Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363035363a3a2f34382d3438203d3e203136393039.roa
File: 326131343a373538343a363035363a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier: 5pU8vlvopC/woOSZ+PzzsXjVaV4HG2Px3www827zcQI=
Subject key identifier: 27:76:EA:BA:FA:55:15:39:92:79:3F:B9:F1:3B:86:1A:68:21:41:BC
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 68C63CF07A714797FF9D9CD3B96055EA105BDBF8
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363035363a3a2f34382d3438203d3e203136393039.roa
Signing time: Sun 02 Mar 2025 15:26:47 +0000
ROA not before: Sun 02 Mar 2025 15:21:47 +0000
ROA not after: Sun 01 Mar 2026 15:26:47 +0000
asID: 16909
IP address blocks: 2a14:7584:6056::/48 maxlen: 48
Validation: Failed, certificate revoked on Mon 10 Mar 2025 12:11:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
68:c6:3c:f0:7a:71:47:97:ff:9d:9c:d3:b9:60:55:ea:10:5b:db:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: Mar 2 15:21:47 2025 GMT
Not After : Mar 1 15:26:47 2026 GMT
Subject: CN=2776EABAFA55153992793FB9F13B861A682141BC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:9a:22:fa:de:8b:d5:80:58:2d:85:e3:44:b5:
a2:43:5e:18:53:94:36:90:c6:80:c5:5a:38:14:90:
ba:05:c2:3f:33:a1:8d:0a:1d:0b:4b:b5:85:86:6a:
e7:a6:ad:64:70:54:96:74:80:1c:6d:b9:4c:7c:42:
2d:6f:0d:8f:65:f2:30:d7:02:02:5b:d3:2b:df:f8:
41:6e:e2:85:2a:b5:0e:58:6f:34:5e:fa:d8:2a:be:
b8:33:a1:c1:db:6e:13:9f:1c:d9:29:de:1e:07:97:
e7:ca:b5:aa:55:7f:bb:85:77:7f:2a:27:e8:9c:e1:
04:b2:b1:69:ee:6b:ab:d3:70:3f:12:6f:1e:17:eb:
3d:db:83:8a:ed:fd:3d:f5:5e:ea:a8:03:4e:07:7e:
22:07:c0:9d:08:22:a9:18:8f:cd:b3:cb:f8:0e:58:
a1:d6:6e:34:a8:54:45:c3:51:b0:e3:a5:3d:8f:ca:
91:3a:a4:49:f6:da:f7:1c:0a:b0:a0:80:07:65:ce:
db:10:df:27:6e:40:5c:29:c3:8e:ce:eb:18:23:3b:
c3:e0:d2:b3:8c:8d:b1:a8:f6:42:56:79:dc:39:8f:
99:c5:0f:ec:a2:b3:33:30:a3:db:51:0a:f6:54:bf:
e5:b8:07:32:4a:d2:06:90:a9:04:93:68:97:06:5d:
0e:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:76:EA:BA:FA:55:15:39:92:79:3F:B9:F1:3B:86:1A:68:21:41:BC
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363035363a3a2f34382d3438203d3e203136393039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:6056::/48
Signature Algorithm: sha256WithRSAEncryption
a8:ca:cc:c4:2b:8c:ed:16:ae:10:05:fb:23:91:f5:1c:ff:20:
65:8b:3c:be:33:dd:2b:6d:9b:d0:6e:e7:74:1f:1f:d5:5f:51:
ef:7c:b1:9d:d4:37:eb:92:99:3b:07:8f:64:03:3b:94:55:06:
74:5a:d2:3c:5c:d7:b8:20:b3:81:08:ba:60:25:41:13:86:35:
91:84:a9:93:57:f3:7b:a2:d5:8b:d8:a9:1a:42:87:76:f3:c6:
e7:e0:45:da:8b:b0:18:60:bc:ff:e1:23:68:51:f0:81:ad:d4:
4e:6f:35:75:4f:1f:fa:f9:0d:e2:bf:41:93:2e:56:b3:29:a5:
9b:22:a9:45:a8:24:63:5e:1e:4c:d1:c5:a7:f5:72:f1:33:ee:
7f:d6:41:11:c7:80:38:26:51:de:2b:20:4f:f8:94:13:b6:19:
5a:74:7e:65:cf:f1:06:5c:f9:48:e9:22:00:1e:79:28:3e:99:
fd:f1:01:27:5e:9d:b5:33:46:14:a6:b5:55:45:37:b5:a5:74:
7b:9e:28:20:da:45:34:73:ba:88:ea:97:fb:a4:13:15:c4:79:
5e:6b:8e:dd:c1:d9:c7:d5:74:c0:6a:f2:3e:42:24:ac:07:c6:
1a:c1:51:48:c9:f0:a2:6b:e8:70:69:a7:47:4a:5c:61:52:0b:
de:43:90:2d
-----BEGIN CERTIFICATE-----
MIIFXjCCBEagAwIBAgIUaMY88HpxR5f/nZzTuWBV6hBb2/gwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN0NCMjZGNzY0MkZENkI0Q0JGMzVGQkVFNDU1RjFFRkIw
QzlGMEE0NTAeFw0yNTAzMDIxNTIxNDdaFw0yNjAzMDExNTI2NDdaMDMxMTAvBgNV
BAMTKDI3NzZFQUJBRkE1NTE1Mzk5Mjc5M0ZCOUYxM0I4NjFBNjgyMTQxQkMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKmiL63ovVgFgtheNEtaJDXhhT
lDaQxoDFWjgUkLoFwj8zoY0KHQtLtYWGauemrWRwVJZ0gBxtuUx8Qi1vDY9l8jDX
AgJb0yvf+EFu4oUqtQ5YbzRe+tgqvrgzocHbbhOfHNkp3h4Hl+fKtapVf7uFd38q
J+ic4QSysWnua6vTcD8Sbx4X6z3bg4rt/T31XuqoA04HfiIHwJ0IIqkYj82zy/gO
WKHWbjSoVEXDUbDjpT2PypE6pEn22vccCrCggAdlztsQ3yduQFwpw47O6xgjO8Pg
0rOMjbGo9kJWedw5j5nFD+yiszMwo9tRCvZUv+W4BzJK0gaQqQSTaJcGXQ6pAgMB
AAGjggJoMIICZDAdBgNVHQ4EFgQUJ3bquvpVFTmSeT+58TuGGmghQbwwHwYDVR0j
BBgwFoAUfLJvdkL9a0y/NfvuRV8e+wyfCkUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv
cnkvOGE4NDhhZGY5MmVlNGQ4NDAxOTNkZjQ1YTBlYTY2ODcvMS83Q0IyNkY3NjQy
RkQ2QjRDQkYzNUZCRUU0NTVGMUVGQjBDOUYwQTQ1LmNybDCBngYIKwYBBQUHAQEE
gZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5Lzg5MjcwZjZjLWEzZmUtNDI5OS1iMDc5LTMwOWVkOTdm
MzgyNC8wLzdDQjI2Rjc2NDJGRDZCNENCRjM1RkJFRTQ1NUYxRUZCMEM5RjBBNDUu
Y2VyMIGqBggrBgEFBQcBCwSBnTCBmjCBlwYIKwYBBQUHMAuGgYpyc3luYzovL3Jw
a2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY5MmVlNGQ4NDAxOTNk
ZjQ1YTBlYTY2ODcvMS8zMjYxMzEzNDNhMzczNTM4MzQzYTM2MzAzNTM2M2EzYTJm
MzQzODJkMzQzODIwM2QzZTIwMzEzNjM5MzAzOS5yb2EwGAYDVR0gAQH/BA4wDDAK
BggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoUdYRgVjAN
BgkqhkiG9w0BAQsFAAOCAQEAqMrMxCuM7RauEAX7I5H1HP8gZYs8vjPdK22b0G7n
dB8f1V9R73yxndQ365KZOwePZAM7lFUGdFrSPFzXuCCzgQi6YCVBE4Y1kYSpk1fz
e6LVi9ipGkKHdvPG5+BF2ouwGGC8/+EjaFHwga3UTm81dU8f+vkN4r9Bky5Wsyml
myKpRagkY14eTNHFp/Vy8TPuf9ZBEceAOCZR3isgT/iUE7YZWnR+Zc/xBlz5SOki
AB55KD6Z/fEBJ16dtTNGFKa1VUU3taV0e54oINpFNHO6iOqX+6QTFcR5XmuO3cHZ
x9V0wGryPkIkrAfGGsFRSMnwomvocGmnR0pcYVIL3kOQLQ==
-----END CERTIFICATE-----
Generated at Sat Apr 19 00:47:17 2025 by rpki-client