Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363034633a3a2f34382d3438203d3e203136393039.roa
File: 326131343a373538343a363034633a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier: L1Jb9zOirpt45uH0sKNzCliQF6v/BoBVwSI2qlTqBSY=
Subject key identifier: 59:11:AF:DA:FF:FD:D7:11:B9:30:73:E1:92:2E:44:E2:53:D3:86:EE
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 2CB4A9342BC0D1F7B39610D0022C68D89B1E7BCF
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363034633a3a2f34382d3438203d3e203136393039.roa
Signing time: Sun 02 Mar 2025 15:26:09 +0000
ROA not before: Sun 02 Mar 2025 15:21:09 +0000
ROA not after: Sun 01 Mar 2026 15:26:09 +0000
asID: 16909
IP address blocks: 2a14:7584:604c::/48 maxlen: 48
Validation: Failed, certificate revoked on Mon 10 Mar 2025 12:11:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2c:b4:a9:34:2b:c0:d1:f7:b3:96:10:d0:02:2c:68:d8:9b:1e:7b:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: Mar 2 15:21:09 2025 GMT
Not After : Mar 1 15:26:09 2026 GMT
Subject: CN=5911AFDAFFFDD711B93073E1922E44E253D386EE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:1c:b3:d3:58:83:d9:f6:98:6a:18:90:1e:d9:
0f:5a:65:a1:7d:7b:41:ac:fd:f1:af:c4:e2:f4:b0:
7c:82:ee:9a:ff:0a:33:94:cf:2a:89:2b:d2:67:c3:
16:d6:e9:45:2c:ec:a7:8a:30:33:ce:e3:58:50:17:
17:e6:23:73:9f:45:e3:a2:a6:19:82:42:ef:16:7a:
8a:0c:e3:70:ed:60:21:03:39:4f:4d:c0:94:6f:65:
ff:2b:32:9c:21:6c:1b:9b:2b:d7:fe:d4:54:fa:93:
a1:b7:e6:5f:a4:d7:c1:91:5a:b1:31:52:ab:a9:a5:
41:7c:a4:78:a9:0e:ac:06:62:ec:c2:db:56:db:e4:
6b:a1:2a:65:80:44:e2:c4:6d:5a:34:97:80:8c:98:
97:28:ea:6c:90:6c:3f:12:83:22:a6:cc:cf:66:21:
cf:61:2d:97:30:59:0e:ed:f4:29:23:c7:cf:70:d6:
f5:49:ec:53:36:29:fc:34:fd:5d:da:6d:54:e8:5a:
8d:53:ec:11:52:3b:f0:03:5c:86:88:57:db:15:fb:
35:d7:c8:09:4d:99:cd:99:7d:b0:98:6d:6f:59:c3:
5d:09:d1:cb:5a:d1:e1:d4:50:a0:45:43:bd:eb:04:
3f:fb:0c:bd:3b:6c:08:27:9a:83:d3:a7:40:ce:2e:
40:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:11:AF:DA:FF:FD:D7:11:B9:30:73:E1:92:2E:44:E2:53:D3:86:EE
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363034633a3a2f34382d3438203d3e203136393039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:604c::/48
Signature Algorithm: sha256WithRSAEncryption
48:ac:c2:40:01:d3:e2:68:09:6f:cf:7a:6e:48:c9:19:a3:19:
4b:79:5a:fa:07:3e:67:9f:a0:be:87:21:67:25:7c:00:7a:dd:
3a:fc:fe:aa:6f:16:3a:55:d3:11:70:db:83:fc:96:4c:4f:05:
56:b0:4c:c3:1f:23:dd:f2:84:14:c9:fb:3f:85:b9:34:a6:85:
8d:ca:39:bc:e1:67:c6:28:e7:a1:c3:e7:2b:77:c8:23:0d:d0:
c8:0f:8d:46:e6:1c:44:60:e9:8c:fb:f1:cc:3c:9c:d9:8b:7c:
3b:b9:8c:fa:0f:d9:70:ad:9d:9c:a1:26:7f:03:ec:41:89:a8:
82:7f:40:dc:ec:8a:06:c1:44:cc:e0:ec:97:dd:0a:1b:63:82:
e2:2c:58:96:25:f9:58:55:8e:a7:36:95:b5:36:d5:ee:33:ef:
49:5e:4d:56:19:1e:f4:73:b9:00:1d:e5:b2:f7:19:5d:77:28:
bf:f4:3a:49:48:34:c2:92:c8:f9:3b:6b:5d:34:29:64:cd:85:
1f:e4:9e:01:59:32:95:29:a7:90:a0:45:a6:e3:40:9c:a3:49:
d8:9b:74:8f:43:5d:c0:ae:26:ae:2c:ab:86:d9:26:e9:c8:c8:
50:0d:01:e7:c2:c1:c1:c3:56:e1:5c:d6:6d:3a:41:d1:66:b0:
76:68:08:3c
-----BEGIN CERTIFICATE-----
MIIFXjCCBEagAwIBAgIULLSpNCvA0fezlhDQAixo2Jsee88wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN0NCMjZGNzY0MkZENkI0Q0JGMzVGQkVFNDU1RjFFRkIw
QzlGMEE0NTAeFw0yNTAzMDIxNTIxMDlaFw0yNjAzMDExNTI2MDlaMDMxMTAvBgNV
BAMTKDU5MTFBRkRBRkZGREQ3MTFCOTMwNzNFMTkyMkU0NEUyNTNEMzg2RUUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCoHLPTWIPZ9phqGJAe2Q9aZaF9
e0Gs/fGvxOL0sHyC7pr/CjOUzyqJK9JnwxbW6UUs7KeKMDPO41hQFxfmI3OfReOi
phmCQu8WeooM43DtYCEDOU9NwJRvZf8rMpwhbBubK9f+1FT6k6G35l+k18GRWrEx
UquppUF8pHipDqwGYuzC21bb5GuhKmWAROLEbVo0l4CMmJco6myQbD8SgyKmzM9m
Ic9hLZcwWQ7t9Ckjx89w1vVJ7FM2Kfw0/V3abVToWo1T7BFSO/ADXIaIV9sV+zXX
yAlNmc2ZfbCYbW9Zw10J0cta0eHUUKBFQ73rBD/7DL07bAgnmoPTp0DOLkCHAgMB
AAGjggJoMIICZDAdBgNVHQ4EFgQUWRGv2v/91xG5MHPhki5E4lPThu4wHwYDVR0j
BBgwFoAUfLJvdkL9a0y/NfvuRV8e+wyfCkUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv
cnkvOGE4NDhhZGY5MmVlNGQ4NDAxOTNkZjQ1YTBlYTY2ODcvMS83Q0IyNkY3NjQy
RkQ2QjRDQkYzNUZCRUU0NTVGMUVGQjBDOUYwQTQ1LmNybDCBngYIKwYBBQUHAQEE
gZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5Lzg5MjcwZjZjLWEzZmUtNDI5OS1iMDc5LTMwOWVkOTdm
MzgyNC8wLzdDQjI2Rjc2NDJGRDZCNENCRjM1RkJFRTQ1NUYxRUZCMEM5RjBBNDUu
Y2VyMIGqBggrBgEFBQcBCwSBnTCBmjCBlwYIKwYBBQUHMAuGgYpyc3luYzovL3Jw
a2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY5MmVlNGQ4NDAxOTNk
ZjQ1YTBlYTY2ODcvMS8zMjYxMzEzNDNhMzczNTM4MzQzYTM2MzAzNDYzM2EzYTJm
MzQzODJkMzQzODIwM2QzZTIwMzEzNjM5MzAzOS5yb2EwGAYDVR0gAQH/BA4wDDAK
BggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoUdYRgTDAN
BgkqhkiG9w0BAQsFAAOCAQEASKzCQAHT4mgJb896bkjJGaMZS3la+gc+Z5+gvoch
ZyV8AHrdOvz+qm8WOlXTEXDbg/yWTE8FVrBMwx8j3fKEFMn7P4W5NKaFjco5vOFn
xijnocPnK3fIIw3QyA+NRuYcRGDpjPvxzDyc2Yt8O7mM+g/ZcK2dnKEmfwPsQYmo
gn9A3OyKBsFEzODsl90KG2OC4ixYliX5WFWOpzaVtTbV7jPvSV5NVhke9HO5AB3l
svcZXXcov/Q6SUg0wpLI+TtrXTQpZM2FH+SeAVkylSmnkKBFpuNAnKNJ2Jt0j0Nd
wK4mriyrhtkm6cjIUA0B58LBwcNW4VzWbTpB0WawdmgIPA==
-----END CERTIFICATE-----
Generated at Sat Apr 19 00:41:11 2025 by rpki-client