Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363034623a3a2f34382d3438203d3e20343031353037.roa
File: 326131343a373538343a363034623a3a2f34382d3438203d3e20343031353037.roa (raw, json)
Hash identifier: j5f4Ppter3y7t1QTTKmsnYUgUWHb51TUyf5VtfsmSSE=
Subject key identifier: 78:72:BE:9C:45:DC:08:41:09:CD:66:51:B8:07:98:C0:29:3D:F5:B0
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 2A3AD1DFC9486470E8557092D8F7BF82A2E05AA9
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363034623a3a2f34382d3438203d3e20343031353037.roa
Signing time: Sun 02 Mar 2025 15:24:52 +0000
ROA not before: Sun 02 Mar 2025 15:19:52 +0000
ROA not after: Sun 01 Mar 2026 15:24:52 +0000
asID: 401507
IP address blocks: 2a14:7584:604b::/48 maxlen: 48
Validation: Failed, certificate revoked on Sun 16 Mar 2025 16:17:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2a:3a:d1:df:c9:48:64:70:e8:55:70:92:d8:f7:bf:82:a2:e0:5a:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: Mar 2 15:19:52 2025 GMT
Not After : Mar 1 15:24:52 2026 GMT
Subject: CN=7872BE9C45DC084109CD6651B80798C0293DF5B0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:29:36:51:37:21:b5:7d:16:50:a3:ce:9b:2d:
96:54:65:ce:2f:40:9d:29:61:95:0e:c4:f2:54:3b:
db:1f:69:ea:88:b5:66:fd:dc:14:29:0a:a4:a1:a3:
14:42:20:ee:0c:fa:37:5d:ea:08:18:b8:76:50:d5:
c8:a1:df:a8:49:9b:a3:03:be:51:bd:fa:66:16:da:
3d:2c:b6:38:21:bb:95:db:f4:f6:eb:62:7c:91:d3:
02:62:31:3e:e6:06:03:52:1f:13:36:7c:0d:c1:5c:
4e:15:50:bb:bb:5d:52:ae:c0:23:b9:dd:e2:9e:4f:
4d:3e:7b:23:51:39:6a:ba:3d:0d:f6:35:22:17:fe:
61:29:92:44:2e:40:4e:bf:a4:1f:b7:0f:0e:5c:d4:
07:30:1a:61:91:77:17:36:f8:04:5b:d7:c9:a1:06:
a6:d7:ba:20:df:ac:a7:57:0a:3b:a0:09:62:6a:7d:
03:f8:cc:ef:23:1e:11:9d:89:18:0e:ed:fc:0c:69:
bc:20:fb:33:bb:63:9b:26:69:40:c4:35:e3:ee:29:
b1:07:8b:04:22:20:6c:ee:b1:fe:92:d4:e2:de:4b:
af:eb:7d:27:f8:a0:d9:56:a1:56:32:6b:0d:4d:07:
2c:39:42:56:16:01:19:b0:30:a3:2d:64:fc:24:2e:
4b:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:72:BE:9C:45:DC:08:41:09:CD:66:51:B8:07:98:C0:29:3D:F5:B0
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363034623a3a2f34382d3438203d3e20343031353037.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:604b::/48
Signature Algorithm: sha256WithRSAEncryption
9f:3a:1b:23:18:5d:6e:ca:33:d3:3a:0a:5b:16:c6:5b:4b:40:
d4:71:29:45:f0:55:ed:0e:88:06:b8:8a:c5:46:a6:51:4e:22:
3b:af:35:d1:b6:b7:d1:eb:94:18:2b:c8:77:07:b6:82:87:40:
21:e5:83:bb:92:04:70:40:ea:c4:b7:f9:0d:72:2e:44:33:a4:
13:a8:47:6f:d1:bf:ee:e9:08:59:88:f2:74:5b:00:cd:21:93:
55:b1:50:6a:71:5d:22:b2:6a:99:61:ee:4b:26:5e:99:97:60:
04:d2:77:97:23:19:64:95:99:80:40:eb:2e:c2:cc:5b:76:f9:
78:88:b6:43:f0:5c:19:7c:4e:36:7a:9a:9b:b7:bb:a8:13:bc:
a7:3c:6a:72:ff:32:ac:44:6d:c2:9f:a1:94:50:a5:87:08:fb:
6c:9e:c6:99:21:73:63:09:31:0d:03:37:94:31:5c:82:e6:12:
2b:43:6e:3a:fa:eb:c4:32:8f:c0:10:92:b0:46:8f:ec:09:89:
d7:b2:c7:6b:55:fa:ba:e6:93:26:3c:7c:30:ad:b8:35:79:75:
60:38:0b:26:1d:e8:76:12:c1:63:fc:24:62:e6:cf:bc:2e:97:
75:a8:36:ff:29:ae:2e:1a:22:38:82:9b:42:68:3b:bd:63:88:
75:fd:c3:8f
-----BEGIN CERTIFICATE-----
MIIFYDCCBEigAwIBAgIUKjrR38lIZHDoVXCS2Pe/gqLgWqkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN0NCMjZGNzY0MkZENkI0Q0JGMzVGQkVFNDU1RjFFRkIw
QzlGMEE0NTAeFw0yNTAzMDIxNTE5NTJaFw0yNjAzMDExNTI0NTJaMDMxMTAvBgNV
BAMTKDc4NzJCRTlDNDVEQzA4NDEwOUNENjY1MUI4MDc5OEMwMjkzREY1QjAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDjKTZRNyG1fRZQo86bLZZUZc4v
QJ0pYZUOxPJUO9sfaeqItWb93BQpCqShoxRCIO4M+jdd6ggYuHZQ1cih36hJm6MD
vlG9+mYW2j0stjghu5Xb9PbrYnyR0wJiMT7mBgNSHxM2fA3BXE4VULu7XVKuwCO5
3eKeT00+eyNROWq6PQ32NSIX/mEpkkQuQE6/pB+3Dw5c1AcwGmGRdxc2+ARb18mh
BqbXuiDfrKdXCjugCWJqfQP4zO8jHhGdiRgO7fwMabwg+zO7Y5smaUDENePuKbEH
iwQiIGzusf6S1OLeS6/rfSf4oNlWoVYyaw1NByw5QlYWARmwMKMtZPwkLkvRAgMB
AAGjggJqMIICZjAdBgNVHQ4EFgQUeHK+nEXcCEEJzWZRuAeYwCk99bAwHwYDVR0j
BBgwFoAUfLJvdkL9a0y/NfvuRV8e+wyfCkUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv
cnkvOGE4NDhhZGY5MmVlNGQ4NDAxOTNkZjQ1YTBlYTY2ODcvMS83Q0IyNkY3NjQy
RkQ2QjRDQkYzNUZCRUU0NTVGMUVGQjBDOUYwQTQ1LmNybDCBngYIKwYBBQUHAQEE
gZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5Lzg5MjcwZjZjLWEzZmUtNDI5OS1iMDc5LTMwOWVkOTdm
MzgyNC8wLzdDQjI2Rjc2NDJGRDZCNENCRjM1RkJFRTQ1NUYxRUZCMEM5RjBBNDUu
Y2VyMIGsBggrBgEFBQcBCwSBnzCBnDCBmQYIKwYBBQUHMAuGgYxyc3luYzovL3Jw
a2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY5MmVlNGQ4NDAxOTNk
ZjQ1YTBlYTY2ODcvMS8zMjYxMzEzNDNhMzczNTM4MzQzYTM2MzAzNDYyM2EzYTJm
MzQzODJkMzQzODIwM2QzZTIwMzQzMDMxMzUzMDM3LnJvYTAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKhR1hGBL
MA0GCSqGSIb3DQEBCwUAA4IBAQCfOhsjGF1uyjPTOgpbFsZbS0DUcSlF8FXtDogG
uIrFRqZRTiI7rzXRtrfR65QYK8h3B7aCh0Ah5YO7kgRwQOrEt/kNci5EM6QTqEdv
0b/u6QhZiPJ0WwDNIZNVsVBqcV0ismqZYe5LJl6Zl2AE0neXIxlklZmAQOsuwsxb
dvl4iLZD8FwZfE42epqbt7uoE7ynPGpy/zKsRG3Cn6GUUKWHCPtsnsaZIXNjCTEN
AzeUMVyC5hIrQ246+uvEMo/AEJKwRo/sCYnXssdrVfq65pMmPHwwrbg1eXVgOAsm
Heh2EsFj/CRi5s+8Lpd1qDb/Ka4uGiI4gptCaDu9Y4h1/cOP
-----END CERTIFICATE-----
Generated at Sat Apr 19 00:45:05 2025 by rpki-client