Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363037663a3a2f34382d3438203d3e203136393039.roa
File: 326131343a373538343a363037663a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier: wQM+J1+NoV8Hk9bSZWMZvvnLxOn8WtWqQsD9hSLEWlY=
Subject key identifier: E7:D8:D5:7B:CD:9A:AF:14:DD:EC:13:A5:EA:D7:6A:0A:6E:B2:49:8B
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 23D1858727A8CB57976A723F75FD177F78EAE276
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363037663a3a2f34382d3438203d3e203136393039.roa
Signing time: Mon 10 Mar 2025 11:54:38 +0000
ROA not before: Mon 10 Mar 2025 11:49:38 +0000
ROA not after: Mon 09 Mar 2026 11:54:38 +0000
asID: 16909
IP address blocks: 2a14:7584:607f::/48 maxlen: 48
Validation: Failed, certificate revoked on Sun 16 Mar 2025 16:16:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
23:d1:85:87:27:a8:cb:57:97:6a:72:3f:75:fd:17:7f:78:ea:e2:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: Mar 10 11:49:38 2025 GMT
Not After : Mar 9 11:54:38 2026 GMT
Subject: CN=E7D8D57BCD9AAF14DDEC13A5EAD76A0A6EB2498B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:7c:79:aa:8f:c7:e0:56:82:6a:fd:03:f8:5c:
75:f5:7b:2e:f7:07:f4:7d:43:63:92:a2:de:4c:3a:
9d:3d:e9:d8:bb:93:ab:a7:90:a1:c6:5b:e9:7b:6b:
a5:12:9e:83:53:88:99:5f:59:9b:c1:0d:73:64:2f:
59:e9:67:f6:4f:f9:c2:6a:df:6f:54:e5:15:9e:d2:
6b:d0:e6:e3:6d:3f:f3:94:40:10:17:20:95:e0:29:
81:02:cd:4b:4a:81:75:fe:e9:7c:3d:3f:fd:b8:f0:
f4:87:c3:f0:64:7f:c7:9f:a4:1f:14:35:69:d4:a1:
5e:35:a1:1d:62:4e:4a:c5:9f:05:fd:6b:a8:f7:99:
0c:32:21:65:cb:03:3a:46:6b:7b:66:50:a8:77:6d:
17:75:2e:27:bc:57:6e:f5:e2:61:cd:6c:db:66:7e:
8f:73:fa:28:6d:cf:2e:c2:8e:c6:fe:7b:dd:4d:a8:
24:fb:54:2c:71:9c:d5:4d:b2:37:79:55:93:9b:db:
c5:07:87:82:0b:57:99:58:66:98:3a:7c:76:91:48:
6b:0a:26:23:66:9b:a7:47:6f:2d:d2:43:93:cf:79:
cd:f3:73:30:e1:2d:1b:7c:d4:9d:b3:8d:f0:53:44:
ff:c4:ef:02:40:03:05:bc:28:38:db:5f:27:45:d9:
03:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:D8:D5:7B:CD:9A:AF:14:DD:EC:13:A5:EA:D7:6A:0A:6E:B2:49:8B
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363037663a3a2f34382d3438203d3e203136393039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:607f::/48
Signature Algorithm: sha256WithRSAEncryption
3d:1b:cf:c9:f4:1f:0e:20:63:a7:e4:59:6e:b9:49:69:de:c5:
e1:10:3d:8b:98:be:93:79:6c:7c:84:20:48:00:38:c4:6c:7e:
af:b7:a5:2f:79:8b:30:2f:be:59:53:f5:3a:55:6c:1f:c8:79:
80:ea:4d:4d:9c:28:77:6e:c3:67:ec:97:78:05:ea:e5:67:a2:
81:b8:93:e8:cf:a0:fc:f2:46:80:c2:01:0d:c9:11:f7:6d:8a:
b7:31:11:80:44:6d:53:00:d9:93:b9:26:ab:f1:0f:0f:3e:b2:
38:7e:42:9a:9c:50:6f:04:5c:ca:a6:d4:87:e7:73:3c:df:68:
d8:10:92:6e:3a:49:0a:c5:6f:f4:92:75:a0:37:30:01:13:93:
9e:30:05:9c:d8:c3:1d:64:23:ef:7f:90:fe:74:74:60:e9:2e:
96:d0:bc:a5:8c:a0:2c:4b:b8:e5:86:43:ab:69:3e:c0:4a:dd:
88:a3:23:0b:6e:ab:6a:47:a2:2c:83:fe:ec:ab:00:ea:45:b6:
72:68:23:99:b4:f4:82:98:87:7f:da:14:ef:4f:43:c1:e1:fb:
1d:42:77:fa:fb:2c:8c:e8:88:00:4d:e0:75:bb:78:9b:2b:ef:
61:2b:b0:04:8d:18:4e:de:8e:f3:a3:01:7b:b8:eb:ad:2d:c6:
d3:ef:ae:f6
-----BEGIN CERTIFICATE-----
MIIFXjCCBEagAwIBAgIUI9GFhyeoy1eXanI/df0Xf3jq4nYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN0NCMjZGNzY0MkZENkI0Q0JGMzVGQkVFNDU1RjFFRkIw
QzlGMEE0NTAeFw0yNTAzMTAxMTQ5MzhaFw0yNjAzMDkxMTU0MzhaMDMxMTAvBgNV
BAMTKEU3RDhENTdCQ0Q5QUFGMTREREVDMTNBNUVBRDc2QTBBNkVCMjQ5OEIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCifHmqj8fgVoJq/QP4XHX1ey73
B/R9Q2OSot5MOp096di7k6unkKHGW+l7a6USnoNTiJlfWZvBDXNkL1npZ/ZP+cJq
329U5RWe0mvQ5uNtP/OUQBAXIJXgKYECzUtKgXX+6Xw9P/248PSHw/Bkf8efpB8U
NWnUoV41oR1iTkrFnwX9a6j3mQwyIWXLAzpGa3tmUKh3bRd1Lie8V2714mHNbNtm
fo9z+ihtzy7Cjsb+e91NqCT7VCxxnNVNsjd5VZOb28UHh4ILV5lYZpg6fHaRSGsK
JiNmm6dHby3SQ5PPec3zczDhLRt81J2zjfBTRP/E7wJAAwW8KDjbXydF2QMvAgMB
AAGjggJoMIICZDAdBgNVHQ4EFgQU59jVe82arxTd7BOl6tdqCm6ySYswHwYDVR0j
BBgwFoAUfLJvdkL9a0y/NfvuRV8e+wyfCkUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv
cnkvOGE4NDhhZGY5MmVlNGQ4NDAxOTNkZjQ1YTBlYTY2ODcvMS83Q0IyNkY3NjQy
RkQ2QjRDQkYzNUZCRUU0NTVGMUVGQjBDOUYwQTQ1LmNybDCBngYIKwYBBQUHAQEE
gZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5Lzg5MjcwZjZjLWEzZmUtNDI5OS1iMDc5LTMwOWVkOTdm
MzgyNC8wLzdDQjI2Rjc2NDJGRDZCNENCRjM1RkJFRTQ1NUYxRUZCMEM5RjBBNDUu
Y2VyMIGqBggrBgEFBQcBCwSBnTCBmjCBlwYIKwYBBQUHMAuGgYpyc3luYzovL3Jw
a2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY5MmVlNGQ4NDAxOTNk
ZjQ1YTBlYTY2ODcvMS8zMjYxMzEzNDNhMzczNTM4MzQzYTM2MzAzNzY2M2EzYTJm
MzQzODJkMzQzODIwM2QzZTIwMzEzNjM5MzAzOS5yb2EwGAYDVR0gAQH/BA4wDDAK
BggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoUdYRgfzAN
BgkqhkiG9w0BAQsFAAOCAQEAPRvPyfQfDiBjp+RZbrlJad7F4RA9i5i+k3lsfIQg
SAA4xGx+r7elL3mLMC++WVP1OlVsH8h5gOpNTZwod27DZ+yXeAXq5WeigbiT6M+g
/PJGgMIBDckR922KtzERgERtUwDZk7kmq/EPDz6yOH5CmpxQbwRcyqbUh+dzPN9o
2BCSbjpJCsVv9JJ1oDcwAROTnjAFnNjDHWQj73+Q/nR0YOkultC8pYygLEu45YZD
q2k+wErdiKMjC26rakeiLIP+7KsA6kW2cmgjmbT0gpiHf9oU709DweH7HUJ3+vss
jOiIAE3gdbt4myvvYSuwBI0YTt6O86MBe7jrrS3G0++u9g==
-----END CERTIFICATE-----
Generated at Sat Apr 19 00:41:15 2025 by rpki-client