Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363036633a3a2f34382d3438203d3e20343031353037.roa
File: 326131343a373538343a363036633a3a2f34382d3438203d3e20343031353037.roa (raw, json)
Hash identifier: xRwlPEprVbo430oHLLZNvW+LZV8KhZGWlY7p325STRM=
Subject key identifier: EF:ED:43:BF:E9:CA:99:A6:90:0E:CE:98:FA:E2:6E:98:65:67:A1:8C
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 2F66304707DB6DB21BE0EF3D66BD8E625F7200D8
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363036633a3a2f34382d3438203d3e20343031353037.roa
Signing time: Mon 10 Mar 2025 11:53:32 +0000
ROA not before: Mon 10 Mar 2025 11:48:32 +0000
ROA not after: Mon 09 Mar 2026 11:53:32 +0000
asID: 401507
IP address blocks: 2a14:7584:606c::/48 maxlen: 48
Validation: Failed, certificate revoked on Sun 16 Mar 2025 16:17:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2f:66:30:47:07:db:6d:b2:1b:e0:ef:3d:66:bd:8e:62:5f:72:00:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: Mar 10 11:48:32 2025 GMT
Not After : Mar 9 11:53:32 2026 GMT
Subject: CN=EFED43BFE9CA99A6900ECE98FAE26E986567A18C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:4f:16:6a:ae:5d:be:d5:10:86:a9:98:00:27:
88:8a:07:a6:f9:58:6b:d2:5c:04:50:cf:43:96:71:
91:a7:66:63:f7:95:fa:5e:d4:52:33:fe:a9:57:9e:
7a:00:ef:e7:d8:40:a8:30:f0:2c:20:13:27:97:07:
3f:64:81:72:f4:21:25:3f:3a:7b:62:22:ec:54:fe:
71:12:a2:23:6d:0f:0d:b1:8b:ea:9e:88:ca:65:57:
d6:4a:4d:f3:d0:b0:f0:2b:32:48:d7:dd:3d:12:d9:
02:9a:0f:06:b5:c4:72:df:54:f1:54:08:51:3b:a6:
38:d6:08:2c:1c:53:47:32:37:79:9a:77:12:f1:82:
0d:b1:f6:de:ae:2a:72:e6:f7:1d:32:11:40:b8:3f:
a4:d4:18:59:ab:d2:2c:19:15:6b:43:7e:4a:a9:87:
6f:e0:7d:65:84:05:1e:7f:54:72:97:3c:64:8d:94:
3f:47:55:60:21:b2:6f:d3:9e:dd:75:3b:8c:31:6f:
20:a4:8e:a8:70:54:c3:85:56:9c:34:62:1d:e5:cc:
58:98:8b:60:d4:e7:0e:70:64:6e:e7:c6:3a:0f:3d:
b5:68:60:66:06:87:de:4a:e1:96:65:15:27:f4:e2:
ec:72:b1:4c:b5:a9:74:c1:1f:dc:a5:c9:ba:cb:90:
d0:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:ED:43:BF:E9:CA:99:A6:90:0E:CE:98:FA:E2:6E:98:65:67:A1:8C
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363036633a3a2f34382d3438203d3e20343031353037.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:606c::/48
Signature Algorithm: sha256WithRSAEncryption
a1:fa:ca:c4:36:8a:6c:70:30:26:f8:b4:c8:e4:e3:dd:c6:d8:
9d:94:ab:a6:db:7e:f9:a3:b6:b5:b2:54:43:f5:f1:6e:6d:4e:
8e:65:bb:91:c4:22:1e:cd:e5:51:f2:24:59:88:9e:2a:a8:8a:
6b:c3:9c:ed:fa:89:63:97:3f:dc:6d:1e:bf:41:01:74:22:ab:
b3:75:3f:62:fb:fa:25:bf:77:82:d2:47:9a:74:7f:46:c7:68:
74:15:7e:c1:03:5c:c9:43:2a:c9:55:84:26:ab:d6:97:84:2a:
59:59:05:0f:65:70:a9:27:24:2e:d8:d5:52:91:e4:e3:55:5d:
6f:84:2a:79:79:ca:dc:ee:0e:0a:e5:c8:a2:0a:76:2c:d5:11:
9c:2d:9d:cb:b1:c1:9f:48:ab:f8:fc:8f:11:b1:bb:53:ca:30:
c4:46:b3:8a:34:df:0c:22:2e:44:6e:c1:8f:33:d8:ab:5e:4d:
8c:ab:49:99:75:32:3d:53:03:4c:dd:c9:91:a6:dc:a6:f0:e3:
a3:a5:07:5f:8c:66:e1:07:4b:53:0b:1c:82:45:f2:71:49:d0:
a1:fd:c3:98:c6:b5:b2:68:c8:35:b6:05:cb:25:0c:06:22:dc:
ff:f3:6f:f5:0a:21:95:5d:31:9a:0c:b8:d5:82:7d:09:83:7f:
8a:26:3d:8a
-----BEGIN CERTIFICATE-----
MIIFYDCCBEigAwIBAgIUL2YwRwfbbbIb4O89Zr2OYl9yANgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN0NCMjZGNzY0MkZENkI0Q0JGMzVGQkVFNDU1RjFFRkIw
QzlGMEE0NTAeFw0yNTAzMTAxMTQ4MzJaFw0yNjAzMDkxMTUzMzJaMDMxMTAvBgNV
BAMTKEVGRUQ0M0JGRTlDQTk5QTY5MDBFQ0U5OEZBRTI2RTk4NjU2N0ExOEMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBTxZqrl2+1RCGqZgAJ4iKB6b5
WGvSXARQz0OWcZGnZmP3lfpe1FIz/qlXnnoA7+fYQKgw8CwgEyeXBz9kgXL0ISU/
OntiIuxU/nESoiNtDw2xi+qeiMplV9ZKTfPQsPArMkjX3T0S2QKaDwa1xHLfVPFU
CFE7pjjWCCwcU0cyN3madxLxgg2x9t6uKnLm9x0yEUC4P6TUGFmr0iwZFWtDfkqp
h2/gfWWEBR5/VHKXPGSNlD9HVWAhsm/Tnt11O4wxbyCkjqhwVMOFVpw0Yh3lzFiY
i2DU5w5wZG7nxjoPPbVoYGYGh95K4ZZlFSf04uxysUy1qXTBH9ylybrLkNAvAgMB
AAGjggJqMIICZjAdBgNVHQ4EFgQU7+1Dv+nKmaaQDs6Y+uJumGVnoYwwHwYDVR0j
BBgwFoAUfLJvdkL9a0y/NfvuRV8e+wyfCkUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv
cnkvOGE4NDhhZGY5MmVlNGQ4NDAxOTNkZjQ1YTBlYTY2ODcvMS83Q0IyNkY3NjQy
RkQ2QjRDQkYzNUZCRUU0NTVGMUVGQjBDOUYwQTQ1LmNybDCBngYIKwYBBQUHAQEE
gZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5Lzg5MjcwZjZjLWEzZmUtNDI5OS1iMDc5LTMwOWVkOTdm
MzgyNC8wLzdDQjI2Rjc2NDJGRDZCNENCRjM1RkJFRTQ1NUYxRUZCMEM5RjBBNDUu
Y2VyMIGsBggrBgEFBQcBCwSBnzCBnDCBmQYIKwYBBQUHMAuGgYxyc3luYzovL3Jw
a2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY5MmVlNGQ4NDAxOTNk
ZjQ1YTBlYTY2ODcvMS8zMjYxMzEzNDNhMzczNTM4MzQzYTM2MzAzNjYzM2EzYTJm
MzQzODJkMzQzODIwM2QzZTIwMzQzMDMxMzUzMDM3LnJvYTAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKhR1hGBs
MA0GCSqGSIb3DQEBCwUAA4IBAQCh+srENopscDAm+LTI5OPdxtidlKum2375o7a1
slRD9fFubU6OZbuRxCIezeVR8iRZiJ4qqIprw5zt+oljlz/cbR6/QQF0IquzdT9i
+/olv3eC0keadH9Gx2h0FX7BA1zJQyrJVYQmq9aXhCpZWQUPZXCpJyQu2NVSkeTj
VV1vhCp5ecrc7g4K5ciiCnYs1RGcLZ3LscGfSKv4/I8RsbtTyjDERrOKNN8MIi5E
bsGPM9irXk2Mq0mZdTI9UwNM3cmRptym8OOjpQdfjGbhB0tTCxyCRfJxSdCh/cOY
xrWyaMg1tgXLJQwGItz/82/1CiGVXTGaDLjVgn0Jg3+KJj2K
-----END CERTIFICATE-----
Generated at Sat Apr 19 00:39:11 2025 by rpki-client