Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363037373a3a2f34382d3438203d3e203136393039.roa
File: 326131343a373538343a363037373a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier: sX7QGKyhN7pUjUQBocImtn53csu2b2Oi/HuMs02qVEc=
Subject key identifier: 7A:27:7A:59:D5:0D:42:58:70:D5:4B:34:D1:95:3C:51:3B:CF:18:E8
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 7166717AC16418B2AAFDDE17B7A44375BF19BAF8
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363037373a3a2f34382d3438203d3e203136393039.roa
Signing time: Mon 10 Mar 2025 11:54:01 +0000
ROA not before: Mon 10 Mar 2025 11:49:01 +0000
ROA not after: Mon 09 Mar 2026 11:54:01 +0000
asID: 16909
IP address blocks: 2a14:7584:6077::/48 maxlen: 48
Validation: Failed, certificate revoked on Sun 16 Mar 2025 16:16:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
71:66:71:7a:c1:64:18:b2:aa:fd:de:17:b7:a4:43:75:bf:19:ba:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: Mar 10 11:49:01 2025 GMT
Not After : Mar 9 11:54:01 2026 GMT
Subject: CN=7A277A59D50D425870D54B34D1953C513BCF18E8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:30:b0:93:67:50:be:ae:e2:3a:03:b2:21:32:
05:7f:dc:f5:b8:94:af:87:28:df:04:0b:50:84:ce:
0b:e8:3a:08:1b:ae:d0:25:54:82:3a:15:d1:07:79:
28:6b:d7:bd:b8:8f:71:4b:01:c9:e1:b0:67:3b:7b:
d6:c7:8f:c5:83:a5:b5:76:2b:a4:bf:a0:58:fc:ad:
d3:19:c7:81:36:7f:99:77:4d:d0:9b:b6:9c:61:b0:
44:16:43:fc:57:29:42:05:46:de:ea:d0:ff:73:40:
b4:12:e6:75:cf:bf:68:6c:7b:73:f8:95:fe:7e:f1:
4c:e7:94:52:3b:8a:00:80:88:88:c5:f1:d1:8d:8a:
6d:ef:12:c5:14:40:a4:29:63:d9:ee:4a:ad:51:4c:
f9:e8:3d:fc:11:f9:d1:bf:37:ee:9b:8c:73:aa:8f:
59:a8:5e:bf:7c:da:45:8b:f8:cc:15:70:8e:39:e1:
c4:ee:f3:a3:b7:a0:53:5e:c3:1d:cb:61:7d:d9:55:
0d:29:f6:46:b0:52:05:6e:99:bd:56:5d:58:c0:41:
e2:b1:fd:d8:b3:8a:56:4f:ba:dc:32:33:bd:08:e4:
58:c1:c3:14:0c:fd:92:71:89:05:45:b2:da:7c:a4:
fc:f0:a0:b0:04:1a:eb:82:59:a0:2f:97:9c:8f:b7:
76:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:27:7A:59:D5:0D:42:58:70:D5:4B:34:D1:95:3C:51:3B:CF:18:E8
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363037373a3a2f34382d3438203d3e203136393039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:6077::/48
Signature Algorithm: sha256WithRSAEncryption
88:b0:4f:89:77:a0:03:7b:59:bb:8e:4a:07:48:00:3b:ec:28:
2f:f9:69:d0:c6:de:40:47:3b:75:f0:06:20:34:a4:b7:a5:ea:
4d:5d:e3:d1:35:11:46:97:ef:84:92:03:0b:3b:9f:12:70:2b:
3c:a1:c2:14:77:4b:c9:7e:09:0c:36:91:77:17:e8:24:ce:d2:
e5:20:b2:7b:a4:20:f0:0e:8c:d2:dc:cc:b8:ba:79:c3:33:3c:
fb:56:32:ca:ed:42:7a:a2:8d:60:ce:fb:ec:83:2c:89:34:d2:
8e:6c:06:d6:cb:f7:a5:20:8c:9c:36:38:f5:79:1e:ae:a1:d4:
91:f6:43:1c:72:21:ce:25:53:79:43:e9:08:3e:3d:46:24:52:
09:56:13:2b:18:68:41:26:0a:13:2e:9d:92:12:55:5d:d3:9b:
37:65:3a:a1:d1:88:cf:55:fa:e0:00:31:6b:84:b6:5e:ba:f6:
f6:ac:f9:e0:38:ec:0c:92:59:c7:0f:74:2c:f6:bd:a2:4b:1f:
ed:c5:e6:6a:c2:af:4e:b3:c1:74:5e:20:98:4b:ca:ea:d9:b0:
72:a4:05:dc:73:d2:cd:a4:8b:d6:db:6e:01:19:0e:16:51:e8:
07:bb:07:da:b0:4f:f8:e9:fb:00:55:b6:a0:ad:a9:b7:77:d0:
53:f6:da:4b
-----BEGIN CERTIFICATE-----
MIIFXjCCBEagAwIBAgIUcWZxesFkGLKq/d4Xt6RDdb8ZuvgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN0NCMjZGNzY0MkZENkI0Q0JGMzVGQkVFNDU1RjFFRkIw
QzlGMEE0NTAeFw0yNTAzMTAxMTQ5MDFaFw0yNjAzMDkxMTU0MDFaMDMxMTAvBgNV
BAMTKDdBMjc3QTU5RDUwRDQyNTg3MEQ1NEIzNEQxOTUzQzUxM0JDRjE4RTgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmMLCTZ1C+ruI6A7IhMgV/3PW4
lK+HKN8EC1CEzgvoOggbrtAlVII6FdEHeShr1724j3FLAcnhsGc7e9bHj8WDpbV2
K6S/oFj8rdMZx4E2f5l3TdCbtpxhsEQWQ/xXKUIFRt7q0P9zQLQS5nXPv2hse3P4
lf5+8UznlFI7igCAiIjF8dGNim3vEsUUQKQpY9nuSq1RTPnoPfwR+dG/N+6bjHOq
j1moXr982kWL+MwVcI454cTu86O3oFNewx3LYX3ZVQ0p9kawUgVumb1WXVjAQeKx
/dizilZPutwyM70I5FjBwxQM/ZJxiQVFstp8pPzwoLAEGuuCWaAvl5yPt3bvAgMB
AAGjggJoMIICZDAdBgNVHQ4EFgQUeid6WdUNQlhw1Us00ZU8UTvPGOgwHwYDVR0j
BBgwFoAUfLJvdkL9a0y/NfvuRV8e+wyfCkUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv
cnkvOGE4NDhhZGY5MmVlNGQ4NDAxOTNkZjQ1YTBlYTY2ODcvMS83Q0IyNkY3NjQy
RkQ2QjRDQkYzNUZCRUU0NTVGMUVGQjBDOUYwQTQ1LmNybDCBngYIKwYBBQUHAQEE
gZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5Lzg5MjcwZjZjLWEzZmUtNDI5OS1iMDc5LTMwOWVkOTdm
MzgyNC8wLzdDQjI2Rjc2NDJGRDZCNENCRjM1RkJFRTQ1NUYxRUZCMEM5RjBBNDUu
Y2VyMIGqBggrBgEFBQcBCwSBnTCBmjCBlwYIKwYBBQUHMAuGgYpyc3luYzovL3Jw
a2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY5MmVlNGQ4NDAxOTNk
ZjQ1YTBlYTY2ODcvMS8zMjYxMzEzNDNhMzczNTM4MzQzYTM2MzAzNzM3M2EzYTJm
MzQzODJkMzQzODIwM2QzZTIwMzEzNjM5MzAzOS5yb2EwGAYDVR0gAQH/BA4wDDAK
BggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoUdYRgdzAN
BgkqhkiG9w0BAQsFAAOCAQEAiLBPiXegA3tZu45KB0gAO+woL/lp0MbeQEc7dfAG
IDSkt6XqTV3j0TURRpfvhJIDCzufEnArPKHCFHdLyX4JDDaRdxfoJM7S5SCye6Qg
8A6M0tzMuLp5wzM8+1Yyyu1CeqKNYM777IMsiTTSjmwG1sv3pSCMnDY49XkerqHU
kfZDHHIhziVTeUPpCD49RiRSCVYTKxhoQSYKEy6dkhJVXdObN2U6odGIz1X64AAx
a4S2Xrr29qz54DjsDJJZxw90LPa9oksf7cXmasKvTrPBdF4gmEvK6tmwcqQF3HPS
zaSL1ttuARkOFlHoB7sH2rBP+On7AFW2oK2pt3fQU/baSw==
-----END CERTIFICATE-----
Generated at Sat Apr 19 00:42:11 2025 by rpki-client