Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363034383a3a2f34382d3438203d3e20343031353037.roa
File: 326131343a373538343a363034383a3a2f34382d3438203d3e20343031353037.roa (raw, json)
Hash identifier: ckpkgMcG7Im0ooMHSW8DGdmVFgLm74Ea3eS1lJKsswk=
Subject key identifier: 50:29:2F:85:3A:AD:B4:3E:F9:90:A4:06:5B:BD:84:67:E5:E6:2E:4E
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 58AAD5E3072D6C615AD909E900C66346D373450C
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363034383a3a2f34382d3438203d3e20343031353037.roa
Signing time: Sun 02 Mar 2025 15:24:49 +0000
ROA not before: Sun 02 Mar 2025 15:19:49 +0000
ROA not after: Sun 01 Mar 2026 15:24:49 +0000
asID: 401507
IP address blocks: 2a14:7584:6048::/48 maxlen: 48
Validation: Failed, certificate revoked on Mon 10 Mar 2025 12:12:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
58:aa:d5:e3:07:2d:6c:61:5a:d9:09:e9:00:c6:63:46:d3:73:45:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: Mar 2 15:19:49 2025 GMT
Not After : Mar 1 15:24:49 2026 GMT
Subject: CN=50292F853AADB43EF990A4065BBD8467E5E62E4E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:0c:7d:c3:e1:a1:07:90:c7:4a:d6:f0:6c:15:
84:ad:6a:49:4e:fe:54:14:10:7b:e4:7e:20:77:c9:
e6:13:88:25:06:99:a0:c8:26:c5:bb:c5:03:77:1e:
16:bd:90:c7:d5:a6:6f:42:96:f5:47:a2:7f:76:c9:
a4:c2:d4:d5:a3:b6:81:86:35:2d:3e:43:c1:c9:76:
f4:11:a0:f0:51:d6:65:f9:d5:73:70:0e:27:d1:31:
f8:13:d0:6f:87:43:bc:59:0e:ad:d6:92:15:74:da:
33:59:63:3a:9b:43:b8:bf:ce:b6:a6:23:41:c4:2a:
69:43:d8:f9:04:26:f4:74:47:10:06:98:cf:51:0a:
5b:90:33:49:04:5a:8d:1b:00:e9:f9:10:54:69:da:
ca:97:b0:5f:90:ee:d6:ca:e0:3e:7e:ac:b9:f2:bb:
6e:95:49:d3:b7:fa:be:bc:f8:b9:ab:1b:f5:e7:ae:
6f:21:4d:ff:d3:af:d6:34:07:bc:ff:34:6c:3d:6c:
d2:70:32:84:d8:6f:c4:04:ca:aa:4d:6d:31:fe:e6:
a4:7a:1a:6c:83:3c:fd:85:18:dd:4d:9f:dc:2f:5d:
1a:08:cc:8e:06:b0:ed:74:81:04:21:01:a2:f0:d7:
4f:3f:d1:16:e2:56:50:af:3c:6f:62:b9:e2:93:80:
b4:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:29:2F:85:3A:AD:B4:3E:F9:90:A4:06:5B:BD:84:67:E5:E6:2E:4E
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363034383a3a2f34382d3438203d3e20343031353037.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:6048::/48
Signature Algorithm: sha256WithRSAEncryption
97:04:bf:3b:8e:90:c2:0b:a4:0a:1c:75:d4:e1:7e:66:df:47:
ea:a2:1e:29:62:00:4e:f5:e4:88:f1:56:1d:ef:d4:6b:b6:57:
f7:bc:56:74:37:4e:aa:79:c5:ff:2b:0b:d6:ab:16:2e:8d:4e:
74:77:85:46:98:c4:a8:d1:d0:f1:50:f3:b1:18:09:27:19:88:
ef:07:82:42:01:38:8a:e1:86:8c:4a:a4:d2:0a:00:87:9c:ca:
e4:82:7d:09:74:c0:d7:55:a2:55:83:56:0a:24:4a:1f:28:30:
ee:9f:13:a1:80:c2:25:98:3d:0e:25:9f:7a:e0:4c:12:fd:3f:
e3:a8:68:86:89:e3:da:d3:a2:29:36:55:4a:ca:46:da:99:1a:
e7:19:31:4a:f7:32:a2:68:56:58:ea:6f:00:d5:2a:68:46:a0:
aa:42:d4:c4:c1:e4:c1:77:e3:f3:76:35:f5:2c:f3:03:2c:bb:
8b:0c:84:22:77:2e:43:b0:6d:65:43:f6:cf:e0:91:4c:ee:94:
25:c7:4c:12:b7:8f:9d:3d:cb:5b:10:48:76:bd:12:7c:c2:1b:
fe:ad:49:fa:75:71:27:ce:d9:e2:9a:98:73:45:1e:ef:ae:ba:
44:62:c7:61:2a:e4:d0:fa:42:9e:72:0e:69:af:47:84:1d:f9:
ff:b7:36:b9
-----BEGIN CERTIFICATE-----
MIIFYDCCBEigAwIBAgIUWKrV4wctbGFa2QnpAMZjRtNzRQwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN0NCMjZGNzY0MkZENkI0Q0JGMzVGQkVFNDU1RjFFRkIw
QzlGMEE0NTAeFw0yNTAzMDIxNTE5NDlaFw0yNjAzMDExNTI0NDlaMDMxMTAvBgNV
BAMTKDUwMjkyRjg1M0FBREI0M0VGOTkwQTQwNjVCQkQ4NDY3RTVFNjJFNEUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCfDH3D4aEHkMdK1vBsFYStaklO
/lQUEHvkfiB3yeYTiCUGmaDIJsW7xQN3Hha9kMfVpm9ClvVHon92yaTC1NWjtoGG
NS0+Q8HJdvQRoPBR1mX51XNwDifRMfgT0G+HQ7xZDq3WkhV02jNZYzqbQ7i/zram
I0HEKmlD2PkEJvR0RxAGmM9RCluQM0kEWo0bAOn5EFRp2sqXsF+Q7tbK4D5+rLny
u26VSdO3+r68+LmrG/Xnrm8hTf/Tr9Y0B7z/NGw9bNJwMoTYb8QEyqpNbTH+5qR6
GmyDPP2FGN1Nn9wvXRoIzI4GsO10gQQhAaLw108/0RbiVlCvPG9iueKTgLS5AgMB
AAGjggJqMIICZjAdBgNVHQ4EFgQUUCkvhTqttD75kKQGW72EZ+XmLk4wHwYDVR0j
BBgwFoAUfLJvdkL9a0y/NfvuRV8e+wyfCkUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv
cnkvOGE4NDhhZGY5MmVlNGQ4NDAxOTNkZjQ1YTBlYTY2ODcvMS83Q0IyNkY3NjQy
RkQ2QjRDQkYzNUZCRUU0NTVGMUVGQjBDOUYwQTQ1LmNybDCBngYIKwYBBQUHAQEE
gZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5Lzg5MjcwZjZjLWEzZmUtNDI5OS1iMDc5LTMwOWVkOTdm
MzgyNC8wLzdDQjI2Rjc2NDJGRDZCNENCRjM1RkJFRTQ1NUYxRUZCMEM5RjBBNDUu
Y2VyMIGsBggrBgEFBQcBCwSBnzCBnDCBmQYIKwYBBQUHMAuGgYxyc3luYzovL3Jw
a2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY5MmVlNGQ4NDAxOTNk
ZjQ1YTBlYTY2ODcvMS8zMjYxMzEzNDNhMzczNTM4MzQzYTM2MzAzNDM4M2EzYTJm
MzQzODJkMzQzODIwM2QzZTIwMzQzMDMxMzUzMDM3LnJvYTAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKhR1hGBI
MA0GCSqGSIb3DQEBCwUAA4IBAQCXBL87jpDCC6QKHHXU4X5m30fqoh4pYgBO9eSI
8VYd79Rrtlf3vFZ0N06qecX/KwvWqxYujU50d4VGmMSo0dDxUPOxGAknGYjvB4JC
ATiK4YaMSqTSCgCHnMrkgn0JdMDXVaJVg1YKJEofKDDunxOhgMIlmD0OJZ964EwS
/T/jqGiGiePa06IpNlVKykbamRrnGTFK9zKiaFZY6m8A1SpoRqCqQtTEweTBd+Pz
djX1LPMDLLuLDIQidy5DsG1lQ/bP4JFM7pQlx0wSt4+dPctbEEh2vRJ8whv+rUn6
dXEnztnimphzRR7vrrpEYsdhKuTQ+kKecg5pr0eEHfn/tza5
-----END CERTIFICATE-----
Generated at Sat Apr 19 00:47:01 2025 by rpki-client