Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363036623a3a2f34382d3438203d3e20343031353037.roa
File: 326131343a373538343a363036623a3a2f34382d3438203d3e20343031353037.roa (raw, json)
Hash identifier: lJtpaG325lOIsMFvrOhjzgu2NDlFOR9jqLbdU0PJV2Q=
Subject key identifier: 8C:71:07:9D:43:74:6E:A3:33:14:65:AA:42:AB:48:C7:90:DB:72:60
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 1D5672124302785CC626CBA3919CA1DAB99ED060
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363036623a3a2f34382d3438203d3e20343031353037.roa
Signing time: Mon 10 Mar 2025 11:53:32 +0000
ROA not before: Mon 10 Mar 2025 11:48:32 +0000
ROA not after: Mon 09 Mar 2026 11:53:32 +0000
asID: 401507
IP address blocks: 2a14:7584:606b::/48 maxlen: 48
Validation: Failed, certificate revoked on Sun 16 Mar 2025 16:17:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1d:56:72:12:43:02:78:5c:c6:26:cb:a3:91:9c:a1:da:b9:9e:d0:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: Mar 10 11:48:32 2025 GMT
Not After : Mar 9 11:53:32 2026 GMT
Subject: CN=8C71079D43746EA3331465AA42AB48C790DB7260
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:bb:79:f0:37:9f:ea:72:09:94:1f:a0:7b:a7:
23:94:a7:af:6c:27:67:59:a4:95:80:5f:7e:e5:20:
69:09:33:4d:d3:b5:f2:22:f9:73:f1:fa:e5:d4:69:
8b:45:cc:42:ac:d8:e4:aa:7b:d9:4a:94:12:80:93:
b0:b8:04:e6:bd:57:36:43:ed:4f:16:5b:e8:2b:63:
9b:3b:9e:ea:c7:57:f6:ce:d9:db:24:3e:14:61:32:
2f:85:84:cc:b0:ef:9f:ed:84:ec:8c:45:00:38:fe:
b1:9f:c1:2f:74:ec:9b:42:d4:42:e8:db:1b:11:c3:
12:40:19:a2:d7:65:e7:d9:58:72:fe:23:95:a5:73:
58:d6:3b:2d:ff:9b:d2:5f:3c:2f:bc:51:85:5c:38:
b3:95:bf:21:ad:da:24:61:e4:6c:51:48:00:91:83:
89:94:7f:45:2e:25:83:21:54:9a:ba:9c:9b:0f:01:
dd:72:70:12:41:83:33:57:02:34:51:86:d4:6b:db:
29:21:ad:1e:a0:13:cc:b4:55:e9:6e:91:b7:09:7a:
bb:9c:b8:af:b2:37:0c:a3:33:20:8b:a1:c4:78:14:
d9:04:90:e5:9c:3c:f9:ed:f4:4c:19:14:b3:3d:85:
2e:2e:2a:40:97:60:69:21:3d:e0:2a:1b:1c:0b:7b:
c8:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:71:07:9D:43:74:6E:A3:33:14:65:AA:42:AB:48:C7:90:DB:72:60
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363036623a3a2f34382d3438203d3e20343031353037.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:606b::/48
Signature Algorithm: sha256WithRSAEncryption
22:78:ec:56:a9:f6:b7:63:db:a8:83:a3:d7:d3:7b:90:73:fb:
70:c5:79:2c:64:da:e9:87:68:c9:6b:bd:bb:f1:d1:bb:03:2f:
d2:b0:04:51:f1:65:b1:0d:49:a1:08:b7:97:92:2c:92:c0:b9:
ef:f7:99:8c:f7:81:7c:b4:2e:f1:38:85:1e:ba:b1:91:9d:6b:
0d:3f:dc:18:70:06:cd:fa:ec:10:06:96:1d:e7:8f:e2:0b:bd:
e1:4d:90:49:01:c5:cc:41:d8:fd:34:96:9d:f7:88:19:8e:23:
82:d3:98:5a:36:52:6b:4c:4f:5c:e3:40:99:3d:d5:f7:18:ba:
a7:b1:d3:cb:08:9a:01:c7:34:c0:ee:c8:0e:d6:85:47:ad:bd:
18:3b:9c:5e:7d:15:7f:4f:e6:91:17:dd:6b:7c:d3:f7:c3:2f:
ea:12:f9:de:17:9d:1d:d2:08:91:6e:7e:a7:01:0c:4e:61:69:
90:09:4a:d1:26:4d:e8:c8:47:87:a0:45:66:ed:38:48:66:ad:
ac:31:cc:fe:7b:4c:28:b2:2b:7a:d5:52:15:ad:a4:ab:73:e5:
2d:6f:1e:fc:69:2c:48:26:37:82:f8:2f:5f:a3:31:12:b2:c2:
bd:0f:e5:85:da:58:06:ef:2c:ab:0b:46:5a:8a:f6:e2:f9:2a:
79:30:c5:d4
-----BEGIN CERTIFICATE-----
MIIFYDCCBEigAwIBAgIUHVZyEkMCeFzGJsujkZyh2rme0GAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN0NCMjZGNzY0MkZENkI0Q0JGMzVGQkVFNDU1RjFFRkIw
QzlGMEE0NTAeFw0yNTAzMTAxMTQ4MzJaFw0yNjAzMDkxMTUzMzJaMDMxMTAvBgNV
BAMTKDhDNzEwNzlENDM3NDZFQTMzMzE0NjVBQTQyQUI0OEM3OTBEQjcyNjAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCZu3nwN5/qcgmUH6B7pyOUp69s
J2dZpJWAX37lIGkJM03TtfIi+XPx+uXUaYtFzEKs2OSqe9lKlBKAk7C4BOa9VzZD
7U8WW+grY5s7nurHV/bO2dskPhRhMi+FhMyw75/thOyMRQA4/rGfwS907JtC1ELo
2xsRwxJAGaLXZefZWHL+I5Wlc1jWOy3/m9JfPC+8UYVcOLOVvyGt2iRh5GxRSACR
g4mUf0UuJYMhVJq6nJsPAd1ycBJBgzNXAjRRhtRr2ykhrR6gE8y0VelukbcJeruc
uK+yNwyjMyCLocR4FNkEkOWcPPnt9EwZFLM9hS4uKkCXYGkhPeAqGxwLe8jHAgMB
AAGjggJqMIICZjAdBgNVHQ4EFgQUjHEHnUN0bqMzFGWqQqtIx5DbcmAwHwYDVR0j
BBgwFoAUfLJvdkL9a0y/NfvuRV8e+wyfCkUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv
cnkvOGE4NDhhZGY5MmVlNGQ4NDAxOTNkZjQ1YTBlYTY2ODcvMS83Q0IyNkY3NjQy
RkQ2QjRDQkYzNUZCRUU0NTVGMUVGQjBDOUYwQTQ1LmNybDCBngYIKwYBBQUHAQEE
gZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5Lzg5MjcwZjZjLWEzZmUtNDI5OS1iMDc5LTMwOWVkOTdm
MzgyNC8wLzdDQjI2Rjc2NDJGRDZCNENCRjM1RkJFRTQ1NUYxRUZCMEM5RjBBNDUu
Y2VyMIGsBggrBgEFBQcBCwSBnzCBnDCBmQYIKwYBBQUHMAuGgYxyc3luYzovL3Jw
a2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY5MmVlNGQ4NDAxOTNk
ZjQ1YTBlYTY2ODcvMS8zMjYxMzEzNDNhMzczNTM4MzQzYTM2MzAzNjYyM2EzYTJm
MzQzODJkMzQzODIwM2QzZTIwMzQzMDMxMzUzMDM3LnJvYTAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKhR1hGBr
MA0GCSqGSIb3DQEBCwUAA4IBAQAieOxWqfa3Y9uog6PX03uQc/twxXksZNrph2jJ
a7278dG7Ay/SsARR8WWxDUmhCLeXkiySwLnv95mM94F8tC7xOIUeurGRnWsNP9wY
cAbN+uwQBpYd54/iC73hTZBJAcXMQdj9NJad94gZjiOC05haNlJrTE9c40CZPdX3
GLqnsdPLCJoBxzTA7sgO1oVHrb0YO5xefRV/T+aRF91rfNP3wy/qEvneF50d0giR
bn6nAQxOYWmQCUrRJk3oyEeHoEVm7ThIZq2sMcz+e0wosit61VIVraSrc+Utbx78
aSxIJjeC+C9fozESssK9D+WF2lgG7yyrC0Zaivbi+Sp5MMXU
-----END CERTIFICATE-----
Generated at Sat Apr 19 00:40:24 2025 by rpki-client