Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363036373a3a2f34382d3438203d3e203136393039.roa
File: 326131343a373538343a363036373a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier: C5GDLHz09ZQ+ZyxOT3HP/VM2gk2KW24kKlZDFzG3WhQ=
Subject key identifier: E0:FF:5C:18:6D:A3:19:43:5F:47:38:46:27:57:7B:90:2D:9A:2E:ED
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 4C4F9124E55261B80390B6228D42E6A37B8730DE
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363036373a3a2f34382d3438203d3e203136393039.roa
Signing time: Sun 02 Mar 2025 15:27:31 +0000
ROA not before: Sun 02 Mar 2025 15:22:31 +0000
ROA not after: Sun 01 Mar 2026 15:27:31 +0000
asID: 16909
IP address blocks: 2a14:7584:6067::/48 maxlen: 48
Validation: Failed, certificate revoked on Sun 16 Mar 2025 16:16:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4c:4f:91:24:e5:52:61:b8:03:90:b6:22:8d:42:e6:a3:7b:87:30:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: Mar 2 15:22:31 2025 GMT
Not After : Mar 1 15:27:31 2026 GMT
Subject: CN=E0FF5C186DA319435F47384627577B902D9A2EED
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:fa:4a:a6:69:95:8c:8f:e2:b7:fb:41:be:f4:
75:f2:3f:66:27:74:37:a0:ce:82:0b:fb:df:73:97:
42:50:aa:7a:cf:76:00:31:9e:c9:d3:28:2e:3c:e8:
53:f0:da:55:49:c1:bd:e6:12:77:a6:dd:f9:4d:6d:
8c:96:dd:3d:fc:2c:fe:57:56:66:40:7b:8e:96:53:
5a:08:cb:a7:ab:41:07:f2:af:c8:8c:1c:88:17:94:
8d:34:e4:a1:c6:0f:a2:c7:23:82:b9:a8:4e:35:e4:
a4:d9:0b:72:bf:cf:6a:87:41:d6:62:16:77:fd:3e:
de:9f:b2:c6:1a:1f:14:70:2e:17:5f:ec:9b:8a:3f:
72:61:1b:72:90:28:db:16:54:fb:45:ee:2d:ea:81:
9d:8e:5b:e6:47:78:bd:81:39:a5:16:63:39:ff:a7:
00:2e:d9:51:6e:34:76:ef:41:3d:e2:5f:5e:07:62:
a1:33:16:4a:8d:b2:72:48:0e:be:d7:c9:30:18:66:
7a:03:bc:0f:e0:31:fb:78:36:38:74:b2:ac:09:1a:
fa:8f:cc:42:af:be:ca:59:ae:f7:fe:e9:82:e5:e8:
97:e8:18:f3:d4:fa:63:96:80:09:c7:c9:28:eb:d8:
e4:58:be:86:59:78:65:f0:14:b7:95:ae:07:48:cd:
eb:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:FF:5C:18:6D:A3:19:43:5F:47:38:46:27:57:7B:90:2D:9A:2E:ED
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363036373a3a2f34382d3438203d3e203136393039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:6067::/48
Signature Algorithm: sha256WithRSAEncryption
5c:9d:e5:15:75:67:54:3c:82:de:59:08:2f:6b:8a:f1:be:ea:
32:a3:5d:a5:ca:2c:84:cc:8a:6e:8a:16:fc:eb:53:cf:4c:c1:
1a:b5:f3:fa:66:de:9d:67:8d:20:3d:89:35:39:33:a5:c6:15:
d7:fb:80:2b:12:00:ee:17:0e:56:8c:70:79:e3:ab:0c:9f:65:
c1:bc:6c:75:79:97:94:b5:d5:94:50:47:11:66:13:e8:78:69:
ee:43:36:7b:e1:0d:35:cf:08:5f:e4:ae:45:55:8d:f3:70:e5:
fd:3a:9e:ca:73:62:41:fa:5e:2c:bd:97:60:75:0f:14:0f:3f:
49:1c:fa:da:30:12:96:f9:f2:27:8b:14:7b:c6:74:3d:82:2a:
ce:62:55:8a:48:b3:ab:6d:0f:40:d3:d6:ef:78:43:68:f0:a7:
9e:60:ff:30:ba:5b:90:3e:2d:71:84:4c:d1:d8:c5:0b:ab:e8:
0e:91:68:9b:b4:eb:b6:71:86:ed:e0:2e:07:16:41:34:db:b9:
fc:c2:df:50:4e:b6:cb:78:f4:b2:2a:16:64:9c:53:7c:54:17:
13:a4:88:20:48:39:37:0b:1e:fc:ee:aa:6a:21:79:e6:4b:aa:
39:23:de:9e:56:55:e9:a7:fc:c7:85:27:14:ec:b7:bc:b7:13:
c8:ab:a7:ce
-----BEGIN CERTIFICATE-----
MIIFXjCCBEagAwIBAgIUTE+RJOVSYbgDkLYijULmo3uHMN4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN0NCMjZGNzY0MkZENkI0Q0JGMzVGQkVFNDU1RjFFRkIw
QzlGMEE0NTAeFw0yNTAzMDIxNTIyMzFaFw0yNjAzMDExNTI3MzFaMDMxMTAvBgNV
BAMTKEUwRkY1QzE4NkRBMzE5NDM1RjQ3Mzg0NjI3NTc3QjkwMkQ5QTJFRUQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCI+kqmaZWMj+K3+0G+9HXyP2Yn
dDegzoIL+99zl0JQqnrPdgAxnsnTKC486FPw2lVJwb3mEnem3flNbYyW3T38LP5X
VmZAe46WU1oIy6erQQfyr8iMHIgXlI005KHGD6LHI4K5qE415KTZC3K/z2qHQdZi
Fnf9Pt6fssYaHxRwLhdf7JuKP3JhG3KQKNsWVPtF7i3qgZ2OW+ZHeL2BOaUWYzn/
pwAu2VFuNHbvQT3iX14HYqEzFkqNsnJIDr7XyTAYZnoDvA/gMft4Njh0sqwJGvqP
zEKvvspZrvf+6YLl6JfoGPPU+mOWgAnHySjr2ORYvoZZeGXwFLeVrgdIzetvAgMB
AAGjggJoMIICZDAdBgNVHQ4EFgQU4P9cGG2jGUNfRzhGJ1d7kC2aLu0wHwYDVR0j
BBgwFoAUfLJvdkL9a0y/NfvuRV8e+wyfCkUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv
cnkvOGE4NDhhZGY5MmVlNGQ4NDAxOTNkZjQ1YTBlYTY2ODcvMS83Q0IyNkY3NjQy
RkQ2QjRDQkYzNUZCRUU0NTVGMUVGQjBDOUYwQTQ1LmNybDCBngYIKwYBBQUHAQEE
gZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5Lzg5MjcwZjZjLWEzZmUtNDI5OS1iMDc5LTMwOWVkOTdm
MzgyNC8wLzdDQjI2Rjc2NDJGRDZCNENCRjM1RkJFRTQ1NUYxRUZCMEM5RjBBNDUu
Y2VyMIGqBggrBgEFBQcBCwSBnTCBmjCBlwYIKwYBBQUHMAuGgYpyc3luYzovL3Jw
a2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY5MmVlNGQ4NDAxOTNk
ZjQ1YTBlYTY2ODcvMS8zMjYxMzEzNDNhMzczNTM4MzQzYTM2MzAzNjM3M2EzYTJm
MzQzODJkMzQzODIwM2QzZTIwMzEzNjM5MzAzOS5yb2EwGAYDVR0gAQH/BA4wDDAK
BggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoUdYRgZzAN
BgkqhkiG9w0BAQsFAAOCAQEAXJ3lFXVnVDyC3lkIL2uK8b7qMqNdpcoshMyKbooW
/OtTz0zBGrXz+mbenWeNID2JNTkzpcYV1/uAKxIA7hcOVoxweeOrDJ9lwbxsdXmX
lLXVlFBHEWYT6Hhp7kM2e+ENNc8IX+SuRVWN83Dl/TqeynNiQfpeLL2XYHUPFA8/
SRz62jASlvnyJ4sUe8Z0PYIqzmJVikizq20PQNPW73hDaPCnnmD/MLpbkD4tcYRM
0djFC6voDpFom7TrtnGG7eAuBxZBNNu5/MLfUE62y3j0sioWZJxTfFQXE6SIIEg5
Nwse/O6qaiF55kuqOSPenlZV6af8x4UnFOy3vLcTyKunzg==
-----END CERTIFICATE-----
Generated at Sat Apr 19 00:42:27 2025 by rpki-client