jV0gplc93KsAQ81Gd5ZGs2IwHwYDVR0j
BBgwFoAUfLJvdkL9a0y/NfvuRV8e+wyfCkUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv
cnkvOGE4NDhhZGY5MmVlNGQ4NDAxOTNkZjQ1YTBlYTY2ODcvMS83Q0IyNkY3NjQy
RkQ2QjRDQkYzNUZCRUU0NTVGMUVGQjBDOUYwQTQ1LmNybDCBngYIKwYBBQUHAQEE
gZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5Lzg5MjcwZjZjLWEzZmUtNDI5OS1iMDc5LTMwOWVkOTdm
MzgyNC8wLzdDQjI2Rjc2NDJGRDZCNENCRjM1RkJFRTQ1NUYxRUZCMEM5RjBBNDUu
Y2VyMIGsBggrBgEFBQcBCwSBnzCBnDCBmQYIKwYBBQUHMAuGgYxyc3luYzovL3Jw
a2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY5MmVlNGQ4NDAxOTNk
ZjQ1YTBlYTY2ODcvMS8zMjYxMzEzNDNhMzczNTM4MzQzYTM2MzAzNDM1M2EzYTJm
MzQzODJkMzQzODIwM2QzZTIwMzQzMDMxMzUzMDM3LnJvYTAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKhR1hGBF
MA0GCSqGSIb3DQEBCwUAA4IBAQAl1dAZdT5yy8w2Td98yVJZBWDED6+u2Rxkczug
nIhqFOexck5ReQiezwvYpwcRn5989Rp6L4uRR5W+g4GQEDacTT6hLyVjE5d70mN7
oK3dZrGCn4s5knmc4sXorh+v4KVwf8AZ9UCFG/jQIxrTttTseGY29r/Na7fbAL9C
RFauIe1aZtbsCH7LtkrTnoYKwBQk53OmJ/+46+8CP5mjADhEBoENr7lQfrtV6eBN
b/HlvouUlMjiQjgot7zv2VMqPvCgG0OTRdWe35yvR4b/CMkq23oFnSE+dBBn3fj9
L+8eu2jZ62ORWeQvRpcsKfARKRPFirpGZpIpNaOC71BK9qpo
-----END CERTIFICATE-----
Generated at Sat Apr 19 00:42:13 2025 by rpki-client