Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363037653a3a2f34382d3438203d3e203136393039.roa
File: 326131343a373538343a363037653a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier: HPd/yk1WrowAYBH1hNuBTyc7m6EkNOEKIJdXpYG2Uoc=
Subject key identifier: 0E:DF:B5:D5:11:FB:12:1A:37:FA:ED:0B:50:5B:10:4F:38:7F:34:92
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 66F6DC91A8EC6791E1F493769B44CF0650978097
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363037653a3a2f34382d3438203d3e203136393039.roa
Signing time: Mon 10 Mar 2025 11:54:37 +0000
ROA not before: Mon 10 Mar 2025 11:49:37 +0000
ROA not after: Mon 09 Mar 2026 11:54:37 +0000
asID: 16909
IP address blocks: 2a14:7584:607e::/48 maxlen: 48
Validation: Failed, certificate revoked on Sun 16 Mar 2025 16:16:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
66:f6:dc:91:a8:ec:67:91:e1:f4:93:76:9b:44:cf:06:50:97:80:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: Mar 10 11:49:37 2025 GMT
Not After : Mar 9 11:54:37 2026 GMT
Subject: CN=0EDFB5D511FB121A37FAED0B505B104F387F3492
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:2a:15:e3:5b:59:a6:e6:87:77:e3:91:5e:06:
8f:31:d3:6d:e1:fc:88:d2:37:e2:a4:71:a2:03:55:
ba:af:37:c5:9a:10:b5:45:e9:07:01:f8:5a:cc:f7:
54:ac:14:31:9f:74:94:a6:5c:8b:fd:df:5d:85:ab:
9a:a6:a4:80:fe:67:3d:86:f0:ae:be:e1:54:f1:c7:
6a:44:5d:25:d9:cf:16:56:cc:76:62:0d:6f:28:69:
90:01:70:d7:48:7f:ce:f9:b8:7c:c2:b9:fb:84:76:
09:33:b0:f7:14:a2:04:18:15:6f:9d:a7:82:28:64:
4c:2d:81:d2:bc:20:4d:f4:36:51:09:84:4e:36:d3:
75:a0:a6:6c:73:a5:f2:fe:44:bc:41:79:17:36:1d:
d6:b0:94:b8:5f:0f:24:63:99:6e:8e:59:17:70:3e:
df:c5:2e:85:39:f9:18:60:15:a6:51:7c:cf:90:a6:
54:4d:c2:a0:7f:b5:0e:52:cb:51:33:12:9f:a3:0a:
46:d0:57:fd:de:cc:17:64:a4:a2:8d:ba:63:c2:23:
c7:6b:d2:c3:42:1b:6f:f0:7b:40:97:fa:72:d7:7b:
ac:b1:e9:18:b1:b2:5b:17:1a:93:33:73:ee:19:fa:
40:30:d3:92:69:a4:32:6c:b2:07:ea:39:65:a9:06:
13:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:DF:B5:D5:11:FB:12:1A:37:FA:ED:0B:50:5B:10:4F:38:7F:34:92
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363037653a3a2f34382d3438203d3e203136393039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:607e::/48
Signature Algorithm: sha256WithRSAEncryption
63:66:a5:6b:21:1f:f4:1a:cd:af:64:4d:df:2d:3a:39:c2:47:
a8:8a:d7:21:bd:67:e8:3e:ce:09:18:ce:ce:f4:5a:84:a7:51:
97:f6:23:90:0f:78:8a:0d:62:24:26:13:d5:aa:e6:34:a6:59:
70:54:9b:2b:73:4b:cc:1c:00:bf:61:64:54:36:e5:17:eb:48:
27:4a:c4:43:40:a2:13:53:5d:f7:42:8a:8d:a3:e9:f8:da:55:
be:41:7c:05:f1:d1:20:26:7a:0d:0d:c8:e1:5d:25:4e:98:f7:
56:0c:90:6a:2f:60:a3:f6:25:89:2c:78:3a:48:e1:c1:d7:0e:
b3:36:ad:6a:1a:5e:ae:92:17:29:de:2b:1f:fd:45:98:37:0d:
44:1b:9f:95:2a:75:a7:e1:63:d5:ad:22:d3:2c:65:e3:7f:7c:
a7:6d:e4:20:b2:a0:f3:d0:67:0f:f2:ac:40:c6:fe:04:6c:25:
7e:aa:36:0a:ae:6a:da:f2:b6:4d:70:04:13:04:9e:19:67:3c:
ba:e9:a1:b4:cb:e5:87:4d:6f:cb:52:16:c8:2b:4b:2c:5c:e5:
fb:70:b1:83:2d:7a:2a:32:e8:21:96:c9:12:d5:3a:e3:dc:12:
8f:c8:b7:83:c0:39:1e:aa:ba:59:4a:53:87:34:14:5d:ed:08:
2c:c9:c5:54
-----BEGIN CERTIFICATE-----
MIIFXjCCBEagAwIBAgIUZvbckajsZ5Hh9JN2m0TPBlCXgJcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN0NCMjZGNzY0MkZENkI0Q0JGMzVGQkVFNDU1RjFFRkIw
QzlGMEE0NTAeFw0yNTAzMTAxMTQ5MzdaFw0yNjAzMDkxMTU0MzdaMDMxMTAvBgNV
BAMTKDBFREZCNUQ1MTFGQjEyMUEzN0ZBRUQwQjUwNUIxMDRGMzg3RjM0OTIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBKhXjW1mm5od345FeBo8x023h
/IjSN+KkcaIDVbqvN8WaELVF6QcB+FrM91SsFDGfdJSmXIv9312Fq5qmpID+Zz2G
8K6+4VTxx2pEXSXZzxZWzHZiDW8oaZABcNdIf875uHzCufuEdgkzsPcUogQYFW+d
p4IoZEwtgdK8IE30NlEJhE4203WgpmxzpfL+RLxBeRc2HdawlLhfDyRjmW6OWRdw
Pt/FLoU5+RhgFaZRfM+QplRNwqB/tQ5Sy1EzEp+jCkbQV/3ezBdkpKKNumPCI8dr
0sNCG2/we0CX+nLXe6yx6RixslsXGpMzc+4Z+kAw05JppDJssgfqOWWpBhOnAgMB
AAGjggJoMIICZDAdBgNVHQ4EFgQUDt+11RH7Eho3+u0LUFsQTzh/NJIwHwYDVR0j
BBgwFoAUfLJvdkL9a0y/NfvuRV8e+wyfCkUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv
cnkvOGE4NDhhZGY5MmVlNGQ4NDAxOTNkZjQ1YTBlYTY2ODcvMS83Q0IyNkY3NjQy
RkQ2QjRDQkYzNUZCRUU0NTVGMUVGQjBDOUYwQTQ1LmNybDCBngYIKwYBBQUHAQEE
gZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5Lzg5MjcwZjZjLWEzZmUtNDI5OS1iMDc5LTMwOWVkOTdm
MzgyNC8wLzdDQjI2Rjc2NDJGRDZCNENCRjM1RkJFRTQ1NUYxRUZCMEM5RjBBNDUu
Y2VyMIGqBggrBgEFBQcBCwSBnTCBmjCBlwYIKwYBBQUHMAuGgYpyc3luYzovL3Jw
a2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY5MmVlNGQ4NDAxOTNk
ZjQ1YTBlYTY2ODcvMS8zMjYxMzEzNDNhMzczNTM4MzQzYTM2MzAzNzY1M2EzYTJm
MzQzODJkMzQzODIwM2QzZTIwMzEzNjM5MzAzOS5yb2EwGAYDVR0gAQH/BA4wDDAK
BggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoUdYRgfjAN
BgkqhkiG9w0BAQsFAAOCAQEAY2alayEf9BrNr2RN3y06OcJHqIrXIb1n6D7OCRjO
zvRahKdRl/YjkA94ig1iJCYT1armNKZZcFSbK3NLzBwAv2FkVDblF+tIJ0rEQ0Ci
E1Nd90KKjaPp+NpVvkF8BfHRICZ6DQ3I4V0lTpj3VgyQai9go/YliSx4OkjhwdcO
szatahperpIXKd4rH/1FmDcNRBuflSp1p+Fj1a0i0yxl4398p23kILKg89BnD/Ks
QMb+BGwlfqo2Cq5q2vK2TXAEEwSeGWc8uumhtMvlh01vy1IWyCtLLFzl+3Cxgy16
KjLoIZbJEtU649wSj8i3g8A5Hqq6WUpThzQUXe0ILMnFVA==
-----END CERTIFICATE-----
Generated at Sat Apr 19 00:40:12 2025 by rpki-client