Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363037643a3a2f34382d3438203d3e203136393039.roa
File: 326131343a373538343a363037643a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier: aSW/NdJceSIQZcTIud6YDBzYLFDfOx1dKRz1122983I=
Subject key identifier: CB:6E:0E:EF:97:2A:61:73:15:09:50:DB:4A:CD:31:20:B6:3C:4A:B5
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 7C96487BD96017339B1C2B0EA4DD674CDB5965FD
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363037643a3a2f34382d3438203d3e203136393039.roa
Signing time: Mon 10 Mar 2025 11:54:37 +0000
ROA not before: Mon 10 Mar 2025 11:49:37 +0000
ROA not after: Mon 09 Mar 2026 11:54:37 +0000
asID: 16909
IP address blocks: 2a14:7584:607d::/48 maxlen: 48
Validation: Failed, certificate revoked on Sun 16 Mar 2025 16:16:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7c:96:48:7b:d9:60:17:33:9b:1c:2b:0e:a4:dd:67:4c:db:59:65:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: Mar 10 11:49:37 2025 GMT
Not After : Mar 9 11:54:37 2026 GMT
Subject: CN=CB6E0EEF972A6173150950DB4ACD3120B63C4AB5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:49:11:87:d5:df:ba:71:7b:15:dc:da:04:16:
93:ed:4a:e9:f3:70:3f:74:ca:bf:1b:f7:0c:ce:c1:
4b:49:2e:e9:55:4d:ed:38:71:ac:eb:31:f7:82:e3:
30:2f:ac:96:69:27:b9:20:84:2f:65:24:1e:56:ef:
20:55:43:a7:24:ab:19:4e:ac:32:b3:f5:a8:c9:b8:
da:4f:d0:ab:61:1c:1c:ff:9d:7f:bb:c2:64:5d:4f:
61:15:37:82:3c:6f:37:e0:75:fe:c3:8f:a9:1e:ba:
32:3a:48:7a:79:a4:25:03:87:d2:a1:86:53:2f:f4:
24:72:41:91:6b:20:76:00:c4:58:64:51:3e:f1:35:
7c:02:df:db:c9:27:05:4a:99:11:30:2f:2a:90:4e:
77:b4:00:1b:cd:2d:70:1b:9c:de:2f:5f:c2:7f:98:
3a:92:91:cb:cf:23:9e:89:9b:c0:7f:c6:71:47:26:
da:bb:a8:20:7c:04:14:3c:b5:7c:e9:56:56:4f:74:
b2:17:18:c4:8c:3d:91:9b:12:b6:de:12:0e:7d:1e:
c5:36:78:a9:17:68:da:2c:e6:8b:42:ba:16:e7:34:
4f:54:1d:66:ec:b4:72:7e:94:06:2c:0c:a0:64:66:
16:eb:a4:0c:d4:5e:59:5c:c7:a4:64:60:3e:3b:96:
c4:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:6E:0E:EF:97:2A:61:73:15:09:50:DB:4A:CD:31:20:B6:3C:4A:B5
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363037643a3a2f34382d3438203d3e203136393039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:607d::/48
Signature Algorithm: sha256WithRSAEncryption
87:18:ca:dc:06:5d:2e:84:45:9a:39:9d:9d:9a:55:76:4a:97:
48:a0:80:1b:16:b9:fa:42:d9:ac:76:2f:fc:d7:12:e3:97:8f:
e5:47:f1:23:dd:04:bb:dc:b6:b3:b8:4b:25:69:fd:b0:d5:4b:
1f:2f:65:57:ca:d2:be:5d:c6:e2:6c:65:ec:b1:30:b7:0c:51:
97:ca:b2:60:95:e2:e4:73:38:85:7f:a2:5f:8b:23:6b:92:de:
fc:65:e3:fe:10:44:82:13:bf:28:28:71:c3:e1:f8:ec:13:83:
b3:e6:0d:6d:6e:b4:7c:64:3b:58:dd:ff:4e:b4:f8:e6:b3:a7:
97:d6:6b:cd:21:df:e5:98:74:7f:67:fa:ff:1f:a3:48:8c:2c:
82:46:ab:15:f7:76:68:d2:9d:b3:d9:1d:6c:b6:97:b0:fe:f0:
38:9d:9a:30:a9:e5:92:57:bc:77:9d:56:63:30:77:e6:3a:37:
d4:a6:a0:d5:27:39:62:e0:f5:b8:7b:91:2f:c6:ad:c5:77:7b:
bf:1a:8d:48:e1:7c:2f:00:d5:d4:18:c9:68:92:f0:49:b1:e2:
7a:b4:a7:a6:6a:bd:90:94:09:bb:e4:06:b1:bd:88:24:17:13:
4c:84:c7:7c:53:a8:df:60:e9:f5:74:46:49:1d:bc:4f:45:47:
e3:b0:22:5e
-----BEGIN CERTIFICATE-----
MIIFXjCCBEagAwIBAgIUfJZIe9lgFzObHCsOpN1nTNtZZf0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN0NCMjZGNzY0MkZENkI0Q0JGMzVGQkVFNDU1RjFFRkIw
QzlGMEE0NTAeFw0yNTAzMTAxMTQ5MzdaFw0yNjAzMDkxMTU0MzdaMDMxMTAvBgNV
BAMTKENCNkUwRUVGOTcyQTYxNzMxNTA5NTBEQjRBQ0QzMTIwQjYzQzRBQjUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDYSRGH1d+6cXsV3NoEFpPtSunz
cD90yr8b9wzOwUtJLulVTe04cazrMfeC4zAvrJZpJ7kghC9lJB5W7yBVQ6ckqxlO
rDKz9ajJuNpP0KthHBz/nX+7wmRdT2EVN4I8bzfgdf7Dj6keujI6SHp5pCUDh9Kh
hlMv9CRyQZFrIHYAxFhkUT7xNXwC39vJJwVKmREwLyqQTne0ABvNLXAbnN4vX8J/
mDqSkcvPI56Jm8B/xnFHJtq7qCB8BBQ8tXzpVlZPdLIXGMSMPZGbErbeEg59HsU2
eKkXaNos5otCuhbnNE9UHWbstHJ+lAYsDKBkZhbrpAzUXllcx6RkYD47lsSHAgMB
AAGjggJoMIICZDAdBgNVHQ4EFgQUy24O75cqYXMVCVDbSs0xILY8SrUwHwYDVR0j
BBgwFoAUfLJvdkL9a0y/NfvuRV8e+wyfCkUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv
cnkvOGE4NDhhZGY5MmVlNGQ4NDAxOTNkZjQ1YTBlYTY2ODcvMS83Q0IyNkY3NjQy
RkQ2QjRDQkYzNUZCRUU0NTVGMUVGQjBDOUYwQTQ1LmNybDCBngYIKwYBBQUHAQEE
gZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5Lzg5MjcwZjZjLWEzZmUtNDI5OS1iMDc5LTMwOWVkOTdm
MzgyNC8wLzdDQjI2Rjc2NDJGRDZCNENCRjM1RkJFRTQ1NUYxRUZCMEM5RjBBNDUu
Y2VyMIGqBggrBgEFBQcBCwSBnTCBmjCBlwYIKwYBBQUHMAuGgYpyc3luYzovL3Jw
a2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY5MmVlNGQ4NDAxOTNk
ZjQ1YTBlYTY2ODcvMS8zMjYxMzEzNDNhMzczNTM4MzQzYTM2MzAzNzY0M2EzYTJm
MzQzODJkMzQzODIwM2QzZTIwMzEzNjM5MzAzOS5yb2EwGAYDVR0gAQH/BA4wDDAK
BggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoUdYRgfTAN
BgkqhkiG9w0BAQsFAAOCAQEAhxjK3AZdLoRFmjmdnZpVdkqXSKCAGxa5+kLZrHYv
/NcS45eP5UfxI90Eu9y2s7hLJWn9sNVLHy9lV8rSvl3G4mxl7LEwtwxRl8qyYJXi
5HM4hX+iX4sja5Le/GXj/hBEghO/KChxw+H47BODs+YNbW60fGQ7WN3/TrT45rOn
l9ZrzSHf5Zh0f2f6/x+jSIwsgkarFfd2aNKds9kdbLaXsP7wOJ2aMKnlkle8d51W
YzB35jo31Kag1Sc5YuD1uHuRL8atxXd7vxqNSOF8LwDV1BjJaJLwSbHierSnpmq9
kJQJu+QGsb2IJBcTTITHfFOo32Dp9XRGSR28T0VH47AiXg==
-----END CERTIFICATE-----
Generated at Sat Apr 19 00:40:13 2025 by rpki-client