Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363038323a3a2f34382d3438203d3e203136393039.roa
File: 326131343a373538343a363038323a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier: +vfZocyxhBYdGdg4Qx5GnOPnbRW3yE5J/ORQ3Clv9g8=
Subject key identifier: 60:BB:6D:97:49:A0:CC:5A:E8:01:3E:BC:58:5C:5D:7D:49:52:D0:C1
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 750298F2AEC4D3C0BCDA4168D26B3AFC45311888
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363038323a3a2f34382d3438203d3e203136393039.roa
Signing time: Mon 10 Mar 2025 11:54:57 +0000
ROA not before: Mon 10 Mar 2025 11:49:57 +0000
ROA not after: Mon 09 Mar 2026 11:54:57 +0000
asID: 16909
IP address blocks: 2a14:7584:6082::/48 maxlen: 48
Validation: Failed, certificate revoked on Sun 16 Mar 2025 16:16:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
75:02:98:f2:ae:c4:d3:c0:bc:da:41:68:d2:6b:3a:fc:45:31:18:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: Mar 10 11:49:57 2025 GMT
Not After : Mar 9 11:54:57 2026 GMT
Subject: CN=60BB6D9749A0CC5AE8013EBC585C5D7D4952D0C1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:e5:74:30:42:5c:3b:aa:9c:bd:d6:88:c3:c8:
4c:cc:57:48:d4:52:44:56:03:5b:1d:36:a3:2b:a2:
6f:7a:e7:80:7f:f7:49:fb:c0:a7:f3:79:a6:3c:00:
e5:4b:8a:ec:8c:7c:09:37:d7:e4:8c:bf:c3:e7:62:
2c:72:75:1a:92:5e:2c:a8:e1:27:80:1a:fa:58:90:
8f:0f:c1:81:0b:b5:47:f8:e4:02:7d:49:e4:98:2c:
60:ee:3e:f9:98:65:55:4d:e4:bd:37:de:75:f3:57:
0d:43:36:0b:cc:f3:54:1f:bc:3d:81:25:23:6c:82:
78:52:f8:22:68:c6:7e:2b:07:dd:da:22:b3:07:f9:
97:37:bd:63:54:39:d7:b0:51:8c:f1:13:fd:bd:f0:
9a:ac:74:43:85:ff:31:f9:3d:dd:f0:97:bd:91:a2:
4e:dc:4f:5e:0e:2e:8e:41:23:4e:52:ab:cd:66:fd:
a6:f0:72:85:07:80:bb:fc:62:00:a9:61:3a:ea:ea:
07:bc:6a:d6:16:67:f7:af:ad:43:a4:17:bd:e2:17:
3b:6b:3e:06:83:e8:dd:f1:36:c1:8f:c1:95:e0:eb:
d5:9f:85:de:ed:ce:0b:4d:8e:32:b8:a7:58:88:bb:
57:81:09:61:93:dc:b6:80:4c:1d:98:18:38:bc:66:
c2:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:BB:6D:97:49:A0:CC:5A:E8:01:3E:BC:58:5C:5D:7D:49:52:D0:C1
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363038323a3a2f34382d3438203d3e203136393039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:6082::/48
Signature Algorithm: sha256WithRSAEncryption
2c:3b:51:39:03:f2:8e:fd:0c:7c:96:72:fe:9b:35:84:39:68:
b2:48:54:81:ac:bb:ea:e3:e6:f7:40:ec:da:99:35:27:80:4f:
49:73:2c:f1:49:14:1d:7c:1b:ec:ce:4f:ed:48:d7:24:51:e3:
8d:45:38:51:58:de:4f:66:24:d6:ac:c3:03:53:9d:f4:65:e5:
cf:ad:60:ef:7d:65:f3:28:99:ce:de:77:03:42:22:ca:d2:55:
d4:bb:84:c8:81:be:cc:6e:a9:3b:e2:dc:c3:8c:9e:84:cc:ce:
f9:51:c3:22:14:30:c0:56:cc:4c:0c:98:66:6c:b7:42:2a:67:
94:ca:5b:3b:f1:30:81:4d:78:6c:55:95:c2:d5:16:28:2c:18:
40:21:6c:df:71:96:0d:fa:59:07:b0:66:ad:77:1d:1c:e9:a7:
94:cd:52:81:ca:4b:ee:c0:77:18:99:8a:f2:11:ec:f6:ef:23:
e6:f5:f0:ea:80:9c:63:8e:3b:ec:9c:e6:c6:54:33:ab:4c:e6:
95:9d:c6:24:b6:15:c3:71:62:42:77:37:25:6a:8f:06:89:2a:
24:0c:1c:68:54:a2:c7:d4:7a:10:29:39:d3:4d:14:33:2a:a9:
64:41:95:fe:a4:70:04:63:1a:3f:ac:23:53:1b:8b:01:4e:dd:
1b:42:a6:87
-----BEGIN CERTIFICATE-----
MIIFXjCCBEagAwIBAgIUdQKY8q7E08C82kFo0ms6/EUxGIgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN0NCMjZGNzY0MkZENkI0Q0JGMzVGQkVFNDU1RjFFRkIw
QzlGMEE0NTAeFw0yNTAzMTAxMTQ5NTdaFw0yNjAzMDkxMTU0NTdaMDMxMTAvBgNV
BAMTKDYwQkI2RDk3NDlBMENDNUFFODAxM0VCQzU4NUM1RDdENDk1MkQwQzEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDK5XQwQlw7qpy91ojDyEzMV0jU
UkRWA1sdNqMrom9654B/90n7wKfzeaY8AOVLiuyMfAk31+SMv8PnYixydRqSXiyo
4SeAGvpYkI8PwYELtUf45AJ9SeSYLGDuPvmYZVVN5L033nXzVw1DNgvM81QfvD2B
JSNsgnhS+CJoxn4rB93aIrMH+Zc3vWNUOdewUYzxE/298JqsdEOF/zH5Pd3wl72R
ok7cT14OLo5BI05Sq81m/abwcoUHgLv8YgCpYTrq6ge8atYWZ/evrUOkF73iFztr
PgaD6N3xNsGPwZXg69Wfhd7tzgtNjjK4p1iIu1eBCWGT3LaATB2YGDi8ZsIlAgMB
AAGjggJoMIICZDAdBgNVHQ4EFgQUYLttl0mgzFroAT68WFxdfUlS0MEwHwYDVR0j
BBgwFoAUfLJvdkL9a0y/NfvuRV8e+wyfCkUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv
cnkvOGE4NDhhZGY5MmVlNGQ4NDAxOTNkZjQ1YTBlYTY2ODcvMS83Q0IyNkY3NjQy
RkQ2QjRDQkYzNUZCRUU0NTVGMUVGQjBDOUYwQTQ1LmNybDCBngYIKwYBBQUHAQEE
gZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5Lzg5MjcwZjZjLWEzZmUtNDI5OS1iMDc5LTMwOWVkOTdm
MzgyNC8wLzdDQjI2Rjc2NDJGRDZCNENCRjM1RkJFRTQ1NUYxRUZCMEM5RjBBNDUu
Y2VyMIGqBggrBgEFBQcBCwSBnTCBmjCBlwYIKwYBBQUHMAuGgYpyc3luYzovL3Jw
a2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY5MmVlNGQ4NDAxOTNk
ZjQ1YTBlYTY2ODcvMS8zMjYxMzEzNDNhMzczNTM4MzQzYTM2MzAzODMyM2EzYTJm
MzQzODJkMzQzODIwM2QzZTIwMzEzNjM5MzAzOS5yb2EwGAYDVR0gAQH/BA4wDDAK
BggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoUdYRggjAN
BgkqhkiG9w0BAQsFAAOCAQEALDtROQPyjv0MfJZy/ps1hDloskhUgay76uPm90Ds
2pk1J4BPSXMs8UkUHXwb7M5P7UjXJFHjjUU4UVjeT2Yk1qzDA1Od9GXlz61g731l
8yiZzt53A0IiytJV1LuEyIG+zG6pO+Lcw4yehMzO+VHDIhQwwFbMTAyYZmy3Qipn
lMpbO/EwgU14bFWVwtUWKCwYQCFs33GWDfpZB7BmrXcdHOmnlM1SgcpL7sB3GJmK
8hHs9u8j5vXw6oCcY4477JzmxlQzq0zmlZ3GJLYVw3FiQnc3JWqPBokqJAwcaFSi
x9R6ECk5000UMyqpZEGV/qRwBGMaP6wjUxuLAU7dG0Kmhw==
-----END CERTIFICATE-----
Generated at Sat Apr 19 00:46:59 2025 by rpki-client